Jan Cholasta
998c87af2b
server install: fix KRA agent PEM file not being created
...
In commit 822e1bc82a the call to create the
KRA agent PEM file was accidentally removed from the server installer.
Call into the KRA installer from the server installer to create the file
again.
https://fedorahosted.org/freeipa/ticket/6392
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com >
2016-12-20 16:26:28 +01:00
Tomas Krizek
68295bf8cf
services: replace admin_conn with api.Backend.ldap2
...
Since service.admin_conn is only an alias to api.Backend.ldap2,
replace it everywhere with the explicit api.Backend.ldap2 instead.
https://fedorahosted.org/freeipa/ticket/6461
Reviewed-By: Martin Basti <mbasti@redhat.com >
2016-11-22 16:17:27 +01:00
Jan Cholasta
a8fdb8de82
install: introduce installer class hierarchy
...
Add class hierarchy which allows inherting knob definitions between the
various client and server install scripts.
https://fedorahosted.org/freeipa/ticket/6392
Reviewed-By: Martin Basti <mbasti@redhat.com >
2016-11-11 12:17:25 +01:00
Jan Cholasta
89bb5ed1eb
replica install: merge KRA agent cert export into KRA install
...
Merge all KRA agent cert export code paths into a single code path in KRA
install.
https://fedorahosted.org/freeipa/ticket/6392
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com >
2016-11-11 12:13:56 +01:00
Jan Cholasta
0933e080aa
install: merge all KRA install code paths into one
...
Merge KRA install code paths use in ipa-replica-install in either domain
level and ipa-kra-install into one.
https://fedorahosted.org/freeipa/ticket/6392
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com >
2016-11-11 12:13:56 +01:00
Tomas Krizek
03d113cdd7
install: remove adhoc dis/connect from services
...
Remove ldap_connect and ldap_disconnect from services. admin_conn is
just an alias to api.Backend.ldap2 and therefore the connection should
be managed elsewhere.
https://fedorahosted.org/freeipa/ticket/6461
Reviewed-By: Martin Basti <mbasti@redhat.com >
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
2016-11-07 11:34:03 +01:00
Martin Basti
bbbe411f35
Modify error message to install first instance of KRA
...
First instance of KRA should be installed by ipa-kra-install.
https://fedorahosted.org/freeipa/ticket/5460
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com >
2015-12-02 17:21:32 +01:00
Martin Basti
5d9a5997a1
KRA: do not stop certmonger during standalone uninstall
...
https://fedorahosted.org/freeipa/ticket/5477
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com >
2015-11-26 11:00:54 +01:00
Jan Cholasta
aeffe2da42
install: drop support for Dogtag 9
...
Dogtag 9 CA and CA DS install and uninstall code was removed. Existing
Dogtag 9 CA and CA DS instances are disabled on upgrade.
Creating a replica of a Dogtag 9 IPA master is still supported.
https://fedorahosted.org/freeipa/ticket/5197
Reviewed-By: David Kupka <dkupka@redhat.com >
2015-11-25 09:12:25 +01:00
Simo Sorce
bc39cc9f81
Allow to install the KRA on a promoted server
...
Signed-off-by: Simo Sorce <simo@redhat.com >
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com >
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
2015-10-22 17:53:14 +02:00
Jan Cholasta
c388dbd4de
install: fix invocation of KRAInstance.create_instance()
...
Reviewed-By: Simo Sorce <ssorce@redhat.com >
2015-10-01 07:42:33 +02:00
Martin Basti
2e329ecdc7
KRA Install: check replica file if contains req. certificates
...
https://fedorahosted.org/freeipa/ticket/5059
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
2015-07-02 10:59:53 +00:00
Jan Cholasta
e7ac57e139
vault: Fix ipa-kra-install
...
Use state in LDAP rather than local state to check if KRA is installed.
Use correct log file names.
https://fedorahosted.org/freeipa/ticket/3872
Reviewed-By: David Kupka <dkupka@redhat.com >
2015-06-10 16:17:34 +00:00
Jan Cholasta
81729e22d3
vault: Move vaults to cn=vaults,cn=kra
...
https://fedorahosted.org/freeipa/ticket/3872
Reviewed-By: David Kupka <dkupka@redhat.com >
2015-06-10 16:17:34 +00:00
Martin Babinsky
01fa05dd4e
KRA: get the right dogtag version during server uninstall
...
Ensure that the correct version of dogtag is passed from API object to the KRA
uninstaller during IPA server uninstall.
https://fedorahosted.org/freeipa/ticket/4468
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
2015-05-26 12:43:46 +00:00
Martin Babinsky
6a4b428120
merge KRA installation machinery to a single module
...
This is a prerequisite to further refactoring of KRA install/uninstall
functionality in all IPA install scripts.
https://fedorahosted.org/freeipa/ticket/4468
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
2015-05-25 16:23:32 +00:00