From fa2fbc680aea8f9cb43238ae0103e5030324f3f6 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Thu, 19 Nov 2015 15:40:20 +0100 Subject: [PATCH] ipa-ca-install: error when replica file is passed with domain level > 0 with replica promotion (domain level > 0) there are no replica files, thus adding replica file as parameter when domain level > 0 should be disallowed. https://fedorahosted.org/freeipa/ticket/5455 Reviewed-By: Martin Babinsky Reviewed-By: Jan Cholasta --- install/tools/ipa-ca-install | 3 +++ 1 file changed, 3 insertions(+) diff --git a/install/tools/ipa-ca-install b/install/tools/ipa-ca-install index fafd5d091..b1d58f750 100755 --- a/install/tools/ipa-ca-install +++ b/install/tools/ipa-ca-install @@ -110,6 +110,9 @@ def install_replica(safe_options, options, filename): domain_level = dsinstance.get_domain_level(api) if domain_level > DOMAIN_LEVEL_0: options.promote = True + if filename is not None: + sys.exit("Too many parameters provided. " + "No replica file is required") else: options.promote = False if filename is None: