Florence Blanc-Renaud dbb98765d7 Check the result of cert request in replica installer ...

When running ipa-replica-install in domain-level 1, the installer
requests the LDAP and HTTP certificates using certmonger but does
not check the return code. The installer goes on and fails when
restarting dirsrv.

Fix: when certmonger was not able to request the certificate, raise an
exception and exit from the installer:

  [28/45]: retrieving DS Certificate
  [error] RuntimeError: Certificate issuance failed (CA_UNREACHABLE)
Your system may be partly configured.
Run /usr/sbin/ipa-server-install --uninstall to clean up.

ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR    Certificate issuance failed (CA_UNREACHABLE)
ipa.ipapython.install.cli.install_tool(CompatServerReplicaInstall): ERROR    The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information

https://fedorahosted.org/freeipa/ticket/6514

Reviewed-By: Tomas Krizek <tkrizek@redhat.com>

2016-11-30 16:33:54 +01:00

..

plugins

ipalib: move certstore to the install subpackage

2016-11-29 14:50:51 +01:00

server

ipaclient: move install modules to the install subpackage

2016-11-29 14:50:51 +01:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrustinstance.py

ipaclient: move install modules to the install subpackage

2016-11-29 14:50:51 +01:00

bindinstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

ca.py

ipalib: move certstore to the install subpackage

2016-11-29 14:50:51 +01:00

cainstance.py

replica install: track the RA agent certificate again

2016-11-30 14:04:21 +01:00

certs.py

Check the result of cert request in replica installer

2016-11-30 16:33:54 +01:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

dns.py

ipapython: move certmonger and sysrestore to ipalib.install

2016-11-29 14:50:51 +01:00

dnskeysyncinstance.py

ipapython: move dnssec, p11helper and secrets to ipaserver

2016-11-29 14:50:51 +01:00

dogtag.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

dogtaginstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

dsinstance.py

constants: remove CACERT

2016-11-29 14:50:51 +01:00

httpinstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

installutils.py

Accept server host names resolvable only using /etc/hosts

2016-11-29 18:35:31 +01:00

ipa_backup.py

constants: remove CACERT

2016-11-29 14:50:51 +01:00

ipa_cacert_manage.py

ipalib: move certstore to the install subpackage

2016-11-29 14:50:51 +01:00

ipa_kra_install.py

replica install: merge KRA agent cert export into KRA install

2016-11-11 12:13:56 +01:00

ipa_ldap_updater.py

install tools: ldap conn management

2016-11-07 11:34:03 +01:00

ipa_otptoken_import.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

ipa_replica_install.py

install: migrate server installers to the new class hierarchy

2016-11-11 12:17:25 +01:00

ipa_replica_prepare.py

constants: remove CACERT

2016-11-29 14:50:51 +01:00

ipa_restore.py

certdb: move IPA NSS DB install functions to ipaclient.install

2016-11-29 14:50:51 +01:00

ipa_server_certinstall.py

constants: remove CACERT

2016-11-29 14:50:51 +01:00

ipa_server_install.py

install: migrate server installers to the new class hierarchy

2016-11-11 12:17:25 +01:00

ipa_server_upgrade.py

upgrade: ldap conn management

2016-11-22 16:17:27 +01:00

ipa_winsync_migrate.py

Pylint: remove unused variables from installers and scripts

2016-10-06 10:43:36 +02:00

kra.py

services: replace admin_conn with api.Backend.ldap2

2016-11-22 16:17:27 +01:00

krainstance.py

Do not log DM password in ca/kra installation logs

2016-11-25 09:13:56 +01:00

krbinstance.py

constants: remove CACERT

2016-11-29 14:50:51 +01:00

ldapupdate.py

ipautil: remove get_domain_name()

2016-11-29 14:50:51 +01:00

memcacheinstance.py

Use absolute imports

2015-08-12 18:17:23 +02:00

ntpinstance.py

service installers: clean up the inheritance

2016-11-11 12:17:25 +01:00

odsexporterinstance.py

services: replace admin_conn with api.Backend.ldap2

2016-11-22 16:17:27 +01:00

opendnssecinstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

replication: ensure bind DN group check interval is set on replica config

2016-11-29 16:09:59 +01:00

schemaupdate.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

service.py

ipalib: move certstore to the install subpackage

2016-11-29 14:50:51 +01:00

sysupgrade.py

ipapython: move certmonger and sysrestore to ipalib.install

2016-11-29 14:50:51 +01:00

upgradeinstance.py

Break ipaplatform / ipalib import cycle of hell

2016-11-24 16:30:32 +01:00