freeipa/ipaserver/install
Florence Blanc-Renaud 2c9b212cf0 trust upgrade: ensure that host is member of adtrust agents
After an upgrade, the group cn=adtrust agents may be missing some members.
Each ad trust controller must appear twice as member:
- krbprincipalname=cifs/hostname@realm,cn=services,cn=accounts,basedn
- fqdn=hostname,cn=computers,cn=accounts,basedn

Add an upgrade plugin that builds a list of hostnames from the cifs
principals and adds if needed fqdn=hostname...

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1778777
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
2019-12-04 09:06:56 +01:00
..
plugins trust upgrade: ensure that host is member of adtrust agents 2019-12-04 09:06:56 +01:00
server Enable TLS 1.3 support on the server 2019-12-02 16:48:07 +01:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Remove unreachable code 2019-07-01 13:21:21 +02:00
adtrustinstance.py Removes several pylint warnings. 2019-09-27 09:38:32 +02:00
bindinstance.py Prevents DNS Amplification Attack and allow to customize named 2019-11-12 10:49:49 +02:00
ca.py move MSCSTemplate classes to ipalib 2019-07-17 17:58:58 +03:00
cainstance.py Disable dogtag cert publishing 2019-09-25 11:38:31 -04:00
certs.py Replace replication_wait_timeout with certmonger_wait_timeout 2019-09-04 14:52:14 +02:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py ipaserver.install.installutils: move commonly used utils to ipapython.ipautil 2019-06-29 11:00:28 +03:00
dns.py Use api.env.container_masters 2019-03-28 00:21:00 +01:00
dnskeysyncinstance.py ipaserver.install.installutils: move commonly used utils to ipapython.ipautil 2019-06-29 11:00:28 +03:00
dogtag.py Verify pki ini override early 2019-04-10 13:43:23 +02:00
dogtaginstance.py Log dogtag auth timeout in install, provide hint to increase it 2019-09-04 14:52:14 +02:00
dsinstance.py Removes several pylint warnings. 2019-09-27 09:38:32 +02:00
httpinstance.py Replace replication_wait_timeout with certmonger_wait_timeout 2019-09-04 14:52:14 +02:00
installutils.py ipaserver.install.installutils: move commonly used utils to ipapython.ipautil 2019-06-29 11:00:28 +03:00
ipa_backup.py Prevents DNS Amplification Attack and allow to customize named 2019-11-12 10:49:49 +02:00
ipa_cacert_manage.py move MSCSTemplate classes to ipalib 2019-07-17 17:58:58 +03:00
ipa_cert_fix.py avoid realm_to_serverid deprecation warning 2019-05-29 12:49:27 +10:00
ipa_crlgen_manage.py CRL generation master: new utility to enable|disable 2019-03-14 09:39:55 +01:00
ipa_kra_install.py Add pki.ini override option 2019-04-10 13:43:23 +02:00
ipa_ldap_updater.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_otptoken_import.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
ipa_pkinit_manage.py PKINIT: fix ipa-pkinit-manage enable|disable 2018-12-05 11:06:21 +01:00
ipa_replica_install.py Enable replica install info logging to match ipa-server-install 2018-11-01 13:08:58 +01:00
ipa_restore.py ipa-restore: Restore ownership and perms on 389-ds log directory 2019-09-23 09:27:28 -04:00
ipa_server_certinstall.py Move realm_to_serverid/ldap_uri to ipaldap 2019-02-05 08:39:13 -05:00
ipa_server_install.py Improve console logging for ipa-server-install 2018-06-20 08:38:03 +02:00
ipa_server_upgrade.py ipa commands: print 'IPA is not configured' when ipa is not setup 2018-08-23 12:08:45 +02:00
ipa_winsync_migrate.py ipa commands: print 'IPA is not configured' when ipa is not setup 2018-08-23 12:08:45 +02:00
ipactl.py ipa_client_automount.py and ipactl.py: fix codestyle 2019-06-28 10:53:07 +02:00
kra.py krainstance: set correct issuer DN in uid=ipakra entry 2019-10-17 08:17:46 +02:00
krainstance.py upgrade: fix ipakra people entry 'description' attribute 2019-10-17 08:17:46 +02:00
krbinstance.py Move certauth configuration into a server krb5.conf template 2019-09-10 12:33:21 +03:00
ldapupdate.py Skip commented lines after substitution 2019-11-05 11:48:28 -05:00
odsexporterinstance.py ipaserver.install.installutils: move commonly used utils to ipapython.ipautil 2019-06-29 11:00:28 +03:00
opendnssecinstance.py Add ODS manager abstraction to ipaplatform 2019-04-24 14:08:20 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Add missing timeout option to logging statement 2019-09-05 09:15:23 +02:00
schemaupdate.py logging: do not use ipa_log_manager to create module-level loggers 2017-07-14 15:55:59 +02:00
service.py Fix errors found by Pylint-2.4.3 2019-10-21 18:01:32 +11:00
sysupgrade.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
upgradeinstance.py Move realm_to_serverid/ldap_uri to ipaldap 2019-02-05 08:39:13 -05:00