URL:
https://github.com/freeipa/freeipa/pull/2126
Author: tiran
Title: #2126: [Backport][ipa-4-6] Auto-retry failed certmonger requests
Action: opened
PR body:
"""
Manual backport of PR #2122 to 4.6 branch
During parallel replica installation, a request sometimes fails with
CA_REJECTED or CA_UNREACHABLE. The error occur when the master is
either busy or some information haven't been replicated yet. Even
a stuck request can be recovered, e.g. when permission and group
information have been replicated.
A new function request_and_retry_cert() automatically resubmits failing
requests until it times out.
``ipa-client-install --request-cert`` now also waits until the cert has been requested and
no longer silence errors.
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2126/head:pr2126
git checkout pr2126