From 4e97a0171a862e20089863e4bf0ec88d0ba98a53 Mon Sep 17 00:00:00 2001 From: Martin Babinsky Date: Mon, 7 Nov 2016 09:58:33 +0100 Subject: installers: restart DS after KDC is configured This is required to enable password extension plugin right away so that services configured later can use it to request keytabs via ipa-getkeytab. https://fedorahosted.org/freeipa/ticket/6405 Reviewed-By: Stanislav Laznicka --- ipaserver/install/server/install.py | 4 ++++ ipaserver/install/server/replicainstall.py | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/ipaserver/install/server/install.py b/ipaserver/install/server/install.py index b510ec20a..48ce315c4 100644 --- a/ipaserver/install/server/install.py +++ b/ipaserver/install/server/install.py @@ -803,6 +803,10 @@ def install(installer): setup_pkinit=not options.no_pkinit, subject_base=options.subject) + # restart DS to enable ipa-pwd-extop plugin + print("Restarting directory server to enable password extension plugin") + ds.restart() + if setup_ca: ca.install_step_1(False, None, options) diff --git a/ipaserver/install/server/replicainstall.py b/ipaserver/install/server/replicainstall.py index af9cd30e3..da790dd93 100644 --- a/ipaserver/install/server/replicainstall.py +++ b/ipaserver/install/server/replicainstall.py @@ -1376,6 +1376,10 @@ def install(installer): setup_pkinit=not options.no_pkinit, promote=promote) + # restart DS to enable ipa-pwd-extop plugin + print("Restarting directory server to enable password extension plugin") + ds.restart() + install_http( config, auto_redirect=not options.no_ui_redirect, -- cgit