Fraser Tweedale 09aa3d1f76 Add ipa-cert-fix tool ... The ipa-cert-fix tool wraps `pki-server cert-fix`, performing additional certificate requests for non-Dogtag IPA certificates and performing additional actions. In particular: - Run cert-fix with arguments particular to the IPA deployment. - Update IPA RA certificate in the ipara user entry (if renewed). - Add shared certificates (if renewed) to the ca_renewal LDAP container for replication. - Become the CA renewal master if shared certificates were renewed. This ensures other CA replicas, including the previous CA renewal master if not the current host, pick up those new certificates when Certmonger attempts to renew them. Fixes: https://pagure.io/freeipa/issue/7885 Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>		2019-05-29 12:49:27 +10:00
..
plugins	Switch nsslapd-unhashed-pw-switch to nolog	2019-05-24 12:42:51 +02:00
server	Moving prompt for NTP options to install_check	2019-05-22 18:20:22 +02:00
__init__.py	Remove __all__ specifications in ipaclient and ipaserver.install	2013-09-06 15:42:33 +02:00
adtrust.py	ipaserver.install.adtrust: fix CID 323644	2018-11-07 16:37:18 +01:00
adtrustinstance.py	Set idmap config for Samba to follow IPA ranges and use SSSD	2019-04-24 15:47:19 -04:00
bindinstance.py	Use Network Manager to configure resolv.conf	2019-04-16 10:45:59 +02:00
ca.py	Add pki.ini override option	2019-04-10 13:43:23 +02:00
cainstance.py	constants: add ca_renewal container	2019-05-29 12:49:27 +10:00
certs.py	Py3: Replace six.moves imports	2018-10-05 12:06:19 +02:00
conncheck.py	install: introduce installer class hierarchy	2016-11-11 12:17:25 +01:00
custodiainstance.py	Move realm_to_serverid/ldap_uri to ipaldap	2019-02-05 08:39:13 -05:00
dns.py	Use api.env.container_masters	2019-03-28 00:21:00 +01:00
dnskeysyncinstance.py	Delay enabling services until end of installer	2018-07-06 13:26:43 +02:00
dogtag.py	Verify pki ini override early	2019-04-10 13:43:23 +02:00
dogtaginstance.py	Fix expected file permissions for ghost files	2019-05-16 14:28:00 +02:00
dsinstance.py	Switch nsslapd-unhashed-pw-switch to nolog	2019-05-24 12:42:51 +02:00
httpinstance.py	Debian: Add paths for open-sans and font-awesome	2019-04-24 14:08:20 +02:00
installutils.py	Add knob to limit hostname length	2019-05-16 14:38:43 -04:00
ipa_backup.py	ipa_backup.py: replace /var/lib/ipa/backup with paths.IPA_BACKUP_DIR	2019-05-07 09:08:40 +02:00
ipa_cacert_manage.py	Add support for multiple certificates/formats to ipa-cacert-manage	2018-11-13 10:44:14 +01:00
ipa_cert_fix.py	Add ipa-cert-fix tool	2019-05-29 12:49:27 +10:00
ipa_crlgen_manage.py	CRL generation master: new utility to enable|disable	2019-03-14 09:39:55 +01:00
ipa_kra_install.py	Add pki.ini override option	2019-04-10 13:43:23 +02:00
ipa_ldap_updater.py	Add absolute_import future imports	2018-04-20 09:43:37 +02:00
ipa_otptoken_import.py	Py3: Remove subclassing from object	2018-09-27 11:49:04 +02:00
ipa_pkinit_manage.py	PKINIT: fix ipa-pkinit-manage enable|disable	2018-12-05 11:06:21 +01:00
ipa_replica_install.py	Enable replica install info logging to match ipa-server-install	2018-11-01 13:08:58 +01:00
ipa_restore.py	Check have packages for extra features been installed before restoring backup	2019-04-25 14:47:09 +02:00
ipa_server_certinstall.py	Move realm_to_serverid/ldap_uri to ipaldap	2019-02-05 08:39:13 -05:00
ipa_server_install.py	Improve console logging for ipa-server-install	2018-06-20 08:38:03 +02:00
ipa_server_upgrade.py	ipa commands: print 'IPA is not configured' when ipa is not setup	2018-08-23 12:08:45 +02:00
ipa_winsync_migrate.py	ipa commands: print 'IPA is not configured' when ipa is not setup	2018-08-23 12:08:45 +02:00
kra.py	Add pki.ini override option	2019-04-10 13:43:23 +02:00
krainstance.py	ipaserver/install/krainstance.py: chown after write	2019-04-11 10:04:00 +02:00
krbinstance.py	Move DS's Kerberos env vars to unit file	2019-04-02 19:35:38 +02:00
ldapupdate.py	Use new LDAPClient constructors	2019-02-05 08:39:13 -05:00
odsexporterinstance.py	Delay enabling services until end of installer	2018-07-06 13:26:43 +02:00
opendnssecinstance.py	Add ODS manager abstraction to ipaplatform	2019-04-24 14:08:20 +02:00
otpdinstance.py	Enable pylint missing-final-newline check	2015-12-23 07:59:22 +01:00
replication.py	Switch nsslapd-unhashed-pw-switch to nolog	2019-05-24 12:42:51 +02:00
schemaupdate.py	logging: do not use ipa_log_manager to create module-level loggers	2017-07-14 15:55:59 +02:00
service.py	ipa-setup-kra: fix python2 parameter	2019-04-01 12:55:46 +02:00
sysupgrade.py	Add absolute_import future imports	2018-04-20 09:43:37 +02:00
upgradeinstance.py	Move realm_to_serverid/ldap_uri to ipaldap	2019-02-05 08:39:13 -05:00