freeipa/ipaclient/install
Jan Cholasta 11b8a34346 client install: fix client PKINIT configuration
Set `pkinit_anchors` in `krb5.conf` to a CA certificate bundle of CAs
trusted to issue KDC certificates rather than `/etc/ipa/ca.crt`.

Set `pkinit_pool` in `krb5.conf` to a CA certificate bundle of all CAs
known to IPA.

Make sure both bundles are exported in all installation code paths.

https://pagure.io/freeipa/issue/6831

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2017-05-19 12:31:24 +02:00
..
__init__.py ipa-client-install: move client install to module 2016-11-11 12:13:56 +01:00
automount.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
client.py client install: fix client PKINIT configuration 2017-05-19 12:31:24 +02:00
ipa_certupdate.py client install: fix client PKINIT configuration 2017-05-19 12:31:24 +02:00
ipa_client_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipachangeconf.py ipaclient: move install modules to the install subpackage 2016-11-29 14:50:51 +01:00
ipadiscovery.py Sort SRV records by priority 2017-05-16 09:43:56 +02:00
ntpconf.py ipaclient: move install modules to the install subpackage 2016-11-29 14:50:51 +01:00
sssd.py client install: split off SSSD options into a separate class 2017-03-13 10:12:40 +01:00