mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-23 15:40:01 -06:00
12529d7ef1
ipa-server-install executes ipa-client-install with the --on-master flag set, which causes the ipaclient.install.client.sssd_enable_ifp() function to be called. This function configures sssd so that the ipaapi user is allowed to access ifp. Any FreeIPA replica should also have sssd configured like this, but in that case we cannot simply pass the --on-master flag to ipa-client-install because it has other side effects. The solution is to call the ipaclient.install.client.sssd_enable_ifp() function from inside the ipaserver.install.server.replicainstall.promote_sssd() function. https://pagure.io/freeipa/issue/8403 Reviewed-By: Christian Heimes <cheimes@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com> |
||
---|---|---|
.. | ||
advise | ||
dnssec | ||
install | ||
plugins | ||
secrets | ||
__init__.py | ||
dcerpc_common.py | ||
dcerpc.py | ||
dns_data_management.py | ||
Makefile.am | ||
masters.py | ||
p11helper.py | ||
rpcserver.py | ||
servroles.py | ||
setup.cfg | ||
setup.py | ||
topology.py |