Jan Cholasta f769045f0a server install: fix KDC PKINIT configuration ...

Set `pkinit_pool` in `kdc.conf` to a CA certificate bundle of all CAs known
to IPA.

Make sure `cacert.pem` is exported in all installation code paths.

Use the KDC certificate itself as a PKINIT anchor in `login_password`.

https://pagure.io/freeipa/issue/6831

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

2017-05-19 12:31:24 +02:00

..

install

server install: fix KDC PKINIT configuration

2017-05-19 12:31:24 +02:00

__init__.py

pylint_plugins: add forbidden import checker

2017-03-10 13:04:59 +01:00

aci.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

backend.py

ldap2: change default time/size limit

2016-11-07 11:34:03 +01:00

base.py

Modernize use of range()

2015-09-01 11:42:01 +02:00

capabilities.py

Replace LooseVersion

2016-11-24 15:46:40 +01:00

cli.py

Revert "Add 'ipa localenv' subcommand"

2016-12-02 13:00:06 +01:00

config.py

pylint_plugins: add forbidden import checker

2017-03-10 13:04:59 +01:00

constants.py

ca_status: add HTTP timeout 30 seconds

2017-05-04 14:09:50 +02:00

crud.py

ipalib, ipaserver: fix incorrect API.register calls in docstrings

2016-05-25 16:06:26 +02:00

dns.py

dns: do not rely on custom param fields in record attributes

2016-06-20 16:39:12 +02:00

errors.py

csrgen: Add code to generate scripts that generate CSRs

2017-01-31 10:20:28 +01:00

frontend.py

fix: regression in API version comparison

2016-12-13 13:53:27 +01:00

krb_utils.py

Allow login to WebUI using Kerberos aliases/enterprise principals

2017-03-08 15:56:11 +01:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

messages.py

Fix malformed or missing docstrings in ipalib/messages

2016-08-16 11:59:35 +02:00

misc.py

Add fix for ipa plugins command

2017-02-17 10:22:07 +01:00

output.py

allow 'value' output param in commands without primary key

2016-07-20 13:57:01 +02:00

parameters.py

Add --password-expiration to allow admin to force user password expiration

2017-03-31 12:19:40 +02:00

pkcs10.py

cert-request: accept CSRs with extraneous data

2016-11-11 15:42:26 +01:00

plugable.py

Raise errors.EnvironmentError if IPA_CONFDIR var is incorrectly used

2016-12-02 15:05:33 +01:00

request.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

rpc.py

Prevent churn on ccaches

2017-03-28 13:36:30 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

setup, pylint, spec file: drop python-nss dependency

2017-03-31 12:20:35 +02:00

text.py

Python3 pylint fixes

2016-11-25 16:18:22 +01:00

util.py

cert-show: writable files does not mean dirs

2017-05-10 13:16:01 +02:00

x509.py

install: trust IPA CA for PKINIT

2017-05-19 12:31:24 +02:00