Christian Heimes 530da69ead Fix KRA replica installation from CA master ... ipa-replica-install --kra-install can fail when the topology already has a KRA, but replica is installed from a master with just CA. In that case, Custodia may pick a machine that doesn't have the KRA auditing and signing certs in its NSSDB. Example: * master with CA * replica1 with CA and KRA * new replica gets installed from master The replica installer now always picks a KRA peer. The change fixes test scenario TestInstallWithCA1::()::test_replica2_ipa_dns_install Fixes: https://pagure.io/freeipa/issue/7518 See: https://pagure.io/freeipa/issue/7008 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>		2018-07-19 15:44:46 +02:00
..
__init__.py	install: validate AD trust-related options in installers	2018-04-17 14:28:45 +02:00
install.py	Delay enabling services until end of installer	2018-07-06 13:26:43 +02:00
replicainstall.py	Fix KRA replica installation from CA master	2018-07-19 15:44:46 +02:00
upgrade.py	Fix pylint 2.0 return-related violations	2018-07-11 10:11:38 +02:00