From 1c7261773b5190ec17c7d161a83e00a979c54076 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Tue, 23 Oct 2012 14:07:13 -0400 Subject: Wait for the directory server to come up when updating the agent certificate. It is possible that either or both of the LDAP instances are being restarted during the renewal process. Make the script retry if this is the case. It is also safe to re-run this script if it fails. It will take the current ipaCert certificate and attempt to update the agent information in LDAP. https://fedorahosted.org/freeipa/ticket/3179 --- ipaserver/plugins/ldap2.py | 3 +++ 1 file changed, 3 insertions(+) (limited to 'ipaserver/plugins/ldap2.py') diff --git a/ipaserver/plugins/ldap2.py b/ipaserver/plugins/ldap2.py index 519f4613a..bf1a0d376 100644 --- a/ipaserver/plugins/ldap2.py +++ b/ipaserver/plugins/ldap2.py @@ -724,6 +724,9 @@ class ldap2(CrudBackend): raise errors.BadSearchFilter(info=info) except _ldap.NOT_ALLOWED_ON_NONLEAF: raise errors.NotAllowedOnNonLeaf() + except _ldap.SERVER_DOWN: + raise NetworkError(uri=self.ldap_uri, + error=u'LDAP Server Down') except _ldap.SUCCESS: pass except _ldap.LDAPError, e: -- cgit