Fraser Tweedale e4462a9443 certupdate: only add LWCA tracking requests on CA servers ...

ipa-certupdate throws an exception when executed on a non-CA server
in a CA-ful deployment with lightweight sub-CAs (LWCAs).  Check that
we are on a CA server before attempting to create Certmonger
tracking requests for LWCAs.

HOW TO TEST

1. Install first server (with CA)
2. Install replica without CA
3. Create sub-CA (`ipa ca-add`)
4. Run `ipa-certupdate` on replica.  Observe that no stack trace is
   produced.

Fixes: https://pagure.io/freeipa/issue/8399
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>

2020-07-09 10:22:50 +10:00

..

csrgen

csrgen: Change to pure openssl config format (no script)

2017-04-03 07:46:30 +00:00

install

certupdate: only add LWCA tracking requests on CA servers

2020-07-09 10:22:50 +10:00

plugins

Fix otptoken_sync plugin

2019-11-28 16:09:07 +01:00

remote_plugins

Fix typo in idrange.py docstring

2020-02-14 09:48:50 +02:00

__init__.py

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00

__main__.py

Use entry_points for ipa CLI

2017-04-11 13:29:50 +02:00

csrgen_ffi.py

Fix build_requestinfo in LibreSSL environments

2019-05-14 15:58:40 +02:00

csrgen.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

discovery.py

Fix errors found by Pylint-2.4.3

2019-10-21 18:01:32 +11:00

frontend.py

Show group-add/remove-member-manager failures

2019-11-20 17:08:40 +01:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Make python-ldap optional for PyPI packages

2019-04-26 12:53:23 +02:00