From 7ce3320996e9666581a2b4495b5063b5d99aa937 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Tue, 15 Oct 2013 17:49:07 +0000 Subject: Do not start the service in stopped_service if it was not running before. This fixes a possible NSS database corruption in renew_ca_cert. --- ipaserver/install/installutils.py | 3 --- 1 file changed, 3 deletions(-) diff --git a/ipaserver/install/installutils.py b/ipaserver/install/installutils.py index c6376d82..4cc33ac5 100644 --- a/ipaserver/install/installutils.py +++ b/ipaserver/install/installutils.py @@ -821,9 +821,6 @@ def stopped_service(service, instance_name=""): root_logger.debug('Service %s%s is not running, continue.', service, log_instance_name) yield - root_logger.debug('Starting %s%s.', service, log_instance_name) - ipaservices.knownservices[service].start(instance_name) - return else: # Stop the service, do the required stuff and start it again root_logger.debug('Stopping %s%s.', service, log_instance_name) -- cgit