freeipa

#8034 Existing p11-kit config file is not restored on uninstall
Closed: fixed by rcritten. Opened by rcritten.

Closed: fixed
Reopen Issue

Issue

During code review of https://github.com/freeipa/freeipa/pull/3484 I discovered that existing
/etc/pkcs11/modules/softhsm2.module is not being restored as part of uninstallation.

I determined that the "file is first restored by fstore.restore_all_files(). Then the task is executed and the first thing it does is unlink() an existing file. Since the copy is not in the fstore anymore the restored file is just removed.

So either the call to restore_pkcs11_modules() needs to happen before fstore.restore_all_files() or perhaps it can be dropped altogether."

Steps to Reproduce

  1. echo "# this is mine" > /etc/pkcs11/modules/softhsm2.module
  2. ipa-server-install --setup-dns
  3. grep softhsm2 /var/lib/ipa/sysrestore/* (to ensure it is backed up)
  4. ipa-server-install --uninistall
  5. cat /etc/pkcs11/modules/softhsm2.module (not there)

Metadata Update from @rcritten:
- Issue assigned to rcritten

https://github.com/freeipa/freeipa/pull/3675

master:

  • ffb4b624fc8bfd870958976ec25b74677e740841 Re-order tasks.restore_pkcs11_modules() to run earlier

ipa-4-8:

  • 8e87e65493984d89b8f66bc88fe0e0d02fcb6c7c Re-order tasks.restore_pkcs11_modules() to run earlier

ipa-4-7:

  • a62e3c011992ca8d4d9dbd0a8d97b036820a5cd2 Re-order tasks.restore_pkcs11_modules() to run earlier

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
Low
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.