freeipa/client
Rob Crittenden 8af6accfa5
Retrieve certificate subject base directly instead of ipa-join
The subject base is used as a fallback to find the available
CA certificates during client enrollment if the LDAP connection
fails (e.g. due to new client connecting to very old server) and
for constructing the subject if a certificate is requested.

raw=True is passed to config-show in order to avoid parsing
the server roles which will fail because the services aren't
marked as enabled until after the client installation is
successful on a master.

ipa-join providing the subject base via stderr was fragile and
would cause client enrollment to fail if any other output was
included in stderr.

https://pagure.io/freeipa/issue/7674

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2018-08-29 09:03:18 +02:00
..
man Return unique error when automount is already or not configured 2018-05-16 11:32:29 -04:00
share Move client templates to separate directory 2018-06-05 16:34:27 -04:00
config.c Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
ipa-certupdate.in Rename Python scripts and add dynamic shebang 2018-08-23 14:49:06 +02:00
ipa-client-automount.in Rename Python scripts and add dynamic shebang 2018-08-23 14:49:06 +02:00
ipa-client-common.c Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
ipa-client-common.h Migrate from #ifndef guards to #pragma once 2016-05-29 14:04:45 +02:00
ipa-client-install.in Rename Python scripts and add dynamic shebang 2018-08-23 14:49:06 +02:00
ipa-getkeytab.c Apply sane LDAP settings to C code 2018-05-29 15:30:37 +02:00
ipa-join.c Retrieve certificate subject base directly instead of ipa-join 2018-08-29 09:03:18 +02:00
ipa-rmkeytab.c ipa-rmkeytab, ipa-join: don't fail if init of gettext failed 2016-06-27 12:34:18 +02:00
Makefile.am Generate scripts from templates 2018-08-23 14:49:06 +02:00
version.m4.in Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00