Jan Cholasta f769045f0a server install: fix KDC PKINIT configuration ...

Set `pkinit_pool` in `kdc.conf` to a CA certificate bundle of all CAs known
to IPA.

Make sure `cacert.pem` is exported in all installation code paths.

Use the KDC certificate itself as a PKINIT anchor in `login_password`.

https://pagure.io/freeipa/issue/6831

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

2017-05-19 12:31:24 +02:00

..

__init__.py

Add the force-join option to replica install

2017-04-12 15:52:41 +02:00

install.py

client install: fix client PKINIT configuration

2017-05-19 12:31:24 +02:00

replicainstall.py

client install: fix client PKINIT configuration

2017-05-19 12:31:24 +02:00

upgrade.py

server install: fix KDC PKINIT configuration

2017-05-19 12:31:24 +02:00