Fraser Tweedale 4028ad73e7 Fix DL1 replica installation in CA-less topology ...

Commit dbb98765d7 changed certmonger
requests for DS and HTTP certificates during installation to raise
on error (https://fedorahosted.org/freeipa/ticket/6514).
This introduced a regression in DL1 replica installation in CA-less
topology.  A certificate was requested, but prior to the
aforementioned commit this would fail silently and installation
continued, whereas now installation fails.

Guard the certificate request with a check that the topology is
CA-ful.

Fixes: https://fedorahosted.org/freeipa/ticket/6573
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

2016-12-20 10:19:15 +01:00

..

plugins

add missing attribute to ipaca replica during CA topology update

2016-12-09 15:47:13 +01:00

server

Fix DL1 replica installation in CA-less topology

2016-12-20 10:19:15 +01:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrustinstance.py

ipaclient: move install modules to the install subpackage

2016-11-29 14:50:51 +01:00

bindinstance.py

bindinstance: use data in named.conf to determine configuration status

2016-12-07 12:30:38 +01:00

ca.py

server install: fix external CA install

2016-12-08 12:08:49 +01:00

cainstance.py

Configure Anonymous PKINIT on server install

2016-12-12 13:39:44 +01:00

certs.py

Configure Anonymous PKINIT on server install

2016-12-12 13:39:44 +01:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

dns.py

ipapython: move certmonger and sysrestore to ipalib.install

2016-11-29 14:50:51 +01:00

dnskeysyncinstance.py

ipapython: move dnssec, p11helper and secrets to ipaserver

2016-11-29 14:50:51 +01:00

dogtag.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

dogtaginstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

dsinstance.py

Configure Anonymous PKINIT on server install

2016-12-12 13:39:44 +01:00

httpinstance.py

Configure Anonymous PKINIT on server install

2016-12-12 13:39:44 +01:00

installutils.py

Make kadmin family of functions return the result of ipautil.run

2016-12-16 10:37:49 +01:00

ipa_backup.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_cacert_manage.py

ipalib: move certstore to the install subpackage

2016-11-29 14:50:51 +01:00

ipa_kra_install.py

replica install: merge KRA agent cert export into KRA install

2016-11-11 12:13:56 +01:00

ipa_ldap_updater.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_otptoken_import.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

ipa_replica_install.py

install: migrate server installers to the new class hierarchy

2016-11-11 12:17:25 +01:00

ipa_replica_prepare.py

constants: remove CACERT

2016-11-29 14:50:51 +01:00

ipa_restore.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_server_certinstall.py

constants: remove CACERT

2016-11-29 14:50:51 +01:00

ipa_server_install.py

server install: fix external CA install

2016-12-08 12:08:49 +01:00

ipa_server_upgrade.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_winsync_migrate.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

kra.py

services: replace admin_conn with api.Backend.ldap2

2016-11-22 16:17:27 +01:00

krainstance.py

Do not log DM password in ca/kra installation logs

2016-11-25 09:13:56 +01:00

krbinstance.py

Configure Anonymous PKINIT on server install

2016-12-12 13:39:44 +01:00

ldapupdate.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

memcacheinstance.py

Use absolute imports

2015-08-12 18:17:23 +02:00

ntpinstance.py

service installers: clean up the inheritance

2016-11-11 12:17:25 +01:00

odsexporterinstance.py

services: replace admin_conn with api.Backend.ldap2

2016-11-22 16:17:27 +01:00

opendnssecinstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

gracefully handle setting replica bind dn group on old masters

2016-12-12 11:55:12 +01:00

schemaupdate.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

service.py

password policy: Add explicit default password policy for hosts and services

2016-12-14 17:46:12 +01:00

sysupgrade.py

ipapython: move certmonger and sysrestore to ipalib.install

2016-11-29 14:50:51 +01:00

upgradeinstance.py

Break ipaplatform / ipalib import cycle of hell

2016-11-24 16:30:32 +01:00