Florence Blanc-Renaud ceec512b09 ipa-restore must stop tracking PKINIT cert in the preparation phase ...

ipa-restore calls certmonger to stop tracking the PKI certs, HTTP and DS certs.
It must also stop tracking the newly introduced PKINIT cert (stored in
/var/kerberos/krb5kdc/kdc.crt).

Otherwise the restore operation ends up with PKINIT cert tracked twice and
uninstallation fails.

https://fedorahosted.org/freeipa/ticket/6570

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

2017-01-20 19:16:25 +01:00

..

plugins

add missing attribute to ipaca replica during CA topology update

2016-12-09 15:47:13 +01:00

server

Update warning message for ipa server uninstall

2017-01-18 09:41:11 +01:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrustinstance.py

ipaclient: move install modules to the install subpackage

2016-11-29 14:50:51 +01:00

bindinstance.py

bindinstance: use data in named.conf to determine configuration status

2016-12-07 12:30:38 +01:00

ca.py

Indicate that ca subject / subject base uses LDAP RDN order

2017-01-11 15:27:55 +01:00

cainstance.py

cainstance: do not configure renewal guard

2017-01-16 14:37:25 +01:00

certs.py

Allow full customisability of IPA CA subject DN

2017-01-11 15:26:20 +01:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

dns.py

ipapython: move certmonger and sysrestore to ipalib.install

2016-11-29 14:50:51 +01:00

dnskeysyncinstance.py

ipa_generate_password algorithm change

2017-01-06 09:26:56 +01:00

dogtag.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

dogtaginstance.py

dogtaginstance: track server certificate with our renew agent

2017-01-16 14:37:25 +01:00

dsinstance.py

Remove duplicated step from DS install

2017-01-12 11:15:14 +01:00

httpinstance.py

ipa_generate_password algorithm change

2017-01-06 09:26:56 +01:00

installutils.py

Allow full customisability of IPA CA subject DN

2017-01-11 15:26:20 +01:00

ipa_backup.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_cacert_manage.py

Allow full customisability of IPA CA subject DN

2017-01-11 15:26:20 +01:00

ipa_kra_install.py

server install: fix KRA agent PEM file not being created

2016-12-20 16:26:28 +01:00

ipa_ldap_updater.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_otptoken_import.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

ipa_replica_install.py

install: migrate server installers to the new class hierarchy

2016-11-11 12:17:25 +01:00

ipa_replica_prepare.py

constants: remove CACERT

2016-11-29 14:50:51 +01:00

ipa_restore.py

ipa-restore must stop tracking PKINIT cert in the preparation phase

2017-01-20 19:16:25 +01:00

ipa_server_certinstall.py

constants: remove CACERT

2016-11-29 14:50:51 +01:00

ipa_server_install.py

server install: fix external CA install

2016-12-08 12:08:49 +01:00

ipa_server_upgrade.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_winsync_migrate.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

kra.py

server install: fix KRA agent PEM file not being created

2016-12-20 16:26:28 +01:00

krainstance.py

Allow full customisability of IPA CA subject DN

2017-01-11 15:26:20 +01:00

krbinstance.py

Configure Anonymous PKINIT on server install

2016-12-12 13:39:44 +01:00

ldapupdate.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

memcacheinstance.py

Use absolute imports

2015-08-12 18:17:23 +02:00

ntpinstance.py

installer: Stop adding distro-specific NTP servers into ntp.conf

2017-01-05 10:45:30 +01:00

odsexporterinstance.py

services: replace admin_conn with api.Backend.ldap2

2016-11-22 16:17:27 +01:00

opendnssecinstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

gracefully handle setting replica bind dn group on old masters

2016-12-12 11:55:12 +01:00

schemaupdate.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

service.py

password policy: Add explicit default password policy for hosts and services

2016-12-14 17:46:12 +01:00

sysupgrade.py

ipapython: move certmonger and sysrestore to ipalib.install

2016-11-29 14:50:51 +01:00

upgradeinstance.py

Break ipaplatform / ipalib import cycle of hell

2016-11-24 16:30:32 +01:00