From 60cbb2471829504edb207c0914edd56a962593cf Mon Sep 17 00:00:00 2001

From: Jan Cholasta <jcholast@redhat.com>

Date: Mon, 12 Oct 2015 14:58:40 +0200

Subject: [PATCH] upgrade: make sure ldap2 is connected in export_kra_agent_pem

https://fedorahosted.org/freeipa/ticket/5360

Reviewed-By: Ales 'alich' Marecek <amarecek@redhat.com>

---

 ipaserver/install/server/upgrade.py | 7 +++++++

 1 file changed, 7 insertions(+)

diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py

index 51a2dd3d0e3693c12f11579a84175c7719651da9..e0a45a097171613397db42e1c035f0d818a3ecf5 100644

--- a/ipaserver/install/server/upgrade.py

+++ b/ipaserver/install/server/upgrade.py

@@ -1252,6 +1252,13 @@ def export_kra_agent_pem():

         root_logger.info("KRA agent PEM file already exported")

         return

+    if not api.Backend.ldap2.isconnected():

+        try:

+            api.Backend.ldap2.connect(autobind=True)

+        except ipalib.errors.PublicError as e:

+            root_logger.error("Cannot connect to LDAP: %s", e)

+            return

+

     if not api.Command.kra_is_enabled()['result']:

         root_logger.info("KRA is not enabled")

         return

-- 

2.4.3