Rob Crittenden f78d25fc97 ipa-crlgen-manage: manage the cert status task execution time ...

ca.certStatusUpdateInterval manages how frequently to update
the certificate status in LDAP (expired, etc).

By default this is not set on the initial master and pkispawn sets
it to 0 on replicas. This can lead to no server running this
task and therefore the status attribute not reflecting the current
state.

On enabling CRL generation remove any value which will cause PKI
to use its default. On disabling set it to 0.

Only one server should run the update status task to prevent
unnecessary replication.

Fixes: https://pagure.io/freeipa/issue/9569

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>

2024-04-15 16:03:10 +02:00

..

azure

ap: Migrate to docker compose V2

2024-04-04 11:42:24 -04:00

man

Simplify ipa-run-tests script

2019-07-16 13:23:21 +03:00

prci_definitions

rpcserver: validate Kerberos principal name before running kinit

2024-02-21 17:07:33 -05:00

pytest_ipa

ipa-restore: adapt for 389-ds switch to LMDB

2024-02-23 14:11:25 +01:00

test_cmdline

pylint: Fix used-before-assignment

2023-01-10 08:30:58 +01:00

test_custodia

pylint: disable comparison-of-constants

2023-01-10 08:30:58 +01:00

test_install

Unify access to FQDN

2020-10-26 17:11:19 +11:00

test_integration

ipa-crlgen-manage: manage the cert status task execution time

2024-04-15 16:03:10 +02:00

test_ipaclient

ipaclient: do not set TLS CA options in ldap.conf anymore

2022-10-10 09:50:39 +02:00

test_ipalib

Compatibility fix for PyCA cryptography 42.0.0

2024-01-24 14:54:24 +01:00

test_ipalib_install

validate_principal: Don't try to verify that the realm is known

2024-02-22 14:35:59 -05:00

test_ipaplatform

ipatests/test_ipaplatform: Skip test_ipa_version on Debian

2021-11-25 21:02:56 -05:00

test_ipapython

get_directive: don't error out on substring mismatch

2024-01-11 17:19:47 +01:00

test_ipaserver

Integration tests for verifying Referer header in the UI

2024-01-10 10:27:06 +01:00

test_ipatests_plugins

ipatests: Don't turn Pytest IPA deprecation warnings into errors

2020-07-29 15:10:00 -04:00

test_webui

webui test: Update message for admin disable

2024-04-12 15:59:04 +02:00

test_xmlrpc

Allow the admin user to be disabled

2024-04-10 09:26:47 +02:00

__init__.py

Make an ipa-tests package

2013-06-17 19:22:50 +02:00

conftest.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

create_external_ca.py

Use datetime.timezone.utc instead of newer datetime.UTC alias

2023-09-29 15:06:33 -04:00

data.py

Fix more bytes/unicode issues

2015-10-22 18:34:46 +02:00

i18n.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ipa-run-tests

ipatests: Specify shell implementation

2020-04-21 13:24:50 +02:00

ipa-test-config

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

ipa-test-task

ipatests: Fetch sudo rules without time offset

2021-06-03 09:21:45 +03:00

Makefile.am

Build: fix distribution of static files for web UI

2016-11-09 13:08:32 +01:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

rpcserver: validate Kerberos principal name before running kinit

2024-02-21 17:07:33 -05:00

test_util.py

pylint: Fix unnecessary-lambda-assignment

2023-01-10 08:30:58 +01:00

util.py

Move ipalib.install.kinit to ipalib

2024-03-27 18:07:17 +01:00