diff options
author | Simo Sorce <simo@redhat.com> | 2017-03-31 11:22:45 -0400 |
---|---|---|
committer | Simo Sorce <simo@redhat.com> | 2017-05-03 07:35:53 -0400 |
commit | 06e65f8859164bc7e12a2c42d64b9f7c381a3219 (patch) | |
tree | 240969d9d637f065161b68ccd46ad6f56f7dae80 /ipalib/constants.py | |
parent | 92313c9e9d37733feb79d1b1c825178f48d6c69c (diff) | |
download | freeipa-cakeysfix.tar.gz freeipa-cakeysfix.tar.xz freeipa-cakeysfix.zip |
Make sure remote hosts have our keyscakeysfix
In complex replication setups a replica may try to obtain CA keys from a
host that is not the master we initially create the keys against.
In this case race conditions may happen due to replication. So we need
to make sure the server we are contacting to get the CA keys has our
keys in LDAP. We do this by waiting to positively fetch our encryption
public key (the last one we create) from the target host LDAP server.
Fixes: https://pagure.io/freeipa/issue/6838
Signed-off-by: Simo Sorce <simo@redhat.com>
Diffstat (limited to 'ipalib/constants.py')
0 files changed, 0 insertions, 0 deletions