freeipa/ipaserver
Martin Babinsky 6181844c0c use DM credentials to retrieve service keytab only in DLO
In DL0 directory manager password is bundled in the supplied replica file and
the replica installer can use it to authenticate against master when
retrieving service keytabs.

In DL1, however, DM credentials are generated randomly and used during local
DS instance creation. The proper DM password is imported by custodia much
later to the process. We must not allow the installer to contact the remote
master using this random password since it would fail.

https://fedorahosted.org/freeipa/ticket/6405

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
2016-11-11 12:17:25 +01:00
..
advise advise: Use name instead of __name__ to get plugin names 2016-09-08 17:28:24 +02:00
install use DM credentials to retrieve service keytab only in DLO 2016-11-11 12:17:25 +01:00
plugins x509: use python-cryptography to process certs 2016-11-10 10:21:47 +01:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc.py ipaldap: merge IPAdmin to LDAPClient 2016-11-07 11:34:03 +01:00
dns_data_management.py Fix compatibility with python-dns 1.15.0 2016-10-11 15:45:41 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
rpcserver.py pylint: enable the import-error check 2016-10-24 14:11:08 +02:00
servroles.py Introduce "NTP server" role 2016-06-15 13:51:48 +02:00
session.py pylint: enable the import-error check 2016-10-24 14:11:08 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Build: fix module name in ipaserver/setup.py 2016-11-09 13:08:32 +01:00
topology.py Fix topologysuffix-verify failing connections 2016-06-24 13:32:02 +02:00