Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fixups for skipping the pki healthchecks #243

Merged
merged 2 commits into from
Feb 1, 2022

Conversation

rcritten
Copy link
Collaborator

The pki healthchecks spew a lot of errors if a CA is not configured rather than gracefully reporting nothing.

A few corner cases in healthcheck skipping those were discovered and (hopefully) addressed.

Skipping the pki plugins was dependent upon the order the registry
was being processed. The assumption was that the ipa plugin would
be done first so ca_configured would be defined. If this isn't the
case the the pki plugins are incorrectly skipped. So run through
the list twice (it's short).

Signed-off-by: Rob Crittenden <[email protected]>

freeipa#201
python3-libsss_nss_idmap isn't required but if it is not present
then the asumption is that trust is not available. This code
was executing prior to collecting the ca_configured status so
if the package was not installed then ca_configured could never
be True.

Signed-off-by: Rob Crittenden <[email protected]>

freeipa#201
@antoniotorresm
Copy link
Collaborator

LGTM.

@rcritten rcritten merged commit 94b4082 into freeipa:master Feb 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants