freeipa/ipalib/install
Christian Heimes 074c2f5421 Don't block when kinit_pkinit() fails
Installation of ipa-client with PKINIT authentication can block when
there is a problem with PKINIT, e.g. KDC does not accept the cert or the
anchor chain is incomplete. `kinit` falls back to password
authentication and asks the user to enter a password.

`kinit` does not have an option to force non-interactive mode. Sending
`\n` to stdin seems to be the only solution here.

Fixes: https://pagure.io/freeipa/issue/9333
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2023-02-28 17:23:02 -05:00
..
__init__.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
certmonger.py Ensure that KDC cert has SAN DNS entry 2021-01-29 13:36:41 -05:00
certstore.py Fix ipa-server-upgrade: This entry already exists 2017-08-30 12:47:53 +02:00
dnsforwarders.py Add helpers for resolve1 and nameservers 2020-09-23 16:44:26 +02:00
hostname.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
kinit.py Don't block when kinit_pkinit() fails 2023-02-28 17:23:02 -05:00
service.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
sysrestore.py Address legacy pylint issues in sysrestore.py 2020-08-07 16:44:28 -04:00