51a830e856
After initial unlock, subsequent lock/unlock of an AIO-SX system
will see openldap configuration takes a long time during puppet
manifest apply, and eventually fails the whole manifest apply, leaving
the system partially configured and trigger system reboot.
This change updated ldap puppet module to fix this issue.
Test Plan:
PASS: AIO-SX system deployment
PASS: After deployment, verify secure openldap is accessible by
ldapsearch -xH ldaps://controller -b "ou=People,dc=cgcs,dc=local"
PASS: After deployment, verify openldap users by
ldapfinger
PASS: After deployment, verify openldap users can login on console and
by ssh
PASS: After deployment, delete secret system-openldap-local-certificate,
trigger cert-mon to renew openldap cert/key, verify the cert/key
files are updated
/etc/ldap/certs/openldap-cert.crt
/etc/ldap/certs/openldap-cert.key
PASS: lock/unlock the system (multiple times), verify the puppet
manifests apply successfully during unlock.
PASS: After lock/unlock, verify openldap works properly by repeating
the after deployment tests.
Story: 2009834
Task: 46569
Signed-off-by: Andy Ning <andy.ning@windriver.com>
Change-Id: Ie8804549f27307df8797a2e94e3410bae0992670