Christian Heimes 530da69ead Fix KRA replica installation from CA master ...

ipa-replica-install --kra-install can fail when the topology already has
a KRA, but replica is installed from a master with just CA. In that
case, Custodia may pick a machine that doesn't have the KRA auditing and
signing certs in its NSSDB.

Example:
 * master with CA
 * replica1 with CA and KRA
 * new replica gets installed from master

The replica installer now always picks a KRA peer.

The change fixes test scenario TestInstallWithCA1::()::test_replica2_ipa_dns_install

Fixes: https://pagure.io/freeipa/issue/7518
See: https://pagure.io/freeipa/issue/7008
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2018-07-19 15:44:46 +02:00

..

advise

ipa-advise: remove plugin config-fedora-authconfig

2018-05-21 14:32:38 -04:00

dnssec

Fix pylint 2.0 conditional-related violations

2018-07-12 08:49:43 +02:00

install

Fix KRA replica installation from CA master

2018-07-19 15:44:46 +02:00

plugins

Fix translation of profile menu

2018-07-17 15:32:28 -04:00

secrets

Fix pylint 2.0 return-related violations

2018-07-11 10:11:38 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc_common.py

trust: detect and error out when non-AD trust with IPA domain name exists

2017-12-07 21:18:51 +02:00

dcerpc.py

Fix Pylint 2.0 violations

2018-07-14 12:04:19 +02:00

dns_data_management.py

Fix race condition in get_locations_records()

2018-07-09 14:36:42 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

p11helper.py

Fix Pylint 2.0 violations

2018-07-14 12:04:19 +02:00

rpcserver.py

Add endpoint for serving i18n requests

2018-07-17 15:32:28 -04:00

servroles.py

Removes NTP server role from servroles and description

2018-04-09 11:00:02 -04:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Cleanup shebang and executable bit

2018-07-05 19:46:42 +02:00

topology.py

fix incorrect suffix handling in topology checks

2017-06-05 18:37:37 +02:00