ac7d03
From b16fba6f07455cc62284f0a225e2cd6aa6253efb Mon Sep 17 00:00:00 2001
ac7d03
From: Tomas Krizek <tkrizek@redhat.com>
ac7d03
Date: Tue, 2 May 2017 19:26:04 +0200
ac7d03
Subject: [PATCH] upgrade: add missing suffix to http instance
ac7d03
ac7d03
During an upgrade, http.suffix is used to identify ldap entry when
ac7d03
configuring kdc proxy. When the suffix is missing, the script crashed
ac7d03
when enabling KDC proxy, because it used invalid DN.
ac7d03
ac7d03
Fixes https://pagure.io/freeipa/issue/6920
ac7d03
ac7d03
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
ac7d03
---
ac7d03
 ipaserver/install/server/upgrade.py | 1 +
ac7d03
 1 file changed, 1 insertion(+)
ac7d03
ac7d03
diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py
ac7d03
index 4d8fd666dfd4e918103b449d4c31bb7661727115..9aec2d857aee1a601f351218e253d44b14f6d4ec 100644
ac7d03
--- a/ipaserver/install/server/upgrade.py
ac7d03
+++ b/ipaserver/install/server/upgrade.py
ac7d03
@@ -1638,6 +1638,7 @@ def upgrade_configuration():
ac7d03
     http = httpinstance.HTTPInstance(fstore)
ac7d03
     http.fqdn = fqdn
ac7d03
     http.realm = api.env.realm
ac7d03
+    http.suffix = ipautil.realm_to_suffix(api.env.realm)
ac7d03
     http.configure_selinux_for_httpd()
ac7d03
     http.change_mod_nss_port_from_http()
ac7d03
 
ac7d03
-- 
ac7d03
2.9.3
ac7d03