https://github.com/freeipa/freeipa/blob/master/ipaserver/install/ca.py#L568 Creates _api https://github.com/freeipa/freeipa/blob/master/ipaserver/install/ca.py#L569 Uses api, not _api
_api = api if standalone else options._remote_api (token_name, _token_library_path) = lookup_hsm_configuration(api)
In the other places where lookup_hsm_configuration is called, _api is used. LIke for example: https://github.com/freeipa/freeipa/blob/master/ipaserver/install/ca.py#L396
(token_name, token_library_path) = lookup_hsm_configuration(_api)
This could break "keep server affinity".
Log in to comment on this ticket.