Fraser Tweedale b0d9a4728f Setup lightweight CA key retrieval on install/upgrade ...

Add the ipa-pki-retrieve-key helper program and configure
lightweight CA key replication on installation and upgrade.  The
specific configuration steps are:

- Add the 'dogtag/$HOSTNAME' service principal
- Create the pricipal's Custodia keys
- Retrieve the principal's keytab
- Configure Dogtag's CS.cfg to use ExternalProcessKeyRetriever
  to invoke ipa-pki-retrieve-key for key retrieval

Also bump the minimum version of Dogtag to 10.3.2.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>

2016-06-09 09:04:27 +02:00

..

man

Add missing CA options to the manpage for ipa-replica-install

2016-05-28 16:31:19 +02:00

ipa-adtrust-install

Pylint: fix definition of global variables

2016-03-22 10:20:51 +01:00

ipa-advise

Use /usr/bin/python2

2014-01-03 09:46:05 +01:00

ipa-backup

Use /usr/bin/python2

2014-01-03 09:46:05 +01:00

ipa-ca-install

fix standalone installation of externally signed CA on IPA master

2016-01-28 16:33:15 +01:00

ipa-cacert-manage

Add CA certificate management tool ipa-cacert-manage.

2014-07-30 16:04:21 +02:00

ipa-compat-manage

Fix added to ipa-compat-manage command line help

2016-05-05 16:59:16 +02:00

ipa-csreplica-manage

ipa-csreplica-manage: remove extraneous ldap2 connection

2016-01-13 09:58:23 +01:00

ipa-dns-install

DNS installer: accept --auto-forwarders option in unattended mode

2016-05-11 09:49:23 +02:00

ipa-httpd-kdcproxy

differentiate between limit types when LDAP search exceeds configured limits

2016-04-13 17:52:22 +02:00

ipa-kra-install

Add a KRA to IPA

2014-08-22 09:59:31 +02:00

ipa-ldap-updater

Use /usr/bin/python2

2014-01-03 09:46:05 +01:00

ipa-managed-entries

Enable pylint unbalanced-tuple-unpacking check

2016-01-14 13:15:26 +01:00

ipa-nis-manage

ipa-nis-manage: add status option

2016-05-24 10:17:02 +02:00

ipa-otptoken-import

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa-pki-retrieve-key

Setup lightweight CA key retrieval on install/upgrade

2016-06-09 09:04:27 +02:00

ipa-replica-conncheck

rpc: specify connection options in API config

2016-06-03 09:00:34 +02:00

ipa-replica-install

replica promotion: use host credentials when setting up replication

2015-12-07 08:14:13 +01:00

ipa-replica-manage

Remove dangling RUVs even if replicas are offline

2016-06-03 15:22:00 +02:00

ipa-replica-prepare

Use /usr/bin/python2

2014-01-03 09:46:05 +01:00

ipa-restore

Use /usr/bin/python2

2014-01-03 09:46:05 +01:00

ipa-server-certinstall

Use /usr/bin/python2

2014-01-03 09:46:05 +01:00

ipa-server-install

install: Migrate ipa-server-install to the install framework

2015-06-08 15:34:11 +00:00

ipa-server-upgrade

Server Upgrade: ipa-server-upgrade command

2015-05-04 11:16:26 +00:00

ipa-upgradeconfig

Import included profiles during install or upgrade

2015-06-04 08:27:33 +00:00

ipa-winsync-migrate

winsync-migrate: Move the tool under ipaserver.install package

2015-07-02 13:23:21 +02:00

ipactl

ipactl: use server API

2016-06-03 09:00:34 +02:00

Makefile.am

Setup lightweight CA key retrieval on install/upgrade

2016-06-09 09:04:27 +02:00