Bug 768284

Summary:	Update dogtag ports when upgrading proxy config
Product:	Red Hat Enterprise Linux 6	Reporter:	Martin Kosek <mkosek>
Component:	ipa	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED WONTFIX	QA Contact:	IDM QE LIST <seceng-idm-qe-list>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.3	CC:	jgalipea, mkosek
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-02-22 18:09:53 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Martin Kosek 2011-12-16 08:38:16 UTC

This bug is created as a clone of upstream ticket:
https://fedorahosted.org/freeipa/ticket/2148

The proxy script failed to do is update the security domain entry stored in ldap for the master. This leaves the ports as 9xxx so if you go to create a clone against that server you'll get an invalid clone_uri error.

You can fix this by going into ldap and changing the relevant security domain entries for all the CA's that have been converted to use the proxy to use the proxy ports instead.  They will be under ou=security domain, $basedn.  They will basically all be 443, except for UnscurePort which will be 80.

Comment 1 Rob Crittenden 2012-02-22 18:09:53 UTC

This only happens when upgrading from 2.0 to 2.1. Since we don't support this in RHEL closing as won't fix.