freeipa/ipaserver/install
Rob Crittenden 1870c93354 Ensure IPA is running (ideally) before uninstalling the KRA
The KRA attempts to unregister itself from the security domain
which requires that IPA be running for this to succeed.

1. Move the KRA uninstall call prior to stopping all IPA
   services
2. Try to start IPA if it isn't running and a KRA is configured

It isn't mandatory that IPA be running for the KRA uninstall to
succeed but it will suppress a pretty scary backtrace and error
message.

https://pagure.io/freeipa/issue/8550

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
2021-02-04 01:29:53 +01:00
..
plugins Ignore database errors when trying to extract ipaCert on upgrade 2021-01-28 09:19:32 +01:00
server Ensure IPA is running (ideally) before uninstalling the KRA 2021-02-04 01:29:53 +01:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Use api.env.container_sysaccounts 2020-04-28 11:28:29 +02:00
adtrustinstance.py uninstall: Don't fail on missing /var/lib/samba 2020-08-17 10:46:23 +02:00
bindinstance.py Don't add 127.0.0.1 to resolv.conf twice 2020-10-08 08:32:08 +02:00
ca.py Don't restart certmonger after stopping tracking in uninstall 2020-10-19 12:56:22 -04:00
cainstance.py Change CA profile migration message from info to debug 2021-02-04 01:29:53 +01:00
certs.py Ensure that KDC cert has SAN DNS entry 2021-01-29 13:36:41 -05:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Add user and group wrappers 2020-09-22 09:23:18 -04:00
dns.py Change FreeIPA references to IPA and Identity Management 2021-01-21 13:51:45 +01:00
dnskeysyncinstance.py dnskeysyncinstance: use late binding for UID/GID resolution 2020-12-22 14:05:13 +02:00
dogtag.py Verify pki ini override early 2019-04-10 13:43:23 +02:00
dogtaginstance.py Use the new API introduced in PKI 10.8 2021-02-04 01:29:53 +01:00
dsinstance.py Skip offline dse.ldif patching by default 2020-10-05 15:02:14 +02:00
httpinstance.py Clean up entire /run/ipa/ccaches directory not just files 2020-09-23 14:48:29 +02:00
installutils.py Provide more detailed logging around memory detection 2021-02-01 10:35:16 -05:00
ipa_acme_manage.py ipa-acme-manage: user a cookie created for the communication with dogtag REST endpoints 2020-11-17 18:48:24 +02:00
ipa_backup.py Always define the path DNSSEC_OPENSSL_CONF 2020-11-30 15:52:19 +01:00
ipa_cacert_manage.py lint: Make Pylint-2.4 happy again 2020-02-12 18:08:32 +02:00
ipa_cert_fix.py Change FreeIPA references to IPA and Identity Management 2021-01-21 13:51:45 +01:00
ipa_crlgen_manage.py CRL generation master: new utility to enable|disable 2019-03-14 09:39:55 +01:00
ipa_kra_install.py Change FreeIPA references to IPA and Identity Management 2021-01-21 13:51:45 +01:00
ipa_ldap_updater.py Simplify LDAPUpdater 2020-09-22 09:21:00 -04:00
ipa_otptoken_import.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
ipa_pkinit_manage.py PKINIT: fix ipa-pkinit-manage enable|disable 2018-12-05 11:06:21 +01:00
ipa_replica_install.py Enable replica install info logging to match ipa-server-install 2018-11-01 13:08:58 +01:00
ipa_restore.py Add user and group wrappers 2020-09-22 09:23:18 -04:00
ipa_server_certinstall.py Require an ipa-ca SAN on 3rd party certs if ACME is enabled 2020-11-02 14:01:05 -05:00
ipa_server_install.py Improve console logging for ipa-server-install 2018-06-20 08:38:03 +02:00
ipa_server_upgrade.py ipa commands: print 'IPA is not configured' when ipa is not setup 2018-08-23 12:08:45 +02:00
ipa_trust_enable_agent.py ipa-adtrust-install: run remote configuration for new agents 2020-03-05 14:40:58 +01:00
ipa_winsync_migrate.py ipa commands: print 'IPA is not configured' when ipa is not setup 2018-08-23 12:08:45 +02:00
ipactl.py Ensure IPA is running (ideally) before uninstalling the KRA 2021-02-04 01:29:53 +01:00
kra.py Ensure IPA is running (ideally) before uninstalling the KRA 2021-02-04 01:29:53 +01:00
krainstance.py Change KRA profiles in certmonger tracking so they can renew 2020-12-01 12:56:03 +01:00
krbinstance.py Ensure that KDC cert has SAN DNS entry 2021-01-29 13:36:41 -05:00
ldapupdate.py Remove magic sleep from create_index_task 2020-10-05 15:02:14 +02:00
odsexporterinstance.py odsexporterinstance: use late binding for UID/GID resolution 2020-12-22 14:05:13 +02:00
opendnssecinstance.py opendnssecinstance: use late binding for UID/GID resolution 2020-12-22 14:05:13 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Change FreeIPA references to IPA and Identity Management 2021-01-21 13:51:45 +01:00
schemaupdate.py Unify access to FQDN 2020-10-26 17:11:19 +11:00
service.py service: handle empty list of services to update their state 2020-12-18 13:33:44 +02:00
sysupgrade.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
upgradeinstance.py Move where the restore state is marked during IPA server upgrade 2020-12-02 14:08:51 +02:00