freeipa/ipaclient
Rob Crittenden 8af6accfa5
Retrieve certificate subject base directly instead of ipa-join
The subject base is used as a fallback to find the available
CA certificates during client enrollment if the LDAP connection
fails (e.g. due to new client connecting to very old server) and
for constructing the subject if a certificate is requested.

raw=True is passed to config-show in order to avoid parsing
the server roles which will fail because the services aren't
marked as enabled until after the client installation is
successful on a master.

ipa-join providing the subject base via stderr was fragile and
would cause client enrollment to fail if any other output was
included in stderr.

https://pagure.io/freeipa/issue/7674

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2018-08-29 09:03:18 +02:00
..
csrgen csrgen: Change to pure openssl config format (no script) 2017-04-03 07:46:30 +00:00
install Retrieve certificate subject base directly instead of ipa-join 2018-08-29 09:03:18 +02:00
plugins Fix Pylint 2.0 violations 2018-07-14 12:04:19 +02:00
remote_plugins Fix regression: Handle unicode where str is expected 2018-07-18 09:53:53 +02:00
__init__.py Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
__main__.py Use entry_points for ipa CLI 2017-04-11 13:29:50 +02:00
csrgen_ffi.py Cleanup shebang and executable bit 2018-07-05 19:46:42 +02:00
csrgen.py pylint3: workaround false positives reported for W1662 2018-05-17 16:55:42 -04:00
frontend.py frontent: Add summary class property to CommandOverride 2016-08-17 14:16:04 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Cleanup shebang and executable bit 2018-07-05 19:46:42 +02:00