diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2014-08-08 16:09:42 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2012-09-06 19:09:18 -0400 |
| commit | 0f81268ec4a006625c8286ac7c6f5fed5aab7346 (patch) | |
| tree | 849b599137a4e88f9c364c9867b08977c12d516a /install/restart_scripts/restart_dirsrv | |
| parent | f33adf22f80ebcdc0a17d732af99e0529df654f2 (diff) | |
| download | freeipa-0f81268ec4a006625c8286ac7c6f5fed5aab7346.tar.gz freeipa-0f81268ec4a006625c8286ac7c6f5fed5aab7346.tar.xz freeipa-0f81268ec4a006625c8286ac7c6f5fed5aab7346.zip | |
Fix some restart script issues found with certificate renewal.
The restart_dirsrv script wasn't initializing the api so the
startup_timeout wasn't available.
The subsystemCert cert-pki-ca definition was missing so we didn't
know which certificate to update in CS.cfg.
Add some documentation and a pause between restarts for the
renew_ca_cert script so that when the CA subsystem certs are renewed
they don't all try to restart the CA at the same time.
https://fedorahosted.org/freeipa/ticket/3006
Diffstat (limited to 'install/restart_scripts/restart_dirsrv')
| -rw-r--r-- | install/restart_scripts/restart_dirsrv | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/install/restart_scripts/restart_dirsrv b/install/restart_scripts/restart_dirsrv index d6bbbbc3f..a9bb897ba 100644 --- a/install/restart_scripts/restart_dirsrv +++ b/install/restart_scripts/restart_dirsrv @@ -22,12 +22,16 @@ import sys import syslog from ipapython import services as ipaservices +from ipalib import api try: instance = sys.argv[1] except IndexError: instance = "" +api.bootstrap(context='restart') +api.finalize() + syslog.syslog(syslog.LOG_NOTICE, "certmonger restarted dirsrv instance '%s'" % instance) try: |