From 3249ddc2c19f6f5ded11823b345c9c58bae4750b Mon Sep 17 00:00:00 2001 From: Matthew Harmsen Date: Tue, 23 May 2017 11:46:41 -0600 Subject: Always check FIPS mode at installation time - Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error --- base/server/python/pki/server/deployment/scriptlets/initialization.py | 2 ++ 1 file changed, 2 insertions(+) (limited to 'base/server/python') diff --git a/base/server/python/pki/server/deployment/scriptlets/initialization.py b/base/server/python/pki/server/deployment/scriptlets/initialization.py index 0e315431f..4dc4e9a80 100644 --- a/base/server/python/pki/server/deployment/scriptlets/initialization.py +++ b/base/server/python/pki/server/deployment/scriptlets/initialization.py @@ -42,6 +42,8 @@ class PkiScriptlet(pkiscriptlet.AbstractBasePkiScriptlet): # ALWAYS establish 'uid' and 'gid' deployer.identity.set_uid(deployer.mdict['pki_user']) deployer.identity.set_gid(deployer.mdict['pki_group']) + # ALWAYS check FIPS mode + deployer.fips.is_fips_enabled() # ALWAYS initialize HSMs (when and if present) deployer.hsm.initialize() if config.str2bool(deployer.mdict['pki_skip_installation']): -- cgit