From: David Mulder Date: Mon, 19 Jul 2021 17:11:56 +0000 (-0600) Subject: gpo: Ensure Network Device Enrollment Service if sscep fails X-Git-Tag: ldb-2.5.0~1067 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a92b05ec7b407a19da0cd7c2533c5b49dfbe4392;p=thirdparty%2Fsamba.git gpo: Ensure Network Device Enrollment Service if sscep fails Prompt the user to check that Network Device Enrollment Service is installed and configured if sscep fails to download the certificate root chain. Signed-off-by: David Mulder Reviewed-by: Jeremy Allison --- diff --git a/python/samba/gp_cert_auto_enroll_ext.py b/python/samba/gp_cert_auto_enroll_ext.py index 556be604621..d3b0db3213d 100644 --- a/python/samba/gp_cert_auto_enroll_ext.py +++ b/python/samba/gp_cert_auto_enroll_ext.py @@ -98,6 +98,8 @@ def cert_enroll(ca, trust_dir, private_dir, logger): root_cert, '-u', url]).wait() if ret != 0: logger.warn('sscep failed to fetch the root certificate chain.') + logger.warn('Ensure you have installed and configured the' + + ' Network Device Enrollment Service.') root_certs = glob('%s*' % root_cert) data['files'].extend(root_certs) for src in root_certs: