IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-12 01:01:55 -06:00
Code Issues Packages Projects Releases Wiki Activity
6b6c1879c5
freeipa/ipaserver/install
History
Rob Crittenden 6b6c1879c5 Call hsm_validator on KRA installs and validate the HSM password 
hsm_validator was validating that the token was available but
not that the provided password worked. Add that capability.

Also call it early in the CA and KRA installation cycle so that
it errors out early. This is particularly important for the KRA
because there is no uninstaller.

Bump the minimum PKI release to 11.5.0 as that contains important
fixes for the HSM.

Remove an unused arguments to hsm_version and hsm_validator.

Related: https://pagure.io/freeipa/issue/9273

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2024-05-16 08:46:32 -04:00
..
plugins ipasam: make krbtgt TDO principal canonical 2024-01-23 13:19:37 +01:00
server After an HSM replica install ensure all certs are visible 2024-05-16 08:46:32 -04:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py adtrust install: define constants for rid bases 2021-11-02 10:11:28 +01:00
adtrustinstance.py adtrustinstance: make sure NetBIOS name defaults are set properly 2024-01-17 19:32:47 +01:00
bindinstance.py LDAP autobind authenticateAsDN for BIND named 2021-06-15 14:13:16 +03:00
ca.py Call hsm_validator on KRA installs and validate the HSM password 2024-05-16 08:46:32 -04:00
cainstance.py Add HSM configuration options to installer scripts 2024-05-16 08:46:32 -04:00
certs.py Add token support to installer certificate handling 2024-05-16 08:46:32 -04:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py pylint: Fix unused-private-member 2022-03-11 13:37:08 -05:00
dns.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
dnskeysyncinstance.py dnskeysyncinstance: use late binding for UID/GID resolution 2020-12-22 14:05:13 +02:00
dogtag.py Verify pki ini override early 2019-04-10 13:43:23 +02:00
dogtaginstance.py Don't generate a cafile on HSM instalations 2024-05-16 08:46:32 -04:00
dsinstance.py BDB tuning should be applied only when BDB backend is used 2023-09-01 13:16:15 -04:00
httpinstance.py pylint: Replace deprecated pipes 2023-01-10 08:30:58 +01:00
installutils.py pylint: Fix used-before-assignment 2023-01-10 08:30:58 +01:00
ipa_acme_manage.py ACME: Don't treat pki-server ca-config-show failures as fatal 2024-01-10 13:35:51 -05:00
ipa_backup.py ipa-backup: adapt for 389ds switch to LMDB 2024-01-30 18:25:10 +01:00
ipa_cacert_manage.py Compatibility fix for PyCA cryptography 42.0.0 2024-01-24 14:54:24 +01:00
ipa_cert_fix.py Compatibility fix for PyCA cryptography 42.0.0 2024-01-24 14:54:24 +01:00
ipa_crlgen_manage.py CRL generation master: new utility to enable|disable 2019-03-14 09:39:55 +01:00
ipa_kra_install.py Add HSM configuration options to installer scripts 2024-05-16 08:46:32 -04:00
ipa_ldap_updater.py Remove -s option from ipa-ldap-updater usage 2021-05-20 14:45:27 -04:00
ipa_migrate_constants.py IPA-to-IPA migration tool (beta) 2024-04-04 15:49:42 -04:00
ipa_migrate.py Issue 9570 - migrate nsaccountlock 2024-04-15 16:06:23 +02:00
ipa_otptoken_import.py pylint: Fix useless-object-inheritance 2023-01-10 08:30:58 +01:00
ipa_pkinit_manage.py Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server 2021-06-17 17:28:48 -04:00
ipa_replica_install.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
ipa_restore.py ipa-restore: adapt for 389-ds switch to LMDB 2024-02-23 14:11:25 +01:00
ipa_server_certinstall.py Require an ipa-ca SAN on 3rd party certs if ACME is enabled 2020-11-02 14:01:05 -05:00
ipa_server_install.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
ipa_server_upgrade.py ipa commands: print 'IPA is not configured' when ipa is not setup 2018-08-23 12:08:45 +02:00
ipa_subids.py pylint: Fix arguments-renamed 2022-03-11 13:37:08 -05:00
ipa_trust_enable_agent.py ipa-adtrust-install: run remote configuration for new agents 2020-03-05 14:40:58 +01:00
ipa_winsync_migrate.py ipa commands: print 'IPA is not configured' when ipa is not setup 2018-08-23 12:08:45 +02:00
ipactl.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
kra.py Call hsm_validator on KRA installs and validate the HSM password 2024-05-16 08:46:32 -04:00
krainstance.py KRA: force OAEP for some HSM-based installations 2024-05-16 08:46:32 -04:00
krbinstance.py Tolerate absence of PAC ticket signature depending of server capabilities 2023-05-24 13:20:38 +02:00
ldapupdate.py pylint: remove useless suppression 2023-01-10 08:30:58 +01:00
odsexporterinstance.py odsexporterinstance: use late binding for UID/GID resolution 2020-12-22 14:05:13 +02:00
opendnssecinstance.py opendnssecinstance: use late binding for UID/GID resolution 2020-12-22 14:05:13 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py check_repl_update: in progress is a boolean 2022-08-16 08:39:06 +02:00
schemaupdate.py Unify access to FQDN 2020-10-26 17:11:19 +11:00
service.py LDAP autobind authenticateAsDN for BIND named 2021-06-15 14:13:16 +03:00
sysupgrade.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
upgradeinstance.py Use get_replication_plugin_name in LDAP updater 2021-06-21 10:58:02 +02:00