Jan Cholasta 11b8a34346 client install: fix client PKINIT configuration ...

Set `pkinit_anchors` in `krb5.conf` to a CA certificate bundle of CAs
trusted to issue KDC certificates rather than `/etc/ipa/ca.crt`.

Set `pkinit_pool` in `krb5.conf` to a CA certificate bundle of all CAs
known to IPA.

Make sure both bundles are exported in all installation code paths.

https://pagure.io/freeipa/issue/6831

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

2017-05-19 12:31:24 +02:00

..

man

fix minor spelling mistakes

2017-05-19 09:52:46 +02:00

config.c

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00

ipa-certupdate

ipaclient: move install modules to the install subpackage

2016-11-29 14:50:51 +01:00

ipa-client-automount

automount install: fix checking of SSSD functionality on uninstall

2017-04-28 13:41:56 +02:00

ipa-client-common.c

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00

ipa-client-common.h

Migrate from #ifndef guards to #pragma once

2016-05-29 14:04:45 +02:00

ipa-client-install

install: migrate client install to the new class hierarchy

2016-11-11 12:17:25 +01:00

ipa-getkeytab.c

extend ipa-getkeytab to support other LDAP bind methods

2016-11-08 17:02:44 +01:00

ipa-join.c

ipa-rmkeytab, ipa-join: don't fail if init of gettext failed

2016-06-27 12:34:18 +02:00

ipa-rmkeytab.c

ipa-rmkeytab, ipa-join: don't fail if init of gettext failed

2016-06-27 12:34:18 +02:00

Makefile.am

client install: fix client PKINIT configuration

2017-05-19 12:31:24 +02:00

version.m4.in

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00