3 Commits

Author	SHA1	Message	Date
Stanislav Laznicka	f31797c70a	Have all the scripts run in python 3 by default ... The Python 3 refactoring effort is finishing, it should be safe to turn all scripts to run in Python 3 by default. https://pagure.io/freeipa/issue/4985 Reviewed-By: Christian Heimes <cheimes@redhat.com>	2018-02-15 18:43:12 +01:00
Alexander Bokovoy	9c3fad9cef	krb5: make sure KDC certificate is readable ... When requesting certificate for KDC profile, make sure its public part is actually readable to others. Fixes https://pagure.io/freeipa/issue/6973 Reviewed-By: Simo Sorce <ssorce@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>	2017-05-25 14:25:01 +02:00
Jan Cholasta	f769045f0a	server install: fix KDC PKINIT configuration ... Set `pkinit_pool` in `kdc.conf` to a CA certificate bundle of all CAs known to IPA. Make sure `cacert.pem` is exported in all installation code paths. Use the KDC certificate itself as a PKINIT anchor in `login_password`. https://pagure.io/freeipa/issue/6831 Reviewed-By: Stanislav Laznicka <slaznick@redhat.com> Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>	2017-05-19 12:31:24 +02:00