From 60cbb2471829504edb207c0914edd56a962593cf Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 12 Oct 2015 14:58:40 +0200 Subject: [PATCH] upgrade: make sure ldap2 is connected in export_kra_agent_pem https://fedorahosted.org/freeipa/ticket/5360 Reviewed-By: Ales 'alich' Marecek --- ipaserver/install/server/upgrade.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py index 51a2dd3d0e3693c12f11579a84175c7719651da9..e0a45a097171613397db42e1c035f0d818a3ecf5 100644 --- a/ipaserver/install/server/upgrade.py +++ b/ipaserver/install/server/upgrade.py @@ -1252,6 +1252,13 @@ def export_kra_agent_pem(): root_logger.info("KRA agent PEM file already exported") return + if not api.Backend.ldap2.isconnected(): + try: + api.Backend.ldap2.connect(autobind=True) + except ipalib.errors.PublicError as e: + root_logger.error("Cannot connect to LDAP: %s", e) + return + if not api.Command.kra_is_enabled()['result']: root_logger.info("KRA is not enabled") return -- 2.4.3