mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-26 17:01:14 -06:00
69bda6b440
ipa-server-upgrade fails when running the ipaload_cacrt plugin. The plugin finds all CA certificates in /etc/httpd/alias and uploads them in LDAP below cn=certificates,cn=ipa,cn=etc,$BASEDN. The issue happens because there is already an entry in LDAP for IPA CA, but with a different DN. The nickname in /etc/httpd/alias can differ from $DOMAIN IPA CA. To avoid the issue: 1/ during upgrade, run a new plugin that removes duplicates and restarts ldap (to make sure that uniqueness attr plugin is working after the new plugin) 2/ modify upload_cacert plugin so that it is using $DOMAIN IPA CA instead of cn=$nickname,cn=ipa,cn=etc,$BASEDN when uploading IPA CA. https://pagure.io/freeipa/issue/7125 Reviewed-By: Fraser Tweedale <ftweedal@redhat.com> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| adtrust.py | ||
| ca_renewal_master.py | ||
| dns.py | ||
| fix_replica_agreements.py | ||
| rename_managed.py | ||
| update_ca_topology.py | ||
| update_dna_shared_config.py | ||
| update_fix_duplicate_cacrt_in_ldap.py | ||
| update_idranges.py | ||
| update_ldap_server_list.py | ||
| update_managed_permissions.py | ||
| update_nis.py | ||
| update_pacs.py | ||
| update_passsync.py | ||
| update_ra_cert_store.py | ||
| update_referint.py | ||
| update_services.py | ||
| update_uniqueness.py | ||
| upload_cacrt.py | ||