From ad0f85945daa0b0bfbddbcde992c5388c170518f Mon Sep 17 00:00:00 2001 From: Aleksei Slaikovskii Date: Wed, 18 Oct 2017 09:52:08 +0200 Subject: [PATCH] Less confusing message for PKINIT configuration during install The message about an error during replica setup was causing the users to think the installation gone wrong even though this was an expected behavior when ipa-replica-install was ran without --no-pkinit flag and CA somehow is not reachable which defines that there is something wrong in a topology but does not lead to failure of the replica's installation. So now installation will not print error messages to stdout but rather will give a recomendation to user and write the old error message to log as a warning so it still will be easy to find if needed. https://pagure.io/freeipa/issue/7179 Reviewed-By: Tomas Krizek --- ipaserver/install/krbinstance.py | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/ipaserver/install/krbinstance.py b/ipaserver/install/krbinstance.py index 6b51e65d1ec985bfc01f167aea3fe3ca11c7ec29..34fe46aa8ef297bf69eb74953c956ad9c3d30def 100644 --- a/ipaserver/install/krbinstance.py +++ b/ipaserver/install/krbinstance.py @@ -494,8 +494,17 @@ class KrbInstance(service.Service): self._install_pkinit_ca_bundle() self.pkinit_enable() except RuntimeError as e: - root_logger.error("PKINIT certificate request failed: %s", e) - root_logger.error("Failed to configure PKINIT") + root_logger.warning("PKINIT certificate request failed: %s", e) + root_logger.warning("Failed to configure PKINIT") + + self.print_msg("Full PKINIT configuration did not succeed") + self.print_msg( + "The setup will only install bits " + "essential to the server functionality") + self.print_msg( + "You can enable PKINIT after the " + "setup completed using 'ipa-pkinit-manage'") + self.stop_tracking_certs() self.issue_selfsigned_pkinit_certs() -- 2.13.5