freeipa/ipatests
Rob Crittenden f78d25fc97 ipa-crlgen-manage: manage the cert status task execution time
ca.certStatusUpdateInterval manages how frequently to update
the certificate status in LDAP (expired, etc).

By default this is not set on the initial master and pkispawn sets
it to 0 on replicas. This can lead to no server running this
task and therefore the status attribute not reflecting the current
state.

On enabling CRL generation remove any value which will cause PKI
to use its default. On disabling set it to 0.

Only one server should run the update status task to prevent
unnecessary replication.

Fixes: https://pagure.io/freeipa/issue/9569

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
2024-04-15 16:03:10 +02:00
..
azure ap: Migrate to docker compose V2 2024-04-04 11:42:24 -04:00
man Simplify ipa-run-tests script 2019-07-16 13:23:21 +03:00
prci_definitions rpcserver: validate Kerberos principal name before running kinit 2024-02-21 17:07:33 -05:00
pytest_ipa ipa-restore: adapt for 389-ds switch to LMDB 2024-02-23 14:11:25 +01:00
test_cmdline pylint: Fix used-before-assignment 2023-01-10 08:30:58 +01:00
test_custodia pylint: disable comparison-of-constants 2023-01-10 08:30:58 +01:00
test_install Unify access to FQDN 2020-10-26 17:11:19 +11:00
test_integration ipa-crlgen-manage: manage the cert status task execution time 2024-04-15 16:03:10 +02:00
test_ipaclient ipaclient: do not set TLS CA options in ldap.conf anymore 2022-10-10 09:50:39 +02:00
test_ipalib Compatibility fix for PyCA cryptography 42.0.0 2024-01-24 14:54:24 +01:00
test_ipalib_install validate_principal: Don't try to verify that the realm is known 2024-02-22 14:35:59 -05:00
test_ipaplatform ipatests/test_ipaplatform: Skip test_ipa_version on Debian 2021-11-25 21:02:56 -05:00
test_ipapython get_directive: don't error out on substring mismatch 2024-01-11 17:19:47 +01:00
test_ipaserver Integration tests for verifying Referer header in the UI 2024-01-10 10:27:06 +01:00
test_ipatests_plugins ipatests: Don't turn Pytest IPA deprecation warnings into errors 2020-07-29 15:10:00 -04:00
test_webui webui test: Update message for admin disable 2024-04-12 15:59:04 +02:00
test_xmlrpc Allow the admin user to be disabled 2024-04-10 09:26:47 +02:00
__init__.py Make an ipa-tests package 2013-06-17 19:22:50 +02:00
conftest.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
create_external_ca.py Use datetime.timezone.utc instead of newer datetime.UTC alias 2023-09-29 15:06:33 -04:00
data.py Fix more bytes/unicode issues 2015-10-22 18:34:46 +02:00
i18n.py pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
ipa-run-tests ipatests: Specify shell implementation 2020-04-21 13:24:50 +02:00
ipa-test-config Rename pytest_plugins to ipatests.pytest_ipa 2018-08-02 17:07:43 +02:00
ipa-test-task ipatests: Fetch sudo rules without time offset 2021-06-03 09:21:45 +03:00
Makefile.am Build: fix distribution of static files for web UI 2016-11-09 13:08:32 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py rpcserver: validate Kerberos principal name before running kinit 2024-02-21 17:07:33 -05:00
test_util.py pylint: Fix unnecessary-lambda-assignment 2023-01-10 08:30:58 +01:00
util.py Move ipalib.install.kinit to ipalib 2024-03-27 18:07:17 +01:00