mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-25 08:21:05 -06:00
530da69ead
ipa-replica-install --kra-install can fail when the topology already has a KRA, but replica is installed from a master with just CA. In that case, Custodia may pick a machine that doesn't have the KRA auditing and signing certs in its NSSDB. Example: * master with CA * replica1 with CA and KRA * new replica gets installed from master The replica installer now always picks a KRA peer. The change fixes test scenario TestInstallWithCA1::()::test_replica2_ipa_dns_install Fixes: https://pagure.io/freeipa/issue/7518 See: https://pagure.io/freeipa/issue/7008 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com> |
||
|---|---|---|
| .. | ||
| advise | ||
| dnssec | ||
| install | ||
| plugins | ||
| secrets | ||
| __init__.py | ||
| dcerpc_common.py | ||
| dcerpc.py | ||
| dns_data_management.py | ||
| Makefile.am | ||
| p11helper.py | ||
| rpcserver.py | ||
| servroles.py | ||
| setup.cfg | ||
| setup.py | ||
| topology.py | ||