Jan Cholasta f769045f0a server install: fix KDC PKINIT configuration ... Set `pkinit_pool` in `kdc.conf` to a CA certificate bundle of all CAs known to IPA. Make sure `cacert.pem` is exported in all installation code paths. Use the KDC certificate itself as a PKINIT anchor in `login_password`. https://pagure.io/freeipa/issue/6831 Reviewed-By: Stanislav Laznicka <slaznick@redhat.com> Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>		2017-05-19 12:31:24 +02:00
..
plugins	install: trust IPA CA for PKINIT	2017-05-19 12:31:24 +02:00
server	server install: fix KDC PKINIT configuration	2017-05-19 12:31:24 +02:00
__init__.py	Remove __all__ specifications in ipaclient and ipaserver.install	2013-09-06 15:42:33 +02:00
adtrust.py	fix spelling mistake; minor rewording	2017-05-19 09:52:46 +02:00
adtrustinstance.py	adtrust: make sure that runtime hostname result is consistent with the configuration	2017-03-30 13:17:21 +02:00
bindinstance.py	py3: create DNS zonefile: use textual mode	2017-02-10 14:03:04 +01:00
ca.py	certdb: add named trust flag constants	2017-05-19 12:31:24 +02:00
cainstance.py	client install: fix client PKINIT configuration	2017-05-19 12:31:24 +02:00
certs.py	certdb, certs: make trust flags argument mandatory	2017-05-19 12:31:24 +02:00
conncheck.py	install: introduce installer class hierarchy	2016-11-11 12:17:25 +01:00
custodiainstance.py	Make sure remote hosts have our keys	2017-05-03 16:37:21 +02:00
dns.py	install: re-introduce option groups	2017-03-13 10:12:40 +01:00
dnskeysyncinstance.py	Fix PKCS11 helper	2017-04-12 09:54:10 +02:00
dogtag.py	install: introduce installer class hierarchy	2016-11-11 12:17:25 +01:00
dogtaginstance.py	ipa-server-install: fix uninstall	2017-05-16 11:44:08 +00:00
dsinstance.py	install: trust IPA CA for PKINIT	2017-05-19 12:31:24 +02:00
httpinstance.py	certdb, certs: make trust flags argument mandatory	2017-05-19 12:31:24 +02:00
installutils.py	certdb: use custom object for trust flags	2017-05-19 12:31:24 +02:00
ipa_backup.py	client install: fix client PKINIT configuration	2017-05-19 12:31:24 +02:00
ipa_cacert_manage.py	certdb: use custom object for trust flags	2017-05-19 12:31:24 +02:00
ipa_kra_install.py	ca, kra install: validate DM password	2017-05-17 12:50:42 +02:00
ipa_ldap_updater.py	Set explicit confdir option for global contexts	2016-12-02 09:14:35 +01:00
ipa_otptoken_import.py	Finish port to PyCA cryptography	2017-03-01 12:51:50 +01:00
ipa_replica_install.py	install: re-introduce option groups	2017-03-13 10:12:40 +01:00
ipa_replica_prepare.py	Fix RA cert import during DL0 replication	2017-04-19 12:36:01 +00:00
ipa_restore.py	restore: restart/reload gssproxy after restore	2017-04-28 14:56:02 +02:00
ipa_server_certinstall.py	certdb: use custom object for trust flags	2017-05-19 12:31:24 +02:00
ipa_server_install.py	install: re-introduce option groups	2017-03-13 10:12:40 +01:00
ipa_server_upgrade.py	Set explicit confdir option for global contexts	2016-12-02 09:14:35 +01:00
ipa_winsync_migrate.py	Set explicit confdir option for global contexts	2016-12-02 09:14:35 +01:00
kra.py	Don't allow standalone KRA uninstalls	2017-03-13 16:27:23 +01:00
krainstance.py	ipa-kra-install: fix pkispawn setting for pki_security_domain_hostname	2017-05-18 17:01:38 +02:00
krbinstance.py	server install: fix KDC PKINIT configuration	2017-05-19 12:31:24 +02:00
ldapupdate.py	py3: ldapupdate: fix logging str(bytes) issue	2017-02-08 18:09:49 +01:00
ntpinstance.py	installer: Stop adding distro-specific NTP servers into ntp.conf	2017-01-05 10:45:30 +01:00
odsexporterinstance.py	services: replace admin_conn with api.Backend.ldap2	2016-11-22 16:17:27 +01:00
opendnssecinstance.py	Fix PKCS11 helper	2017-04-12 09:54:10 +02:00
otpdinstance.py	Enable pylint missing-final-newline check	2015-12-23 07:59:22 +01:00
replication.py	Make wait_for_entry raise exceptions	2017-03-15 16:39:39 +01:00
schemaupdate.py	Remove unused variables in the code	2016-09-27 13:35:58 +02:00
service.py	installer service: fix typo in service entry	2017-05-05 18:55:41 +02:00
sysupgrade.py	ipapython: move certmonger and sysrestore to ipalib.install	2016-11-29 14:50:51 +01:00
upgradeinstance.py	installer: update time estimates	2017-03-10 15:46:34 +01:00