From a923cedc1aedafe7f58d480a633257bd19809d72 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Tue, 15 Oct 2013 17:49:07 +0000 Subject: [PATCH 27/27] Do not start the service in stopped_service if it was not running before. This fixes a possible NSS database corruption in renew_ca_cert. --- ipaserver/install/installutils.py | 3 --- 1 file changed, 3 deletions(-) diff --git a/ipaserver/install/installutils.py b/ipaserver/install/installutils.py index 3770432cae79f653fd57f726de43787dec8dd7d1..32671adc895b0cb2632729e8bdb44b5df02c1314 100644 --- a/ipaserver/install/installutils.py +++ b/ipaserver/install/installutils.py @@ -819,9 +819,6 @@ def stopped_service(service, instance_name=""): root_logger.debug('Service %s%s is not running, continue.', service, log_instance_name) yield - root_logger.debug('Starting %s%s.', service, log_instance_name) - ipaservices.knownservices[service].start(instance_name) - return else: # Stop the service, do the required stuff and start it again root_logger.debug('Stopping %s%s.', service, log_instance_name) -- 1.8.4.2