From b5e033ed72f4cc824b7ab71887bb88453f5d2775 Mon Sep 17 00:00:00 2001 From: Christian Heimes Date: Fri, 29 Jan 2021 09:42:01 +0100 Subject: [PATCH] Fix cert_request for KDC cert ca_kdc_check() expects an API object, not an LDAP connection. Issue was introduced in commit 8f4abf7bc1607fc44f528b8a443b69cb82269e69. See: https://pagure.io/freeipa/issue/6739 Fixes: https://pagure.io/freeipa/issue/8686 Signed-off-by: Christian Heimes Reviewed-By: Rob Crittenden --- ipaserver/plugins/cert.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ipaserver/plugins/cert.py b/ipaserver/plugins/cert.py index 4af5c97f5722a7799509764df93c2433661dba20..158dfa84f22cb887eb9a101cc34b1c6cdc590ee2 100644 --- a/ipaserver/plugins/cert.py +++ b/ipaserver/plugins/cert.py @@ -860,7 +860,7 @@ class cert_request(Create, BaseCertMethod, VirtualCommand): "with subject alt name '%s'.") % name) if not bypass_caacl: if principal_type == KRBTGT: - ca_kdc_check(ldap, alt_principal.hostname) + ca_kdc_check(self.api, alt_principal.hostname) else: caacl_check(alt_principal, ca, profile_id) -- 2.31.1