freeipa

#9107 Enable ipa-ccache-sweep.timer during server installation
Closed: fixed by frenaud. Opened by rcritten.

Closed: fixed
Reopen Issue

Issue

Currently the ipa-ccache-sweep.timer is only enabled via the spec file when a server is already configured:

%posttrans server
# don't execute upgrade and restart of IPA when server is not installed
%{__python3} -c "import sys; from ipalib import facts; sys.exit(0 if facts.is_ipa_configured() else 1);" > /dev/null 2>&1
if [  $? -eq 0 ]; then
...
    /bin/systemctl is-enabled ipa-ccache-sweep.timer >/dev/null 2>&1
    if [  $? -eq 1 ]; then
        /bin/systemctl enable ipa-ccache-sweep.timer>/dev/null
    fi
fi

It should be explicitly enabled in the installer with: systemctl enable ipa-ccache-sweep.timer

Noticed in 4.9.8 but this has been present since 4.9.0 when the feature was introduced.

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2051575

Issue linked to bug 2051575

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2051575 https://bugzilla.redhat.com/show_bug.cgi?id=2051582 (was: https://bugzilla.redhat.com/show_bug.cgi?id=2051575)

https://github.com/freeipa/freeipa/pull/6168

master:

  • c396ca0164e6bc4f7d84cb537ea4b50f9b736332 Enable the ccache sweep timer during installation
  • f4df4d9bb73350b5c125fe64101cde06bdfa3ca2 Test ipa-ccache-sweep.timer enabled by default during installation

ipa-4-9:

  • 9b6d0bb1245c4891ccc270f360d0f72a4b1444c1 Enable the ccache sweep timer during installation
  • 0d9eb3d515385412abefe9c33e0099ea14f33cbc Test ipa-ccache-sweep.timer enabled by default during installation

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @frenaud:
- Custom field changelog adjusted to New installations of IPA now enable the ipa-ccache-sweep.timer that is removing expired credential caches from the filesystem.
Metadata
None
None
None
None
None
None
New installations of IPA now enable the ipa-ccache-sweep.timer that is removing expired credential caches from the filesystem.
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.