From da1d543c2bfa9e4acb6fde170e66c88e521ac232 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Tue, 17 Aug 2021 08:17:12 -0400 Subject: [PATCH] Only call add_agent_to_security_domain_admins() when CA is installed This allows the RA agent to manage the pki security domain and is only needed if a CA has been configured. Only call it in a CA-ful installation. https://pagure.io/freeipa/issue/8956 Signed-off-by: Rob Crittenden Reviewed-By: Francois Cami Reviewed-By: Florence Blanc-Renaud --- ipaserver/install/server/upgrade.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py index bdf43ed21..942a8e106 100644 --- a/ipaserver/install/server/upgrade.py +++ b/ipaserver/install/server/upgrade.py @@ -1840,11 +1840,11 @@ def upgrade_configuration(): ca.setup_acme() ca_update_acme_configuration(ca, fqdn) ca_initialize_hsm_state(ca) + add_agent_to_security_domain_admins() migrate_to_authselect() add_systemd_user_hbac() add_admin_root_alias() - add_agent_to_security_domain_admins() sssd_update()