mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-25 14:40:16 -05:00
Rob Crittenden
5d55b4efb2
A new command-line option was added, --key-type-size, to define the type of key to generate and the size of the key, or equivalent. Only rsa is supported currently but this can be expanded easily if additional key types are added. Placeholders have been added for ec and ml-dsa key types but they are not yet supported. There is also a config plugin option to modify this value. It does NOT modify any certificates already issued. Changing it will only apply to new replicas added. Related: https://pagure.io/freeipa/issue/9738 Also add a test to verify installation key sizes. Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Fraser Tweedale <ftweedal@redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Rafael Guterres Jeffman <rjeffman@redhat.com> Reviewed-By: Thomas Woerner <twoerner@redhat.com>
2.0 KiB
2.0 KiB
config_mod
Modify configuration options.
Arguments
No arguments.
Options
- rights : :ref:
Flag<Flag>(Required) - Default: False
- all : :ref:
Flag<Flag>(Required) - Default: False
- raw : :ref:
Flag<Flag>(Required) - Default: False
- ipamaxusernamelength : :ref:
Int<Int> - ipamaxhostnamelength : :ref:
Int<Int> - ipahomesrootdir : :ref:
IA5Str<IA5Str> - ipadefaultloginshell : :ref:
Str<Str> - ipadefaultprimarygroup : :ref:
Str<Str> - ipadefaultemaildomain : :ref:
Str<Str> - ipasearchtimelimit : :ref:
Int<Int> - ipasearchrecordslimit : :ref:
Int<Int> - ipausersearchfields : :ref:
IA5Str<IA5Str> - ipagroupsearchfields : :ref:
IA5Str<IA5Str> - ipamigrationenabled : :ref:
Bool<Bool> - ipagroupobjectclasses : :ref:
Str<Str> - ipauserobjectclasses : :ref:
Str<Str> - ipapwdexpadvnotify : :ref:
Int<Int> - ipaconfigstring : :ref:
StrEnum<StrEnum> - Values: ('AllowNThash', 'KDC:Disable Last Success', 'KDC:Disable Lockout', 'KDC:Disable Default Preauth for SPNs', 'EnforceLDAPOTP', 'SubID:Disable')
- ipaselinuxusermaporder : :ref:
Str<Str> - ipaselinuxusermapdefault : :ref:
Str<Str> - ipakrbauthzdata : :ref:
StrEnum<StrEnum> - Values: ('MS-PAC', 'PAD', 'nfs:NONE')
- ipauserauthtype : :ref:
StrEnum<StrEnum> - Values: ('password', 'radius', 'otp', 'pkinit', 'hardened', 'idp', 'passkey', 'disabled')
- ipauserdefaultsubordinateid : :ref:
Bool<Bool> - ca_renewal_master_server : :ref:
Str<Str> - ipadomainresolutionorder : :ref:
Str<Str> - enable_sid : :ref:
Flag<Flag> - Default: False
- add_sids : :ref:
Flag<Flag> - Default: False
- netbios_name : :ref:
Str<Str> - ipaservicekeytypesize : :ref:
Str<Str> - setattr : :ref:
Str<Str> - addattr : :ref:
Str<Str> - delattr : :ref:
Str<Str> - version : :ref:
Str<Str>
Output
| Name | Type |
|---|---|
| result | Entry |
| summary | Output |
| value | PrimaryKey |