Do not allow installing CA replicas in CA-less setup.

https://fedorahosted.org/freeipa/ticket/3673
https://fedorahosted.org/freeipa/ticket/3674
This commit is contained in:
Jan Cholasta 2013-06-03 10:20:52 +02:00 committed by Petr Viktorin
parent 2ccadf4726
commit 5ae8515c20
2 changed files with 8 additions and 0 deletions

View File

@ -160,6 +160,10 @@ def main():
config.dir = dir
config.setup_ca = True
if ipautil.file_exists(config.dir + "/dscert.p12"):
print 'CA cannot be installed in CA-less setup.'
sys.exit(1)
portfile = config.dir + "/dogtag_directory_port.txt"
if not ipautil.file_exists(portfile):
dogtag_master_ds_port = str(dogtag.Dogtag9Constants.DS_PORT)

View File

@ -513,6 +513,10 @@ def main():
config.dir = dir
config.setup_ca = options.setup_ca
if config.setup_ca and ipautil.file_exists(config.dir + "/dscert.p12"):
print 'CA cannot be installed in CA-less setup.'
sys.exit(1)
installutils.verify_fqdn(config.master_host_name, options.no_host_dns)
portfile = config.dir + "/dogtag_directory_port.txt"