From 61bdbd6e47b2cd2a62f7e50a6a6cbd2e272470d9 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Mon, 12 Oct 2015 14:58:40 +0200 Subject: [PATCH] upgrade: make sure ldap2 is connected in export_kra_agent_pem https://fedorahosted.org/freeipa/ticket/5360 Reviewed-By: Ales 'alich' Marecek --- ipaserver/install/server/upgrade.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py index 5d3972b97..32ea31b1b 100644 --- a/ipaserver/install/server/upgrade.py +++ b/ipaserver/install/server/upgrade.py @@ -1258,6 +1258,13 @@ def export_kra_agent_pem(): root_logger.info("KRA agent PEM file already exported") return + if not api.Backend.ldap2.isconnected(): + try: + api.Backend.ldap2.connect(autobind=True) + except ipalib.errors.PublicError as e: + root_logger.error("Cannot connect to LDAP: %s", e) + return + if not api.Command.kra_is_enabled()['result']: root_logger.info("KRA is not enabled") return