From 4e97a0171a862e20089863e4bf0ec88d0ba98a53 Mon Sep 17 00:00:00 2001
From: Martin Babinsky <mbabinsk@redhat.com>
Date: Nov 11 2016 11:17:25 +0000
Subject: installers: restart DS after KDC is configured


This is required to enable password extension plugin right away so that
services configured later can use it to request keytabs via ipa-getkeytab.

https://fedorahosted.org/freeipa/ticket/6405

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>

---

diff --git a/ipaserver/install/server/install.py b/ipaserver/install/server/install.py
index b510ec2..48ce315 100644
--- a/ipaserver/install/server/install.py
+++ b/ipaserver/install/server/install.py
@@ -803,6 +803,10 @@ def install(installer):
                             setup_pkinit=not options.no_pkinit,
                             subject_base=options.subject)
 
+    # restart DS to enable ipa-pwd-extop plugin
+    print("Restarting directory server to enable password extension plugin")
+    ds.restart()
+
     if setup_ca:
         ca.install_step_1(False, None, options)
 
diff --git a/ipaserver/install/server/replicainstall.py b/ipaserver/install/server/replicainstall.py
index af9cd30..da790dd 100644
--- a/ipaserver/install/server/replicainstall.py
+++ b/ipaserver/install/server/replicainstall.py
@@ -1376,6 +1376,10 @@ def install(installer):
         setup_pkinit=not options.no_pkinit,
         promote=promote)
 
+    # restart DS to enable ipa-pwd-extop plugin
+    print("Restarting directory server to enable password extension plugin")
+    ds.restart()
+
     install_http(
         config,
         auto_redirect=not options.no_ui_redirect,