[freeipa PR#2126][opened] [Backport][ipa-4-6] Auto-retry failed certmonger requests
by tiran
URL: https://github.com/freeipa/freeipa/pull/2126
Author: tiran
Title: #2126: [Backport][ipa-4-6] Auto-retry failed certmonger requests
Action: opened
PR body:
"""
Manual backport of PR #2122 to 4.6 branch
During parallel replica installation, a request sometimes fails with
CA_REJECTED or CA_UNREACHABLE. The error occur when the master is
either busy or some information haven't been replicated yet. Even
a stuck request can be recovered, e.g. when permission and group
information have been replicated.
A new function request_and_retry_cert() automatically resubmits failing
requests until it times out.
``ipa-client-install --request-cert`` now also waits until the cert has been requested and no longer silence errors.
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2126/head:pr2126
git checkout pr2126
5 years, 9 months
[freeipa PR#2122][opened] Auto-retry failing certmonger requests
by tiran
URL: https://github.com/freeipa/freeipa/pull/2122
Author: tiran
Title: #2122: Auto-retry failing certmonger requests
Action: opened
PR body:
"""
During parallel replica installation, a request sometimes fails with
CA_REJECTED or CA_UNREACHABLE. The error occur when the master is
either busy or some information haven't been replicated yet. Even
a stuck request can be recovered, e.g. when permission and group
information have been replicated.
A new function request_and_retry_cert() automatically resubmits failing
requests until it times out.
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2122/head:pr2122
git checkout pr2122
5 years, 9 months
[freeipa PR#2120][opened] Fix race condition in get_locations_records()
by tiran
URL: https://github.com/freeipa/freeipa/pull/2120
Author: tiran
Title: #2120: Fix race condition in get_locations_records()
Action: opened
PR body:
"""
The method IPASystemRecords.get_locations_records() has a race condition.
The IPASystemRecords object creates a mapping of server names to server
data. get_locations_records() uses server_find() again to get a list of
servers, but then operates on the cached dict of server names.
In parallel replication case, the second server_find() call in
get_locations_records() can return additional servers. Since the rest of
the code operates on the cached data, the method then fails with a KeyError.
server_data is now an OrderedDict to keep same sorting as with
server_find().
Fixes: https://pagure.io/freeipa/issue/7566
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2120/head:pr2120
git checkout pr2120
5 years, 9 months