IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Fix DL1 replica installation in CA-less topology

Browse Source 
Commit dbb98765d7 changed certmonger
requests for DS and HTTP certificates during installation to raise
on error (https://fedorahosted.org/freeipa/ticket/6514).
This introduced a regression in DL1 replica installation in CA-less
topology.  A certificate was requested, but prior to the
aforementioned commit this would fail silently and installation
continued, whereas now installation fails.

Guard the certificate request with a check that the topology is
CA-ful.

Fixes: https://fedorahosted.org/freeipa/ticket/6573
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
This commit is contained in:
Fraser Tweedale 2016-12-20 16:45:38 +10:00 committed by Martin Babinsky
parent 1b85e59cee
commit 4028ad73e7
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ipaserver/install/server/replicainstall.py
View File

@ -1338,7 +1338,7 @@ def install(installer):
# Always try to install DNS records
install_dns_records(config, options, remote_api)
if promote:
if promote and ca_enabled:
# we need to install http certs to setup ssl for httpd
install_http_certs(config.host_name,
config.realm_name,