The attached patch fixes
https://fedorahosted.org/pki/ticket/2285.
See commit message and bz1323400[1] for full history and details.
[1]
https://bugzilla.redhat.com/show_bug.cgi?id=1323400
The fix should be merged to master and DOGTAG_10_2_BRANCH, and a new
10.2.x release cut for f23.
I have an f23 COPR build containing the fix for anyone wishing to
test:
https://copr.fedorainfracloud.org/coprs/ftweedal/freeipa/packages/
Huge props to Adam Williamson for doing a lot of legwork in tracking
down the cause of this issue.
Thanks,
Fraser