freeipa/ipaserver
Nalin Dahyabhai df0b927bfb Select a server with a CA on it when submitting signing requests.
When the RA is about to submit a signing request to a CA, check
if the ca_host is actually a CA.  If it isn't, and it isn't the
local host, check if the local host is a CA.  If that doesn't
work, try to select a CA host at random.  If there aren't any,
just give up and pretend the ca_host is a CA so that we can fail
to connect to it, as we would have before.

Ticket #1252.
2011-06-14 02:03:21 -04:00
..
install Fix directory manager password validation in ipa-nis-manage. 2011-06-13 12:59:22 +02:00
plugins Select a server with a CA on it when submitting signing requests. 2011-06-14 02:03:21 -04:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
conn.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
ipaldap.py Enable 389-ds SSL host checking by defauilt 2011-05-20 10:08:11 -04:00
ipautil.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
rpcserver.py Test for forwarded Kerberos credentials cache in wsgi code. 2011-05-18 09:35:04 +02:00