74c854d38c
- ipatests: ignore nsslapd-accesslog-logbuffering WARN in healthcheck - ipatests: Skip ds_encryption tests on RHEL9 SUT. - adtrustinstance: make sure NetBIOS name defaults are set properly - ipatests: wait for replica update in test_dns_locations - ipapython: Clean up krb5_error - ipapython: Correct return type of krb5_free_cred_contents - ipapython: Propagate KRB5Error exceptions on iterating ccache - ipa-kdb: Fix memory leak during PAC verification - sidgen: ignore staged users when generating SIDs - sidgen: fix missing prototypes - kdb: PAC generator: do not fail if canonical principal is missing - ipatests: fix tasks.wait_for_replication method - ipa-kdb: Rework ipadb_reinit_mspac() - ipa-kdb: Fix double free in ipadb_reinit_mspac()
34 lines
1.1 KiB
Diff
34 lines
1.1 KiB
Diff
From 2bbfd1454fc69c5975826d1a3f39b301d135abb5 Mon Sep 17 00:00:00 2001
|
|
From: Mohammad Rizwan <myusuf@redhat.com>
|
|
Date: Sep 20 2023 06:05:00 +0000
|
|
Subject: ipatests: restart ipa services after moving date
|
|
|
|
|
|
When system date is moved into future, it have unprecedented
|
|
behavior i.e CA becomes irresponsive or unexpected certificcate
|
|
state. Hence restart the ipa service after moving the date to
|
|
gracefully serve the request.
|
|
|
|
Fixes: https://pagure.io/freeipa/issue/9379
|
|
|
|
Signed-off-by: Mohammad Rizwan <myusuf@redhat.com>
|
|
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
|
|
|
|
---
|
|
|
|
diff --git a/ipatests/test_integration/test_ipa_cert_fix.py b/ipatests/test_integration/test_ipa_cert_fix.py
|
|
index 77076e7..ec9456e 100644
|
|
--- a/ipatests/test_integration/test_ipa_cert_fix.py
|
|
+++ b/ipatests/test_integration/test_ipa_cert_fix.py
|
|
@@ -408,6 +408,9 @@ class TestCertFixReplica(IntegrationTest):
|
|
# move system date to expire certs
|
|
for host in self.master, self.replicas[0]:
|
|
tasks.move_date(host, 'stop', '+3years+1days')
|
|
+ host.run_command(
|
|
+ ['ipactl', 'restart', '--ignore-service-failures']
|
|
+ )
|
|
|
|
yield
|
|
|
|
|