Handle --subject option in ipa-server-install

Properly handle --subject option of ipa-server-install, making sure this
value gets passed to certmap.conf. Introduce a new template variable
$SUBJECT_BASE for this purpose.

Also make sure that this value is preserved on upgrades.

https://fedorahosted.org/freeipa/ticket/3783
This commit is contained in:
Ana Krivokapic
2013-07-29 18:33:09 +02:00
committed by Martin Kosek
parent f988e422eb
commit da2605c942
3 changed files with 103 additions and 5 deletions

View File

@@ -1,4 +1,4 @@
# VERSION 1 - DO NOT REMOVE THIS LINE
# VERSION 2 - DO NOT REMOVE THIS LINE
#
# This file is managed by IPA and will be overwritten on upgrades.
@@ -84,6 +84,6 @@ certmap default default
#default:InitFn <Init function's name>
default:DNComps
default:FilterComps uid
certmap ipaca CN=Certificate Authority,O=$REALM
certmap ipaca CN=Certificate Authority,$SUBJECT_BASE
ipaca:CmapLdapAttr seeAlso
ipaca:verifycert on