freeipa/ipaserver
Fraser Tweedale 7995518921 Restore old version of caIPAserviceCert for upgrade only
The latest version of caIPAserviceCert profile includes a feature
that is not available before Dogtag 10.4, and this version of the
profile is intended for new installs only (otherwise, problems will
arise in topologies containing CA replicas at an earlier version).
But IPA versions before v4.2 did not use LDAP-based profiles, so the
new version of the profile gets imported when upgrading from
pre-v4.2 to v4.5 or later.

We do not yet have a proper version- and topology-aware profile
update mechanism, so to resolve this issue, ship the older version
of the profile alongside the newer version, and make sure we use the
older version when importing the profile in an upgrade context.

https://pagure.io/freeipa/issue/7097

Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2017-08-14 19:25:59 +02:00
..
advise logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dnssec logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
install Restore old version of caIPAserviceCert for upgrade only 2017-08-14 19:25:59 +02:00
plugins host, service: fix adding host/svc with a cert 2017-08-11 12:09:44 +02:00
secrets Misc Python 3 fixes for ipaserver.secrets 2017-08-11 13:47:35 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
dns_data_management.py logging: do not log into the root logger 2017-07-14 15:55:59 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
p11helper.py py3: softhsm key_id must be bytes 2017-06-01 09:24:24 +02:00
rpcserver.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
servroles.py Do not remove the old masters when setting the attribute fails 2017-07-04 14:42:43 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Turn on NSSOCSP check in mod_nss conf 2017-05-10 09:08:34 +02:00
topology.py fix incorrect suffix handling in topology checks 2017-06-05 18:37:37 +02:00