From f49068ecd3484b4898517854b9886bd3b0691691 Mon Sep 17 00:00:00 2001

From: Thomas Woerner <twoerner@redhat.com>

Date: Fri, 27 Jul 2018 12:15:17 +0200

Subject: [PATCH] ipaserver/plugins/cert.py: Added reason to raise of

 errors.NotFound

In the case that enabledService is not found ipaConfigString kdc entry, a

NotFound error was raised without setting the reason. This resulted in a

traceback.

Fixes: https://pagure.io/freeipa/issue/7652

Reviewed-By: Rob Crittenden <rcritten@redhat.com>

---

 ipaserver/plugins/cert.py | 3 ++-

 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ipaserver/plugins/cert.py b/ipaserver/plugins/cert.py

index db624357af189753980927655215b17c06291a15..0663272c9b4fd73225f63fe52d8d31157d5cc690 100644

--- a/ipaserver/plugins/cert.py

+++ b/ipaserver/plugins/cert.py

@@ -301,7 +301,8 @@ def ca_kdc_check(api_instance, hostname):

         ipaconfigstring = {val.lower() for val in kdc_entry['ipaConfigString']}

         if 'enabledservice' not in ipaconfigstring:

-            raise errors.NotFound()

+            raise errors.NotFound(

+                reason=_("enabledService not in ipaConfigString kdc entry"))

     except errors.NotFound:

         raise errors.ACIError(

-- 

2.17.1