IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-26 08:51:50 -06:00
Code Issues Packages Projects Releases Wiki Activity
a94ba732ab
freeipa/ipaserver/install
History
Florence Blanc-Renaud a94ba732ab Fix ipa-replica-install when key not protected by PIN 
When ipa-replica-install is called in a CA-less environment, the certs,
keys and pins need to be provided with --{http|dirsrv|pkinit}-cert-file and
--{http|dirsrv|pkinit}-pin. If the pin is not provided in the CLI options,
and in interactive mode, the installer prompts for the PIN.
The issue happens when the keys are not protected by any PIN, the installer
does not accept an empty string and keeps on asking for a PIN.

The fix makes sure that the installer accepts an empty PIN. A similar fix
was done for ipa-server-install in
https://pagure.io/freeipa/c/4ee426a68ec60370eee6f5aec917ecce444840c7

Fixes:
https://pagure.io/freeipa/issue/7274

Reviewed-By: Christian Heimes <cheimes@redhat.com>
2017-11-23 13:29:54 +01:00
..
plugins Fix ipa-server-upgrade: This entry already exists 2017-08-30 12:47:53 +02:00
server Fix ipa-replica-install when key not protected by PIN 2017-11-23 13:29:54 +01:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Correct typo estabilish->establish in the install scripts 2017-07-24 13:41:16 +02:00
adtrustinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
bindinstance.py py3: fixing zonemgr_callback 2017-07-27 16:48:49 +02:00
ca.py Use os.path.isfile() and isdir() 2017-10-20 12:27:19 +02:00
cainstance.py Remove caJarSigningCert profile and related code 2017-11-01 12:39:19 +01:00
certs.py Support sqlite NSSDB 2017-11-16 12:17:01 +01:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Backup ipa-custodia conf and keys 2017-11-13 18:10:54 +01:00
dns.py Warning the user when using a loopback IP as forwarder 2017-11-09 09:24:03 -02:00
dnskeysyncinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dogtag.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
dogtaginstance.py Increase dbus client timeouts during CA install 2017-10-18 17:55:25 +02:00
dsinstance.py Checks if replica-s4u2proxy.ldif should be applied 2017-10-25 14:30:26 -02:00
httpinstance.py Fix ipa-server-upgrade with server cert tracking 2017-09-19 09:34:31 +02:00
installutils.py Use os.path.isfile() and isdir() 2017-10-20 12:27:19 +02:00
ipa_backup.py Support sqlite NSSDB 2017-11-16 12:17:01 +01:00
ipa_cacert_manage.py ipa-cacert-manage: avoid some duplicate string definitions 2017-10-04 10:09:18 +02:00
ipa_kra_install.py Use os.path.isfile() and isdir() 2017-10-20 12:27:19 +02:00
ipa_ldap_updater.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_otptoken_import.py OTP import: support hash names with HMAC- prefix 2017-09-18 11:37:31 +02:00
ipa_pkinit_manage.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_replica_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_replica_prepare.py Support sqlite NSSDB 2017-11-16 12:17:01 +01:00
ipa_restore.py Support sqlite NSSDB 2017-11-16 12:17:01 +01:00
ipa_server_certinstall.py Support sqlite NSSDB 2017-11-16 12:17:01 +01:00
ipa_server_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_server_upgrade.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ipa_winsync_migrate.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
kra.py Use os.path.isfile() and isdir() 2017-10-20 12:27:19 +02:00
krainstance.py Unify storing certificates in LDAP 2017-08-25 09:40:15 +02:00
krbinstance.py Less confusing message for PKINIT configuration during install 2017-10-13 16:47:53 +02:00
ldapupdate.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
ntpinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
odsexporterinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
opendnssecinstance.py Use os.path.isfile() and isdir() 2017-10-20 12:27:19 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Python3: Fix winsync replication agreement 2017-09-15 08:36:22 +02:00
schemaupdate.py logging: do not use ipa_log_manager to create module-level loggers 2017-07-14 15:55:59 +02:00
service.py Unify storing certificates in LDAP 2017-08-25 09:40:15 +02:00
sysupgrade.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
upgradeinstance.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00