freeipa/install/share/profiles/Makefile.am

NULL =

appdir = $(IPA_DATA_DIR)/profiles
app_DATA =				\
	README				\
	caIPAserviceCert.cfg		\
	IECUserRoles.cfg		\
	KDCs_PKINIT_Certs.cfg		\
	$(NULL)

EXTRA_DIST =				\
	$(app_DATA)			\
	$(NULL)
Import included profiles during install or upgrade Add a default service profile template as part of FreeIPA and format and import it as part of installation or upgrade process. Also remove the code that modifies the old (file-based) `caIPAserviceCert' profile. Fixes https://fedorahosted.org/freeipa/ticket/4002 Reviewed-By: Martin Basti <mbasti@redhat.com> 2015-05-11 20:17:48 -05:00			`NULL =`

			`appdir = $(IPA_DATA_DIR)/profiles`
			`app_DATA = \`
Add a README to certificate profile templates directory There have been several instances of people using the profile configuration template files as actual profile configurations, resulting in failures and support load. Add a README to the profile template directory to explain that these files should not be used and advise of the recommend procedure. Fixes: https://pagure.io/freeipa/issue/7014 Reviewed-By: Martin Basti <mbasti@redhat.com> 2017-06-11 21:49:51 -05:00			`README \`
Import included profiles during install or upgrade Add a default service profile template as part of FreeIPA and format and import it as part of installation or upgrade process. Also remove the code that modifies the old (file-based) `caIPAserviceCert' profile. Fixes https://fedorahosted.org/freeipa/ticket/4002 Reviewed-By: Martin Basti <mbasti@redhat.com> 2015-05-11 20:17:48 -05:00			`caIPAserviceCert.cfg \`
Add profile for DNP3 / IEC 62351-8 certificates The DNP3 smart-grid standard uses certificate with the IEC 62351-8 IECUserRoles extension. Add a profile for DNP3 certificates which copies the IECUserRoles extension from the CSR, if present. Also update cert-request to accept CSRs containing this extension. Fixes: https://fedorahosted.org/freeipa/ticket/4752 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 2015-07-24 08:32:51 -05:00			`IECUserRoles.cfg \`
Configure Anonymous PKINIT on server install Allow anonymous pkinit to be used so that unenrolled hosts can perform FAST authentication (necessary for 2FA for example) using an anonymous krbtgt obtained via Pkinit. https://fedorahosted.org/freeipa/ticket/5678 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 2016-07-26 10:19:01 -05:00			`KDCs_PKINIT_Certs.cfg \`
Import included profiles during install or upgrade Add a default service profile template as part of FreeIPA and format and import it as part of installation or upgrade process. Also remove the code that modifies the old (file-based) `caIPAserviceCert' profile. Fixes https://fedorahosted.org/freeipa/ticket/4002 Reviewed-By: Martin Basti <mbasti@redhat.com> 2015-05-11 20:17:48 -05:00			`$(NULL)`

			`EXTRA_DIST = \`
			`$(app_DATA) \`
			`$(NULL)`