freeipa/client
Jan Cholasta 11b8a34346 client install: fix client PKINIT configuration
Set `pkinit_anchors` in `krb5.conf` to a CA certificate bundle of CAs
trusted to issue KDC certificates rather than `/etc/ipa/ca.crt`.

Set `pkinit_pool` in `krb5.conf` to a CA certificate bundle of all CAs
known to IPA.

Make sure both bundles are exported in all installation code paths.

https://pagure.io/freeipa/issue/6831

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2017-05-19 12:31:24 +02:00
..
man fix minor spelling mistakes 2017-05-19 09:52:46 +02:00
config.c Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
ipa-certupdate ipaclient: move install modules to the install subpackage 2016-11-29 14:50:51 +01:00
ipa-client-automount automount install: fix checking of SSSD functionality on uninstall 2017-04-28 13:41:56 +02:00
ipa-client-common.c Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
ipa-client-common.h Migrate from #ifndef guards to #pragma once 2016-05-29 14:04:45 +02:00
ipa-client-install install: migrate client install to the new class hierarchy 2016-11-11 12:17:25 +01:00
ipa-getkeytab.c extend ipa-getkeytab to support other LDAP bind methods 2016-11-08 17:02:44 +01:00
ipa-join.c ipa-rmkeytab, ipa-join: don't fail if init of gettext failed 2016-06-27 12:34:18 +02:00
ipa-rmkeytab.c ipa-rmkeytab, ipa-join: don't fail if init of gettext failed 2016-06-27 12:34:18 +02:00
Makefile.am client install: fix client PKINIT configuration 2017-05-19 12:31:24 +02:00
version.m4.in Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00