From 20c7bd5eba6a8be36abf5dfd03daf235ee113d1d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fran=C3=A7ois=20Cami?= Date: Fri, 9 Apr 2021 09:46:11 +0100 Subject: [PATCH] ipa-client-install: invoke nsupdate twice (GSS-TSIG, plain) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ipa-client-install invokes nsupdate with GSS-TSIG at client enrollment time. If that fails, no retry is done. Change that behavior to try again without GSS-TSIG. Fixes: https://pagure.io/freeipa/issue/8402 Signed-off-by: François Cami Reviewed-By: Florence Blanc-Renaud Reviewed-By: Rob Crittenden --- ipaclient/install/client.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/ipaclient/install/client.py b/ipaclient/install/client.py index 97b92b76e..79fdb3d18 100644 --- a/ipaclient/install/client.py +++ b/ipaclient/install/client.py @@ -1370,6 +1370,11 @@ def do_nsupdate(update_txt): result = True except CalledProcessError as e: logger.debug('nsupdate failed: %s', str(e)) + try: + ipautil.run([paths.NSUPDATE, UPDATE_FILE]) + result = True + except CalledProcessError as e: + logger.debug('Unauthenticated nsupdate failed: %s', str(e)) try: os.remove(UPDATE_FILE)