Blame SOURCES/0006-ipa-submit-Retry-without-ca-on-OptionError.patch

6696b9
From 301e56c06192649bc33ddbda77ac55c0fb69f2a0 Mon Sep 17 00:00:00 2001
6696b9
From: Nalin Dahyabhai <nalin@redhat.com>
6696b9
Date: Tue, 14 Jun 2016 15:59:10 -0400
6696b9
Subject: [PATCH] ipa-submit: Retry without "ca" on OptionError
6696b9
6696b9
Add a fallback for when the IPA server returns error 3005 ("OptionError")
6696b9
when we've tried to use the "ca" named argument in a request.  As we did
6696b9
with "profile_id" earlier, take a guess that it didn't understand the
6696b9
most recently-added option that we're setting, and retry without it set.
6696b9
---
6696b9
 src/ipa.c | 8 ++++++++
6696b9
 1 file changed, 8 insertions(+)
6696b9
6696b9
diff --git a/src/ipa.c b/src/ipa.c
6696b9
index f2736c6f37948df902b65157480fc0c29ec58c3e..f8abe609a603b614067e56ebe9935472b647ed99 100644
6696b9
--- a/src/ipa.c
6696b9
+++ b/src/ipa.c
6696b9
@@ -387,6 +387,14 @@ submit:
6696b9
 		switch (i / 1000) {
6696b9
 		case 2: /* authorization error - permanent */
6696b9
 		case 3: /* invocation error - permanent */
6696b9
+			if ((i == 3005) && (issuer != NULL)) {
6696b9
+				/* Most likely the server didn't understand the
6696b9
+				 * "ca" argument.  At least, at this
6696b9
+				 * point.  Randomly dropping arguments is not
6696b9
+				 * really an extensible solution, though. */
6696b9
+				issuer = NULL;
6696b9
+				goto submit;
6696b9
+			}
6696b9
 			if ((i == 3005) && (profile != NULL)) {
6696b9
 				/* Most likely the server didn't understand the
6696b9
 				 * "profile_id" argument.  At least, at this
6696b9
-- 
6696b9
2.9.0
6696b9