From e43296ba9acb20342d2b6d4bb030d06deac39c2a Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Wed, 1 Jul 2015 07:20:35 +0000 Subject: replica prepare: Do not use entry after disconnecting from LDAP https://fedorahosted.org/freeipa/ticket/3090 Reviewed-By: Martin Babinsky --- ipaserver/install/ipa_replica_prepare.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/ipaserver/install/ipa_replica_prepare.py b/ipaserver/install/ipa_replica_prepare.py index c2e7a0fb5..46ac886e5 100644 --- a/ipaserver/install/ipa_replica_prepare.py +++ b/ipaserver/install/ipa_replica_prepare.py @@ -197,8 +197,13 @@ class ReplicaPrepare(admintool.AdminTool): conn = api.Backend.ldap2 conn.connect(bind_dn=DN(('cn', 'directory manager')), bind_pw=self.dirman_password) + entry_attrs = conn.get_ipa_config() + self.subject_base = entry_attrs.get( + 'ipacertificatesubjectbase', [None])[0] + ca_enabled = api.Command.ca_is_enabled()['result'] + conn.disconnect() except errors.ACIError: raise admintool.ScriptError("The password provided is incorrect " @@ -215,8 +220,6 @@ class ReplicaPrepare(admintool.AdminTool): "--http-cert-file, --dirsrv-cert-file options to provide " "custom certificates.") - self.subject_base = entry_attrs.get( - 'ipacertificatesubjectbase', [None])[0] if self.subject_base is not None: self.subject_base = DN(self.subject_base) -- cgit