summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJan Cholasta <jcholast@redhat.com>2013-10-15 17:49:07 +0000
committerMartin Kosek <mkosek@redhat.com>2014-01-15 17:44:15 +0100
commit8e874b1ede0ec76114a185f62c50ff71905e97f9 (patch)
tree1911d7185cc9161f171e4949981e46cc47596a94
parentf4739bc5217713cc208db292053a5f5665ea2284 (diff)
downloadfreeipa-8e874b1ede0ec76114a185f62c50ff71905e97f9.tar.gz
freeipa-8e874b1ede0ec76114a185f62c50ff71905e97f9.tar.xz
freeipa-8e874b1ede0ec76114a185f62c50ff71905e97f9.zip
Do not start the service in stopped_service if it was not running before.
This fixes a possible NSS database corruption in renew_ca_cert.
-rw-r--r--ipaserver/install/installutils.py3
1 files changed, 0 insertions, 3 deletions
diff --git a/ipaserver/install/installutils.py b/ipaserver/install/installutils.py
index 3770432ca..32671adc8 100644
--- a/ipaserver/install/installutils.py
+++ b/ipaserver/install/installutils.py
@@ -819,9 +819,6 @@ def stopped_service(service, instance_name=""):
root_logger.debug('Service %s%s is not running, continue.', service,
log_instance_name)
yield
- root_logger.debug('Starting %s%s.', service, log_instance_name)
- ipaservices.knownservices[service].start(instance_name)
- return
else:
# Stop the service, do the required stuff and start it again
root_logger.debug('Stopping %s%s.', service, log_instance_name)