freeipa/ipaclient/install
Jan Cholasta f769045f0a server install: fix KDC PKINIT configuration
Set `pkinit_pool` in `kdc.conf` to a CA certificate bundle of all CAs known
to IPA.

Make sure `cacert.pem` is exported in all installation code paths.

Use the KDC certificate itself as a PKINIT anchor in `login_password`.

https://pagure.io/freeipa/issue/6831

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2017-05-19 12:31:24 +02:00
..
__init__.py ipa-client-install: move client install to module 2016-11-11 12:13:56 +01:00
automount.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
client.py client install: fix client PKINIT configuration 2017-05-19 12:31:24 +02:00
ipa_certupdate.py server install: fix KDC PKINIT configuration 2017-05-19 12:31:24 +02:00
ipa_client_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipachangeconf.py ipaclient: move install modules to the install subpackage 2016-11-29 14:50:51 +01:00
ipadiscovery.py Sort SRV records by priority 2017-05-16 09:43:56 +02:00
ntpconf.py ipaclient: move install modules to the install subpackage 2016-11-29 14:50:51 +01:00
sssd.py client install: split off SSSD options into a separate class 2017-03-13 10:12:40 +01:00