IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Check LDAP instead of local configuration to see if IPA CA is enabled

Browse Source 
The check is done using a new hidden command ca_is_enabled.

https://fedorahosted.org/freeipa/ticket/4621

Reviewed-By: David Kupka <dkupka@redhat.com>
This commit is contained in:
Jan Cholasta
2014-10-13 14:30:15 +02:00
committed by Martin Kosek
parent 6227ebb0cd
commit 608851d3f8
16 changed files with 144 additions and 65 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ipalib/x509.py
View File

@@ -71,7 +71,7 @@ def subject_base():
return _subject_base
def valid_issuer(issuer):
if not api.env.enable_ra:
if not api.Command.ca_is_enabled()['result']:
return True
# Handle all supported forms of issuer -- currently dogtag only.
if api.env.ra_plugin == 'dogtag':