freeipa/ipaserver/install
Florence Blanc-Renaud c26038d24c ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname
During ipa-kra-install, the installer prepares a configuration file
provided to pkispawn. This configuration file defines
pki_security_domain_hostname=(first master)

but when we are installing a clone, it should be set to the local hostname
instead, see man page pki_default.cfg:
      pki_security_domain_hostname, pki_security_domain_https_port
              Location  of  the security domain.  Required for KRA, OCSP, TKS,
              and TPS subsystems and for  CA  subsystems  joining  a  security
              domain.  Defaults to the location of the CA subsystem within the
              same instance.

When pki_security_domain_hostname points to the 1st master, and this first
master is decommissioned, ipa-kra-install fails on new replicas because pkispawn
tries to connect to this (non-existing) host.

https://pagure.io/freeipa/issue/6895

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
2017-05-18 17:01:38 +02:00
..
plugins upgrade: adtrust update_tdo_gidnumber plugin must check if adtrust is installed 2017-04-24 12:51:37 +02:00
server renew agent: get rid of virtual profiles 2017-05-15 12:14:28 +02:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Remove surplus 'the' in output of ipa-adtrust-install 2017-04-11 13:06:13 +02:00
adtrustinstance.py adtrust: make sure that runtime hostname result is consistent with the configuration 2017-03-30 13:17:21 +02:00
bindinstance.py py3: create DNS zonefile: use textual mode 2017-02-10 14:03:04 +01:00
ca.py Fix CA-less to CA-full upgrade 2017-04-12 16:21:46 +02:00
cainstance.py renew agent: get rid of virtual profiles 2017-05-15 12:14:28 +02:00
certs.py Fix CA-less to CA-full upgrade 2017-04-12 16:21:46 +02:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Make sure remote hosts have our keys 2017-05-03 16:37:21 +02:00
dns.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
dnskeysyncinstance.py Fix PKCS11 helper 2017-04-12 09:54:10 +02:00
dogtag.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
dogtaginstance.py ipa-server-install: fix uninstall 2017-05-16 11:44:08 +00:00
dsinstance.py Move the compat plugin setup at the end of install 2017-04-24 17:11:51 +02:00
httpinstance.py Turn on NSSOCSP check in mod_nss conf 2017-05-10 09:08:34 +02:00
installutils.py installutils: add DM password validator 2017-05-17 12:50:42 +02:00
ipa_backup.py Stop requesting anonymous keytab and purge all references of it 2017-04-28 08:38:12 +00:00
ipa_cacert_manage.py ipa-cacert-manage: add --external-ca-type 2017-05-15 12:14:28 +02:00
ipa_kra_install.py ca, kra install: validate DM password 2017-05-17 12:50:42 +02:00
ipa_ldap_updater.py Set explicit confdir option for global contexts 2016-12-02 09:14:35 +01:00
ipa_otptoken_import.py Finish port to PyCA cryptography 2017-03-01 12:51:50 +01:00
ipa_replica_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_replica_prepare.py Fix RA cert import during DL0 replication 2017-04-19 12:36:01 +00:00
ipa_restore.py restore: restart/reload gssproxy after restore 2017-04-28 14:56:02 +02:00
ipa_server_certinstall.py scripts, tests: explicitly set confdir in the rest of server code 2017-02-22 08:07:48 +00:00
ipa_server_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_server_upgrade.py Set explicit confdir option for global contexts 2016-12-02 09:14:35 +01:00
ipa_winsync_migrate.py Set explicit confdir option for global contexts 2016-12-02 09:14:35 +01:00
kra.py Don't allow standalone KRA uninstalls 2017-03-13 16:27:23 +01:00
krainstance.py ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname 2017-05-18 17:01:38 +02:00
krbinstance.py ipa-server-install with external CA: fix pkinit cert issuance 2017-05-03 16:29:01 +02:00
ldapupdate.py py3: ldapupdate: fix logging str(bytes) issue 2017-02-08 18:09:49 +01:00
ntpinstance.py installer: Stop adding distro-specific NTP servers into ntp.conf 2017-01-05 10:45:30 +01:00
odsexporterinstance.py services: replace admin_conn with api.Backend.ldap2 2016-11-22 16:17:27 +01:00
opendnssecinstance.py Fix PKCS11 helper 2017-04-12 09:54:10 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Make wait_for_entry raise exceptions 2017-03-15 16:39:39 +01:00
schemaupdate.py Remove unused variables in the code 2016-09-27 13:35:58 +02:00
service.py installer service: fix typo in service entry 2017-05-05 18:55:41 +02:00
sysupgrade.py ipapython: move certmonger and sysrestore to ipalib.install 2016-11-29 14:50:51 +01:00
upgradeinstance.py installer: update time estimates 2017-03-10 15:46:34 +01:00