IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-13 01:31:56 -06:00
Code Issues Packages Projects Releases Wiki Activity
994f71ac8a
freeipa/ipaserver/install
History
Christian Heimes 994f71ac8a Use single Custodia instance in installers 
Installers now pass a single CustodiaInstance object around, instead of
creating new instances on demand. In case of replica promotion with CA,
the instance gets all secrets from a master with CA present. Before, an
installer created multiple instances and may have requested CA key
material from a different machine than DM password hash.

In case of Domain Level 1 and replica promotion, the CustodiaInstance no
longer adds the keys to the local instance and waits for replication to
other replica. Instead the installer directly uploads the new public
keys to the remote 389-DS instance.

Without promotion, new Custodia public keys are still added to local
389-DS over LDAPI.

Fixes: https://pagure.io/freeipa/issue/7518
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
2018-04-26 21:19:53 +02:00
..
plugins Add absolute_import future imports 2018-04-20 09:43:37 +02:00
server Use single Custodia instance in installers 2018-04-26 21:19:53 +02:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
adtrustinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
bindinstance.py Cleanup and remove more files on uninstall 2018-03-28 21:18:48 +02:00
ca.py Use single Custodia instance in installers 2018-04-26 21:19:53 +02:00
cainstance.py Use single Custodia instance in installers 2018-04-26 21:19:53 +02:00
certs.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Use single Custodia instance in installers 2018-04-26 21:19:53 +02:00
dns.py Warning the user when using a loopback IP as forwarder 2017-11-09 09:24:03 -02:00
dnskeysyncinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
dogtag.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
dogtaginstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
dsinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
httpinstance.py Fix upgrading of FreeIPA HTTPD 2018-03-26 09:42:07 +02:00
installutils.py Replace ntpd with chronyd in installation 2018-04-09 11:00:02 -04:00
ipa_backup.py Adding GSSPROXY_CONF to be backed up on ipa-backup 2018-04-25 15:53:58 -03:00
ipa_cacert_manage.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_kra_install.py Use single Custodia instance in installers 2018-04-26 21:19:53 +02:00
ipa_ldap_updater.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_otptoken_import.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_pkinit_manage.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_replica_install.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_replica_prepare.py replica_prepare: Remove the correct NSS DB files 2018-01-16 16:36:10 +01:00
ipa_restore.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_server_certinstall.py ipa-server-certinstall failing, unknown option realm 2018-04-20 08:51:37 -04:00
ipa_server_install.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_server_upgrade.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_winsync_migrate.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
kra.py Use single Custodia instance in installers 2018-04-26 21:19:53 +02:00
krainstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
krbinstance.py ipa-server-install: handle error when calling kdb5_util create 2018-03-13 10:09:13 +01:00
ldapupdate.py upgrade: treat duplicate entry when updating as not an error 2018-04-17 08:18:17 +02:00
odsexporterinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
opendnssecinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
schemaupdate.py logging: do not use ipa_log_manager to create module-level loggers 2017-07-14 15:55:59 +02:00
service.py Replace ntpd with chronyd in installation 2018-04-09 11:00:02 -04:00
sysupgrade.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
upgradeinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00