Fraser Tweedale b0d9a4728f Setup lightweight CA key retrieval on install/upgrade ...

Add the ipa-pki-retrieve-key helper program and configure
lightweight CA key replication on installation and upgrade.  The
specific configuration steps are:

- Add the 'dogtag/$HOSTNAME' service principal
- Create the pricipal's Custodia keys
- Retrieve the principal's keytab
- Configure Dogtag's CS.cfg to use ExternalProcessKeyRetriever
  to invoke ipa-pki-retrieve-key for key retrieval

Also bump the minimum version of Dogtag to 10.3.2.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>

2016-06-09 09:04:27 +02:00

..

__init__.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

aci.py

ipalib.aci: Port to Python 3

2015-10-13 14:16:32 +02:00

backend.py

rpc: specify connection options in API config

2016-06-03 09:00:34 +02:00

base.py

Modernize use of range()

2015-09-01 11:42:01 +02:00

capabilities.py

dns_name_values capability added

2014-06-03 15:55:32 +02:00

certstore.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

cli.py

parameters: introduce cli_metavar keyword argument

2016-06-03 09:00:34 +02:00

config.py

Fix more bytes/unicode issues

2015-10-22 18:34:46 +02:00

constants.py

Setup lightweight CA key retrieval on install/upgrade

2016-06-09 09:04:27 +02:00

crud.py

ipalib, ipaserver: fix incorrect API.register calls in docstrings

2016-05-25 16:06:26 +02:00

dns.py

dns: move code shared by client and server to separate module

2016-06-03 09:00:34 +02:00

errors.py

Turn verify_host_resolvable() into a wrapper around ipapython.dnsutil

2016-05-30 20:14:32 +02:00

frontend.py

frontend: do not check API minor version of the client

2016-06-03 09:00:34 +02:00

krb_utils.py

pylint: supress false positive no-member errors

2016-03-02 14:57:36 +01:00

Makefile

Package ipapython, ipalib, ipaplatform, ipatests for Python 3

2015-12-17 10:52:57 +01:00

messages.py

DNS: Warn if forwarding policy conflicts with automatic empty zones

2016-05-30 20:14:32 +02:00

output.py

makeapi: optimize API.txt

2016-05-25 16:06:26 +02:00

parameters.py

ipalib: replace DeprecatedParam with deprecated Param argument

2016-06-03 09:00:34 +02:00

pkcs10.py

Remove unused imports

2015-12-23 07:59:22 +01:00

plugable.py

ipaclient: implement thin client

2016-06-03 09:00:34 +02:00

request.py

ipalib: provide per-call command context

2016-03-03 10:06:18 +01:00

rpc.py

rpc: do not validate command name in RPCClient.forward

2016-06-03 09:00:34 +02:00

session.py

Pylint: remove unnecessary-semicolon

2016-03-22 10:20:51 +01:00

setup.py.in

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

text.py

Remove unused imports

2015-12-23 07:59:22 +01:00

util.py

dns: move code shared by client and server to separate module

2016-06-03 09:00:34 +02:00

x509.py

Remove service and host cert issuer validation

2016-06-06 08:58:01 +02:00