From 81af68d3e3b1a89f799693e7f7ecda59f57abfe4 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Mon, 30 Nov 2015 14:04:08 +1100 Subject: Avoid profile race conditions by tracking entryUSN Avoid race conditions in the LDAPProfileSubsystem by tracking the most recently known entryUSN of profiles' LDAP entries. As part of this change, add the commitProfile method to the IProfileSubsystem interface, remove commit behaviour from the enableProfile and disableProfile methods and update ProfileService and ProfileApproveServlet to commit the profile (using the commitProfile method) where needed. Part of: https://fedorahosted.org/pki/ticket/1700 --- base/common/src/com/netscape/certsrv/profile/IProfileSubsystem.java | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'base/common/src/com/netscape') diff --git a/base/common/src/com/netscape/certsrv/profile/IProfileSubsystem.java b/base/common/src/com/netscape/certsrv/profile/IProfileSubsystem.java index b7071fe75..b7b06b92b 100644 --- a/base/common/src/com/netscape/certsrv/profile/IProfileSubsystem.java +++ b/base/common/src/com/netscape/certsrv/profile/IProfileSubsystem.java @@ -93,6 +93,11 @@ public interface IProfileSubsystem extends ISubsystem { public void disableProfile(String id) throws EProfileException; + /** + * Commit a profile's underlying config store. + */ + public void commitProfile(String id) throws EProfileException; + /** * Retrieves the id of the implementation of the given profile. * -- cgit