freeipa/ipaserver/install
Alexander Bokovoy 294aa3a333 Revert "Require a minimum SASL security factor of 56"
This reverts commit 3509545897.

We cannot force increase in minimum SASL security factor until our
consumers are ready to deal with it. Unfortunately, realmd uses
anonymous connection for discovery and validation of IPA LDAP server.

The way it is done is fragile (it doesn't take into account an
advertised IPA version, only checks that 'IPA' string exists in the info
field) but since bumping of minimum SSF prevents reading IPA info field
using anonymous connection, client enrollment fails.

We should get back to bumping minimum SSF after realmd and other
potential consumers are fixed.

Reviewed-By: François Cami <fcami@redhat.com>
2019-05-02 11:39:23 +02:00
..
plugins upgrade: upgrade existing trust agreements to new layout 2019-03-28 14:08:19 +01:00
server Guard dbus.start() with dbus.is_running() 2019-04-26 12:47:51 +02:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py ipaserver.install.adtrust: fix CID 323644 2018-11-07 16:37:18 +01:00
adtrustinstance.py Set idmap config for Samba to follow IPA ranges and use SSSD 2019-04-24 15:47:19 -04:00
bindinstance.py Use Network Manager to configure resolv.conf 2019-04-16 10:45:59 +02:00
ca.py Add pki.ini override option 2019-04-10 13:43:23 +02:00
cainstance.py Guard dbus.start() with dbus.is_running() 2019-04-26 12:47:51 +02:00
certs.py Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Move realm_to_serverid/ldap_uri to ipaldap 2019-02-05 08:39:13 -05:00
dns.py Use api.env.container_masters 2019-03-28 00:21:00 +01:00
dnskeysyncinstance.py Delay enabling services until end of installer 2018-07-06 13:26:43 +02:00
dogtag.py Verify pki ini override early 2019-04-10 13:43:23 +02:00
dogtaginstance.py Guard dbus.start() with dbus.is_running() 2019-04-26 12:47:51 +02:00
dsinstance.py Revert "Require a minimum SASL security factor of 56" 2019-05-02 11:39:23 +02:00
httpinstance.py Debian: Add paths for open-sans and font-awesome 2019-04-24 14:08:20 +02:00
installutils.py Verify external CA's basic constraint pathlen 2019-04-04 10:05:10 +02:00
ipa_backup.py Add ExecStartPost hook to wait for Dogtag PKI 2019-04-24 09:09:28 +02:00
ipa_cacert_manage.py Add support for multiple certificates/formats to ipa-cacert-manage 2018-11-13 10:44:14 +01:00
ipa_crlgen_manage.py CRL generation master: new utility to enable|disable 2019-03-14 09:39:55 +01:00
ipa_kra_install.py Add pki.ini override option 2019-04-10 13:43:23 +02:00
ipa_ldap_updater.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_otptoken_import.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
ipa_pkinit_manage.py PKINIT: fix ipa-pkinit-manage enable|disable 2018-12-05 11:06:21 +01:00
ipa_replica_install.py Enable replica install info logging to match ipa-server-install 2018-11-01 13:08:58 +01:00
ipa_restore.py Check have packages for extra features been installed before restoring backup 2019-04-25 14:47:09 +02:00
ipa_server_certinstall.py Move realm_to_serverid/ldap_uri to ipaldap 2019-02-05 08:39:13 -05:00
ipa_server_install.py Improve console logging for ipa-server-install 2018-06-20 08:38:03 +02:00
ipa_server_upgrade.py ipa commands: print 'IPA is not configured' when ipa is not setup 2018-08-23 12:08:45 +02:00
ipa_winsync_migrate.py ipa commands: print 'IPA is not configured' when ipa is not setup 2018-08-23 12:08:45 +02:00
kra.py Add pki.ini override option 2019-04-10 13:43:23 +02:00
krainstance.py ipaserver/install/krainstance.py: chown after write 2019-04-11 10:04:00 +02:00
krbinstance.py Move DS's Kerberos env vars to unit file 2019-04-02 19:35:38 +02:00
ldapupdate.py Use new LDAPClient constructors 2019-02-05 08:39:13 -05:00
odsexporterinstance.py Delay enabling services until end of installer 2018-07-06 13:26:43 +02:00
opendnssecinstance.py Add ODS manager abstraction to ipaplatform 2019-04-24 14:08:20 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Fix wrong evaluation of attributes in check_repl_update 2019-04-15 12:05:22 +02:00
schemaupdate.py logging: do not use ipa_log_manager to create module-level loggers 2017-07-14 15:55:59 +02:00
service.py ipa-setup-kra: fix python2 parameter 2019-04-01 12:55:46 +02:00
sysupgrade.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
upgradeinstance.py Move realm_to_serverid/ldap_uri to ipaldap 2019-02-05 08:39:13 -05:00