freeipa/ipaserver/install
Fraser Tweedale 7995518921 Restore old version of caIPAserviceCert for upgrade only
The latest version of caIPAserviceCert profile includes a feature
that is not available before Dogtag 10.4, and this version of the
profile is intended for new installs only (otherwise, problems will
arise in topologies containing CA replicas at an earlier version).
But IPA versions before v4.2 did not use LDAP-based profiles, so the
new version of the profile gets imported when upgrading from
pre-v4.2 to v4.5 or later.

We do not yet have a proper version- and topology-aware profile
update mechanism, so to resolve this issue, ship the older version
of the profile alongside the newer version, and make sure we use the
older version when importing the profile in an upgrade context.

https://pagure.io/freeipa/issue/7097

Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2017-08-14 19:25:59 +02:00
..
plugins x509: Make certificates represented as objects 2017-07-27 10:28:58 +02:00
server replica: fix SetuptoolsVersion comparison 2017-08-03 13:48:12 +02:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Correct typo estabilish->establish in the install scripts 2017-07-24 13:41:16 +02:00
adtrustinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
bindinstance.py py3: fixing zonemgr_callback 2017-07-27 16:48:49 +02:00
ca.py ca: TypeError fix 2017-07-27 16:53:00 +02:00
cainstance.py Restore old version of caIPAserviceCert for upgrade only 2017-08-14 19:25:59 +02:00
certs.py certs: write and read bytes as such 2017-08-02 16:15:13 +02:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Misc Python 3 fixes for ipaserver.secrets 2017-08-11 13:47:35 +02:00
dns.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dnskeysyncinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dogtag.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
dogtaginstance.py Create a Certificate parameter 2017-07-27 10:28:58 +02:00
dsinstance.py x509: Make certificates represented as objects 2017-07-27 10:28:58 +02:00
httpinstance.py x509: Make certificates represented as objects 2017-07-27 10:28:58 +02:00
installutils.py x509: Make certificates represented as objects 2017-07-27 10:28:58 +02:00
ipa_backup.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_cacert_manage.py x509: Make certificates represented as objects 2017-07-27 10:28:58 +02:00
ipa_kra_install.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_ldap_updater.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_otptoken_import.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_pkinit_manage.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_replica_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_replica_prepare.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_restore.py logging: do not reference loggers in arguments and attributes 2017-07-14 15:55:59 +02:00
ipa_server_certinstall.py x509: Make certificates represented as objects 2017-07-27 10:28:58 +02:00
ipa_server_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_server_upgrade.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_winsync_migrate.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
kra.py kra: promote: Get ticket before calling custodia 2017-06-15 10:10:27 +02:00
krainstance.py krainstance: fix writing str to file 2017-07-27 16:51:09 +02:00
krbinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
ldapupdate.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ntpinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
odsexporterinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
opendnssecinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
schemaupdate.py logging: do not use ipa_log_manager to create module-level loggers 2017-07-14 15:55:59 +02:00
service.py x509: Make certificates represented as objects 2017-07-27 10:28:58 +02:00
sysupgrade.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
upgradeinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00