From fec0e8360bbd2ead6eb522348ed2b05bd6fdf7bb Mon Sep 17 00:00:00 2001
From: Petr Spacek <pspacek@redhat.com>
Date: Mon, 31 Aug 2015 18:03:33 +0200
Subject: [PATCH] DNSSEC: Fix HSM synchronization in ipa-dnskeysyncd when
 running on DNSSEC key master

https://fedorahosted.org/freeipa/ticket/5273

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Oleg Fayans <ofayans@redhat.com>
---
 ipapython/dnssec/keysyncer.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ipapython/dnssec/keysyncer.py b/ipapython/dnssec/keysyncer.py
index 837602fb4e7c74a7099a351c727d1435b5645706..de5b5aa5f670db4c58fb92b989e181d45d887b55 100644
--- a/ipapython/dnssec/keysyncer.py
+++ b/ipapython/dnssec/keysyncer.py
@@ -177,4 +177,4 @@ class KeySyncer(SyncReplConsumer):
             return
         if not self.init_done:
             return
-        ipautil.run([paths.ODS_SIGNER])
+        ipautil.run([paths.ODS_SIGNER, 'ipa-hsm-update'])
-- 
2.5.1