Harald Dunkel wrote:
Hi Rob,
On 6/25/18 7:10 PM, Rob Crittenden via FreeIPA-users wrote:
> Harald Dunkel via FreeIPA-users wrote:
>>
>> I found
https://bugzilla.redhat.com/show_bug.cgi?id=1519206, but the
>> conclusion
>> ("please reboot") is not helpful. I did.
>
> The dbus developers don't think it should ever be restarted mid-stream.
> I suppose they have their reasons.
>
I am not sure what you mean by "restarted mid-stream". Does rpm know?
Is there a risk at upgrade time?
Basically never except on reboot.
> I'd need to see the contents of
/var/lib/certmonger/requests/* to try to
> figure out what is bogging things down.
>
> NOTE: THERE MAY BE EMBEDDED PASSWORDS IN THOSE FILES. PLEASE DO NOT
> PASTE TO A PUBLIC LIST.
>
> But I do need to see whether there is a PIN at all so for any key_pin=
> just replace with key_pin=XXXXXXX or something.
>
I see several files with a key_pin or Key_pin_file inside. I would prefer
to send you these files in an encrypted EMail. What would you suggest? Do
you have PGP?
Except for the pin the rest of the content is generally safe. My key is
available in the MIT keyserver if you want to send it out of band.
rob
Regards
Harri