From 4027b12371051c2e9f53b1b6cd2c4e4fbc333731 Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Tue, 17 May 2011 15:09:39 -0400
Subject: Test for forwarded Kerberos credentials cache in wsgi code.

We should more gracefully handle if the TGT has not been forwarded
than returning a 500 error.

Also catch and display KerberosErrors from ping() in the client better.

ticket 1101
---
 ipalib/rpc.py | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

(limited to 'ipalib/rpc.py')

diff --git a/ipalib/rpc.py b/ipalib/rpc.py
index 051d2c3d..d667df71 100644
--- a/ipalib/rpc.py
+++ b/ipalib/rpc.py
@@ -346,7 +346,19 @@ class xmlclient(Connectible):
                 return serverproxy
             try:
                 command = getattr(serverproxy, 'ping')
-                response = command()
+                try:
+                    response = command()
+                except Fault, e:
+                    e = decode_fault(e)
+                    if e.faultCode in self.__errors:
+                        error = self.__errors[e.faultCode]
+                        raise error(message=e.faultString)
+                    else:
+                        raise UnknownError(
+                            code=e.faultCode,
+                            error=e.faultString,
+                            server=server,
+                        )
                 # We don't care about the response, just that we got one
                 break
             except KerberosError, krberr:
-- 
cgit