Jan Cholasta dea924ac8a replica install: do not set CA renewal master flag ...

The CA renewal master flag was uncoditionally set on every replica during
replica install. This causes the Dogtag certificates initially shared
among all replicas to differ after renewal.

Do not set the CA renewal master flag in replica install anymore. On
upgrade, remove the flag from all but one IPA masters.

https://fedorahosted.org/freeipa/ticket/5902

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

2016-05-24 14:54:01 +02:00

..

__init__.py

Server Upgrade: specify order of plugins in update files

2015-04-14 19:25:47 +02:00

adtrust.py

trusts: use ipaNTTrustPartner attribute to detect trust entries

2016-02-23 17:35:20 +01:00

ca_renewal_master.py

replica install: do not set CA renewal master flag

2016-05-24 14:54:01 +02:00

dns.py

DNS: Fix upgrade - master to forward zone transformation

2016-05-10 10:13:56 +02:00

fix_replica_agreements.py

Remove unused imports

2015-12-23 07:59:22 +01:00

rename_managed.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

update_ca_topology.py

Remove invalid error messages from topology upgrade

2015-11-25 13:58:05 +01:00

update_idranges.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00

update_managed_permissions.py

fix permission: Read Replication Agreements

2016-02-25 14:30:01 +01:00

update_nis.py

Upgrade: Fix upgrade of NIS Server configuration

2016-01-11 09:45:54 +01:00

update_pacs.py

Server Upgrade: plugins should use ldapupdater API instance

2015-04-14 19:25:47 +02:00

update_passsync.py

Server Upgrade: Allow base64 encoded values

2015-05-11 16:08:01 +00:00

update_referint.py

Use Python3-compatible dict method names

2015-09-01 11:42:01 +02:00

update_services.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00

update_uniqueness.py

update_uniqueness plugin: fix referenced before assigment error

2016-01-07 16:36:22 +01:00

upload_cacrt.py

Use byte literals where appropriate

2015-09-17 11:08:43 +02:00