8558a7
From accc490a5f1db734c94e739d9b9638d44d60d21c Mon Sep 17 00:00:00 2001
8558a7
From: Aleksei Slaikovskii <aslaikov@redhat.com>
8558a7
Date: Mon, 23 Oct 2017 11:17:32 +0200
8558a7
Subject: [PATCH] Add a notice to restart ipa services after certs are
8558a7
 installed
8558a7
8558a7
Adding notice for user to restart services after
8558a7
ipa-server-certinstall.
8558a7
8558a7
https://pagure.io/freeipa/issue/7016
8558a7
8558a7
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
8558a7
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
8558a7
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
8558a7
---
8558a7
 install/tools/man/ipa-server-certinstall.1  | 3 ++-
8558a7
 ipaserver/install/ipa_server_certinstall.py | 5 +++++
8558a7
 2 files changed, 7 insertions(+), 1 deletion(-)
8558a7
8558a7
diff --git a/install/tools/man/ipa-server-certinstall.1 b/install/tools/man/ipa-server-certinstall.1
8558a7
index 35cd8c6c711119d7c782c6a89ac78b4894cec073..00fd03b6bc2184ec2bbc099fd9799551c07d2390 100644
8558a7
--- a/install/tools/man/ipa-server-certinstall.1
8558a7
+++ b/install/tools/man/ipa-server-certinstall.1
8558a7
@@ -28,7 +28,8 @@ PKCS#12 is a file format used to safely transport SSL certificates and public/pr
8558a7
 
8558a7
 They may be generated and managed using the NSS pk12util command or the OpenSSL pkcs12 command.
8558a7
 
8558a7
-The service(s) are not automatically restarted. In order to use the newly installed certificate(s) you will need to manually restart the Directory and/or Apache servers.
8558a7
+The service(s) are not automatically restarted. In order to use the newly installed certificate(s) you will need to manually restart the Directory, Apache and/or Krb5kdc servers.
8558a7
+
8558a7
 .SH "OPTIONS"
8558a7
 .TP 
8558a7
 \fB\-d\fR, \fB\-\-dirsrv\fR
8558a7
diff --git a/ipaserver/install/ipa_server_certinstall.py b/ipaserver/install/ipa_server_certinstall.py
8558a7
index 9c8f6e81a802e1a87bab1fd15f729e10676fe3a3..ec283705a4038239ddf0c6bacaac200936ed04e8 100644
8558a7
--- a/ipaserver/install/ipa_server_certinstall.py
8558a7
+++ b/ipaserver/install/ipa_server_certinstall.py
8558a7
@@ -17,6 +17,7 @@
8558a7
 # You should have received a copy of the GNU General Public License
8558a7
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
8558a7
 #
8558a7
+from __future__ import print_function
8558a7
 
8558a7
 import os
8558a7
 import os.path
8558a7
@@ -121,6 +122,10 @@ class ServerCertInstall(admintool.AdminTool):
8558a7
         if self.options.kdc:
8558a7
             self.install_kdc_cert()
8558a7
 
8558a7
+        print(
8558a7
+            "Please restart ipa services after installing certificate "
8558a7
+            "(ipactl restart)")
8558a7
+
8558a7
         api.Backend.ldap2.disconnect()
8558a7
 
8558a7
     def install_dirsrv_cert(self):
8558a7
-- 
8558a7
2.14.3
8558a7