Discussion:
[Freeipa-devel] [freeipa PR#656][opened] Backup CA cert from kerberos folder
stlaz
2017-03-27 08:47:59 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Author: stlaz
Title: #656: Backup CA cert from kerberos folder
Action: opened

PR body:
"""
I have no idea how I missed this file in previous backup fixing attempts.

https://pagure.io/freeipa/issue/6748
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/656/head:pr656
git checkout pr656
MartinBasti
2017-03-27 16:51:37 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

MartinBasti commented:
"""
ACK, however webUI is still not working after restore
"""

See the full comment at https://github.com/freeipa/freeipa/pull/656#issuecomment-289514024
MartinBasti
2017-03-27 16:53:02 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

MartinBasti commented:
"""
```
mod_wsgi (pid=4398): Exception occurred processing WSGI script '/usr/share/ipa/wsgi.py'.
Traceback (most recent call last):
File "/usr/share/ipa/wsgi.py", line 51, in application
return api.Backend.wsgi_dispatch(environ, start_response)
File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 262, in __call__
return self.route(environ, start_response)
File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 274, in route
return app(environ, start_response)
File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 913, in __call__
self.kinit(user_principal, password, ipa_ccache_name)
File "/usr/lib/python2.7/site-packages/ipaserver/rpcserver.py", line 947, in kinit
kinit_armor(armor_path)
File "/usr/lib/python2.7/site-packages/ipalib/install/kinit.py", line 125, in kinit_armor
run(args, env=env, raiseonerr=True, capture_error=True)
File "/usr/lib/python2.7/site-packages/ipapython/ipautil.py", line 495, in run
raise CalledProcessError(p.returncode, arg_string, str(output))
CalledProcessError: Command '/usr/bin/kinit -n -c /var/run/ipa/ccaches/armor_4398' returned non-zero exit status 1
```
"""

See the full comment at https://github.com/freeipa/freeipa/pull/656#issuecomment-289514455
MartinBasti
2017-03-27 16:51:41 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

Label: +ack
stlaz
2017-03-28 06:40:22 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

stlaz commented:
"""
That's weird, I think it worked for me, I will check once more.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/656#issuecomment-289677935
stlaz
2017-03-28 07:11:14 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

stlaz commented:
"""
Yes, it indeed works for me.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/656#issuecomment-289683317
MartinBasti
2017-03-28 08:33:27 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

MartinBasti commented:
"""
I tried with DL0:

* it may be different bug with DL0
* backup/restore is broken only with DL0
"""

See the full comment at https://github.com/freeipa/freeipa/pull/656#issuecomment-289700819
stlaz
2017-03-28 08:39:01 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

stlaz commented:
"""
This seems like a pkinit-related issue, since pkinit is not finished (although released) and should be only avaialable on domain levels > 0, I don't think this should stop us from pushing this, I will investigate the issue nonetheless.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/656#issuecomment-289702239
stlaz
2017-03-28 09:28:33 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

stlaz commented:
"""
Works for me on DL0 as well, you might have had a broken installation.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/656#issuecomment-289714596
MartinBasti
2017-03-28 09:55:13 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

MartinBasti commented:
"""
Yeah and I found where, it fails with #640

This PR can be pushed and ticket closed
"""

See the full comment at https://github.com/freeipa/freeipa/pull/656#issuecomment-289720981
tomaskrizek
2017-03-28 11:17:25 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

tomaskrizek commented:
"""
master:

* dc13703e75997e0c9539b326acb13458dae00202 Backup CA cert from kerberos folder
ipa-4-5:

* 9fdc27ba3594e921d21d664fc5728292e52ac350 Backup CA cert from kerberos folder
"""

See the full comment at https://github.com/freeipa/freeipa/pull/656#issuecomment-289738530
tomaskrizek
2017-03-28 11:17:31 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Author: stlaz
Title: #656: Backup CA cert from kerberos folder
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/656/head:pr656
git checkout pr656
tomaskrizek
2017-03-28 11:17:28 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/656
Title: #656: Backup CA cert from kerberos folder

Label: +pushed

Loading...