From d5e499cd77c01f4737769f40b5fbe690ea4fa52a Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Tue, 17 Aug 2021 08:17:12 -0400 Subject: [PATCH] Only call add_agent_to_security_domain_admins() when CA is installed This allows the RA agent to manage the pki security domain and is only needed if a CA has been configured. Only call it in a CA-ful installation. https://pagure.io/freeipa/issue/8956 Signed-off-by: Rob Crittenden Reviewed-By: Francois Cami Reviewed-By: Florence Blanc-Renaud --- ipaserver/install/server/upgrade.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py index 662450f31..25f49efea 100644 --- a/ipaserver/install/server/upgrade.py +++ b/ipaserver/install/server/upgrade.py @@ -1843,11 +1843,11 @@ def upgrade_configuration(): ca.setup_acme() ca_update_acme_configuration(ca, fqdn) ca_initialize_hsm_state(ca) + add_agent_to_security_domain_admins() migrate_to_authselect() add_systemd_user_hbac() add_admin_root_alias() - add_agent_to_security_domain_admins() sssd_update()