#3078 startup initialization should not depend on LDAP operational attributes
Closed: fixed 9 months ago by ftweedal. Opened a year ago by ftweedal.

Clone of https://bugzilla.redhat.com/show_bug.cgi?id=1638379.

The PKI fails to start when we have replication conflicts in ou=certificateprofiles,ou=ca,o=ipaca subtree. LDAP conflict entries will add to the operational LDAP attribute 'numSubordinates'. As a result the number of actual cert profiles and leaf entries is this subtree is different.

The RfE is to not depend on the operational attribute for a successful PKI initialization.


Note that a similar mechanism is used for the LDAPProfileSubsystem and the CertificateAuthority monitor thread for loading LWCAs at startup. The issue should be
addressed in both places.

Metadata Update from @ftweedal:
- Custom field component adjusted to None
- Custom field feature adjusted to None
- Custom field origin adjusted to None
- Custom field proposedmilestone adjusted to None
- Custom field proposedpriority adjusted to None
- Custom field reviewer adjusted to None
- Custom field type adjusted to None
- Custom field version adjusted to None

a year ago

Metadata Update from @ftweedal:
- Issue assigned to ftweedal

a year ago

pushed to master:

  • 2157c4a54c486a8f433cb88b4501b8da603be004 Add watchdog timer for initial load of LWCAs
  • 3e922a9aed5640ee84dce17b2e30a5d6e4af4d08 LDAPProfileSubsystem: add watchdog timer for initial load

DOGTAG_10_6_BRANCH:

  • 530786c28e890c7457bc1379db54c9a59ccca346 Add watchdog timer for initial load of LWCAs
  • ae7cc02eb1e7a9c20bb4291247b17714021e9449 LDAPProfileSubsystem: add watchdog timer for initial load

DOGTAG_10_5_BRANCH:

  • 54c15eb4eba3568eace3791d183f8d2700e5d04e Add watchdog timer for initial load of LWCAs
  • 758d2a7e551e532f464419d68306cf13e096fe85 LDAPProfileSubsystem: add watchdog timer for initial load

Closing fixed.

Metadata Update from @ftweedal:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

9 months ago

Login to comment on this ticket.

Metadata