From 7b7160452130a203622a7b0fd30e984add87ed87 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Thu, 17 Feb 2011 22:53:53 -0500 Subject: Fix NSS initialization errors during ipa-replica-prepare When enabling replication we make an SSL connection. I think the way this goes is python-ldap -> openldap -> NSS. It may be a problem in the openldap SSL client, maybe it isn't calling NSS_Shutdown(). In any case if we use ldapi instead the problem goes away. Back out the temporary code to ignore nss_shutdown errors. ticket 965 --- ipaserver/install/replication.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ipaserver/install') diff --git a/ipaserver/install/replication.py b/ipaserver/install/replication.py index 0bf0e218..81581974 100644 --- a/ipaserver/install/replication.py +++ b/ipaserver/install/replication.py @@ -60,7 +60,7 @@ def enable_replication_version_checking(hostname, realm, dirman_passwd): enabled then enable it and restart 389-ds. If it is enabled the do nothing. """ - conn = ipaldap.IPAdmin(hostname, port=PORT, cacert=CACERT) + conn = ipaldap.IPAdmin(hostname, realm=realm, ldapi=True) if dirman_passwd: conn.do_simple_bind(bindpw=dirman_passwd) else: -- cgit