mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-26 16:16:31 -06:00
2068c7c472
On upgrading a server without ACME to one with ACME the RA Agent DN needs to be added as a member of the ACME Enterprise Users group. This was previously done as part of the creation of that entry. So on upgrade the RA Agent wouldn't be a member so ipa-acme-manage didn't have access to operate against the CA REST API. In order to add the RA Agent to this group during installation the ACME provisioning has to come after that step so it is moved from the middle of an installation to the end and the group addition moved into the setup_acme() method. https://pagure.io/freeipa/issue/8603 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com> Reviewed-By: Fraser Tweedale <ftweedal@redhat.com> Reviewed-By: Mohammad Rizwan Yusuf <myusuf@redhat.com> |
||
|---|---|---|
| .. | ||
| advise | ||
| dnssec | ||
| install | ||
| plugins | ||
| secrets | ||
| __init__.py | ||
| dcerpc_common.py | ||
| dcerpc.py | ||
| dns_data_management.py | ||
| Makefile.am | ||
| masters.py | ||
| p11helper.py | ||
| rpcserver.py | ||
| servroles.py | ||
| setup.cfg | ||
| setup.py | ||
| topology.py | ||