Florence Blanc-Renaud aadb8051d4 Replica CA installation: ignore time skew during initial replication ...

During a replica CA installation, the initial replication step may fail
if there is too much time skew between the server and replica.

The replica installer already takes care of this for the replication of
the domain suffix but the replica CA installer does not set
nssldapd-ignore-time-skew to on for o=ipaca suffix.

During a replica CA installation, read the initial value of
nssldapd-ignore-time-skew, force it to on, start replication and
revert to the initial value.

Apply the same logic to dsinstance and ipa-replica-manage force-sync.

Fixes: https://pagure.io/freeipa/issue/9635
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2024-08-01 09:51:11 +02:00

..

man

ipa-migrate - starttls does not work

2024-07-15 17:22:19 -04:00

ipa-acme-manage.in

acme: add ipa-acme-manage command

2020-07-10 08:33:22 -04:00

ipa-adtrust-install.in

pylint: Fix unused-variable

2022-03-11 13:37:08 -05:00

ipa-advise.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-backup.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-ca-install.in

Call hsm_validator on KRA installs and validate the HSM password

2024-05-16 08:46:32 -04:00

ipa-cacert-manage.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-ccache-sweeper.in

Replace usage of #!/usr/bin/env python3 with #!/usr/bin/python3

2023-05-31 09:21:48 +02:00

ipa-cert-fix.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-compat-manage.in

pylint: remove useless suppression

2023-01-10 08:30:58 +01:00

ipa-crlgen-manage.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-csreplica-manage.in

pylint: Fix consider-using-dict-items

2022-03-11 13:37:08 -05:00

ipa-custodia-check.in

custodia: do not use deprecated jwcrypto wrappers

2024-05-23 15:12:27 -04:00

ipa-custodia.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-dns-install.in

Unify installer context to be 'installer'

2021-05-12 10:45:57 -04:00

ipa-httpd-kdcproxy.in

Don't create log files from help scripts

2019-09-24 15:23:30 +02:00

ipa-httpd-pwdreader.in

Convert ipa-httpd-pwdreader into Python script

2020-07-30 11:38:25 +02:00

ipa-kra-install.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-ldap-updater.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-managed-entries.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-migrate.in

IPA-to-IPA migration tool (beta)

2024-04-04 15:49:42 -04:00

ipa-nis-manage.in

pylint: remove useless suppression

2023-01-10 08:30:58 +01:00

ipa-otptoken-import.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-pki-retrieve-key.in

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ipa-pki-wait-running.in

Parse getStatus as JSON not XML

2021-08-05 17:35:51 -04:00

ipa-pkinit-manage.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-replica-conncheck.in

pylint: replace deprecated distutils module

2023-01-10 08:30:58 +01:00

ipa-replica-install.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-replica-manage.in

Replica CA installation: ignore time skew during initial replication

2024-08-01 09:51:11 +02:00

ipa-restore.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-server-certinstall.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-server-install.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-server-upgrade.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipa-subids.in

Add basic support for subordinate user/group ids

2021-07-09 09:47:30 -04:00

ipa-winsync-migrate.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

ipactl.in

Introduce minimal ipa-client-automount.in and ipactl.in

2019-06-28 10:53:07 +02:00

Makefile.am

IPA-to-IPA migration tool (beta)

2024-04-04 15:49:42 -04:00