freeipa/ipaserver/install
Ana Krivokapic c1e9b6fa1d Make sure replication works after DM password is changed
Replica information file contains the file `cacert.p12` which is protected by
the Directory Manager password of the initial IPA server installation. The DM
password of the initial installation is also used for the PKI admin user
password.

If the DM password is changed after the IPA server installation, the replication
fails.

To prevent this failure, add the following steps to ipa-replica-prepare:
1. Regenerate the `cacert.p12` file and protect it with the current DM password
2. Update the password of the PKI admin user with the current DM password

https://fedorahosted.org/freeipa/ticket/3594
2013-07-11 12:39:29 +03:00
..
plugins Permit reads to ipatokenRadiusProxyUser objects 2013-07-11 12:39:27 +03:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
adtrustinstance.py Fix bug in adtrustinstance 2013-07-09 11:44:38 -04:00
bindinstance.py Fix ipa-ca DNS name creation 2013-05-09 14:16:51 -04:00
cainstance.py Remove code to install Dogtag 9 2013-05-31 10:26:07 +02:00
certs.py Skip empty lines when parsing pk12util output. 2013-06-12 12:59:54 +02:00
dsinstance.py Enable SASL mapping fallback. 2013-06-27 17:06:51 +02:00
httpinstance.py Create Firefox configuration extension on CA-less install 2013-06-27 16:01:52 +02:00
installutils.py Check trust chain length in CA-less install. 2013-07-11 12:39:25 +03:00
ipa_backup.py Full system backup and restore 2013-04-12 09:59:17 -04:00
ipa_ldap_updater.py Apply LDAP update files in blocks of 10, as originally designed. 2013-04-12 10:16:01 -04:00
ipa_replica_prepare.py Make sure replication works after DM password is changed 2013-07-11 12:39:29 +03:00
ipa_restore.py Update only selected attributes for winsync agreement 2013-04-16 10:05:43 -04:00
krbinstance.py Enable SASL mapping fallback. 2013-06-27 17:06:51 +02:00
ldapupdate.py Apply LDAP update files in blocks of 10, as originally designed. 2013-04-12 10:16:01 -04:00
Makefile.am Add ipa-adtrust-install utility 2011-09-14 18:45:13 -04:00
memcacheinstance.py Add ipa_memcached service 2012-02-09 13:20:28 -06:00
ntpinstance.py Remove unused imports from ipaserver/install 2013-03-01 16:59:44 +01:00
otpdinstance.py Manage ipa-otpd.socket by IPA 2013-06-06 18:16:59 +02:00
replication.py Update only selected attributes for winsync agreement 2013-04-16 10:05:43 -04:00
service.py Flush stream after writing service messages 2013-06-11 14:40:29 +02:00
sysupgrade.py Add sysupgrade state file 2012-06-10 21:23:10 -04:00
upgradeinstance.py Apply LDAP update files in blocks of 10, as originally designed. 2013-04-12 10:16:01 -04:00