summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2014-11-06 16:10:01 -0500
committerPetr Vobornik <pvoborni@redhat.com>2014-11-13 13:16:12 +0100
commit606de21dd565cf0becc7f33e4d26565acf6940ae (patch)
tree9603adf57cda0d6d52cdeba341c6e41169358bd5
parent1b22a53717cd2ead8a8f3fec84d04dac698d8925 (diff)
downloadfreeipa-606de21dd565cf0becc7f33e4d26565acf6940ae.tar.gz
freeipa-606de21dd565cf0becc7f33e4d26565acf6940ae.tar.xz
freeipa-606de21dd565cf0becc7f33e4d26565acf6940ae.zip
Search using proper scope when connecting CA instances
The wrong search scope was being used when trying to determine if a given master had a CA installed when trying to create a new connection. https://fedorahosted.org/freeipa/ticket/4704 Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com>
-rwxr-xr-xinstall/tools/ipa-csreplica-manage2
1 files changed, 1 insertions, 1 deletions
diff --git a/install/tools/ipa-csreplica-manage b/install/tools/ipa-csreplica-manage
index c534446d7..6f6c6c75a 100755
--- a/install/tools/ipa-csreplica-manage
+++ b/install/tools/ipa-csreplica-manage
@@ -303,7 +303,7 @@ def add_link(realm, replica1, replica2, dirman_passwd, options):
dn = DN(('cn', 'CA'), ('cn', replica2), ('cn', 'masters'), ('cn', 'ipa'), ('cn', 'etc'),
ipautil.realm_to_suffix(realm))
- conn.get_entries(dn, conn.SCOPE_ONELEVEL)
+ conn.get_entries(dn, conn.SCOPE_BASE)
conn.unbind()
except errors.NotFound:
sys.exit('%s does not have a CA configured.' % replica2)