public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
11,028 Commits 9 Branches 0 Tags
7ef4e9eb810063243fcc575434d856c854b14eee
Commit Graph
20 Commits
Author SHA1 Message Date
Stanislav Laznicka 5d3a0e6758 Don't allow standalone KRA uninstalls 
KRA uninstallation is very likely to break the user's setup. Don't
allow it at least till we can be safely sure we are able to remove
it in a standalone manner without breaking anything.

https://pagure.io/freeipa/issue/6538

Reviewed-By: Tomas Krizek <tkrizek@redhat.com>
 2017-03-13 16:27:23 +01:00
Jan Cholasta 2fc9feddd0 install: re-introduce option groups 
Re-introduce option groups in ipa-client-install, ipa-server-install and
ipa-replica-install.

https://pagure.io/freeipa/issue/6392

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
 2017-03-13 10:12:40 +01:00
Stanislav Laznicka 1e89d28aaf Don't run kra.configure_instance if not necessary 
If kra should not be set up, don't run the code as it would only
prolong the installations.

Previously, krainstance configuration would be performed just to
export the client certificate and private key to authenticate to
certificate server. This is now performed somewhere else therefore
there's no need to run KRAInstance.configure_instance.

The kra.install() method still performs actions on replicas and
we're keeping it in server installer to conform to the installers
design.

https://fedorahosted.org/freeipa/ticket/5695

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2017-03-01 09:43:41 +00:00
Simo Sorce f648c5631a Simplify NSSDatabase password file handling 
https://fedorahosted.org/freeipa/ticket/5959

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2017-02-15 07:13:37 +01:00
Jan Cholasta 998c87af2b server install: fix KRA agent PEM file not being created 
In commit 822e1bc82a the call to create the
KRA agent PEM file was accidentally removed from the server installer.

Call into the KRA installer from the server installer to create the file
again.

https://fedorahosted.org/freeipa/ticket/6392

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
 2016-12-20 16:26:28 +01:00
Tomas Krizek 68295bf8cf services: replace admin_conn with api.Backend.ldap2 
Since service.admin_conn is only an alias to api.Backend.ldap2,
replace it everywhere with the explicit api.Backend.ldap2 instead.

https://fedorahosted.org/freeipa/ticket/6461

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2016-11-22 16:17:27 +01:00
Jan Cholasta a8fdb8de82 install: introduce installer class hierarchy 
Add class hierarchy which allows inherting knob definitions between the
various client and server install scripts.

https://fedorahosted.org/freeipa/ticket/6392

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2016-11-11 12:17:25 +01:00
Jan Cholasta 89bb5ed1eb replica install: merge KRA agent cert export into KRA install 
Merge all KRA agent cert export code paths into a single code path in KRA
install.

https://fedorahosted.org/freeipa/ticket/6392

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
 2016-11-11 12:13:56 +01:00
Jan Cholasta 0933e080aa install: merge all KRA install code paths into one 
Merge KRA install code paths use in ipa-replica-install in either domain
level and ipa-kra-install into one.

https://fedorahosted.org/freeipa/ticket/6392

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
 2016-11-11 12:13:56 +01:00
Tomas Krizek 03d113cdd7 install: remove adhoc dis/connect from services 
Remove ldap_connect and ldap_disconnect from services. admin_conn is
just an alias to api.Backend.ldap2 and therefore the connection should
be managed elsewhere.

https://fedorahosted.org/freeipa/ticket/6461

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-11-07 11:34:03 +01:00
Martin Basti bbbe411f35 Modify error message to install first instance of KRA 
First instance of KRA should be installed by ipa-kra-install.

https://fedorahosted.org/freeipa/ticket/5460

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-12-02 17:21:32 +01:00
Martin Basti 5d9a5997a1 KRA: do not stop certmonger during standalone uninstall 
https://fedorahosted.org/freeipa/ticket/5477

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-11-26 11:00:54 +01:00
Jan Cholasta aeffe2da42 install: drop support for Dogtag 9 
Dogtag 9 CA and CA DS install and uninstall code was removed. Existing
Dogtag 9 CA and CA DS instances are disabled on upgrade.

Creating a replica of a Dogtag 9 IPA master is still supported.

https://fedorahosted.org/freeipa/ticket/5197

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-11-25 09:12:25 +01:00
Simo Sorce bc39cc9f81 Allow to install the KRA on a promoted server 
Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2015-10-22 17:53:14 +02:00
Jan Cholasta c388dbd4de install: fix invocation of KRAInstance.create_instance() 
Reviewed-By: Simo Sorce <ssorce@redhat.com>
 2015-10-01 07:42:33 +02:00
Martin Basti 2e329ecdc7 KRA Install: check replica file if contains req. certificates 
https://fedorahosted.org/freeipa/ticket/5059

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2015-07-02 10:59:53 +00:00
Jan Cholasta e7ac57e139 vault: Fix ipa-kra-install 
Use state in LDAP rather than local state to check if KRA is installed.
Use correct log file names.

https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 16:17:34 +00:00
Jan Cholasta 81729e22d3 vault: Move vaults to cn=vaults,cn=kra 
https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 16:17:34 +00:00
Martin Babinsky 01fa05dd4e KRA: get the right dogtag version during server uninstall 
Ensure that the correct version of dogtag is passed from API object to the KRA
uninstaller during IPA server uninstall.

https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2015-05-26 12:43:46 +00:00
Martin Babinsky 6a4b428120 merge KRA installation machinery to a single module 
This is a prerequisite to further refactoring of KRA install/uninstall
functionality in all IPA install scripts.

https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2015-05-25 16:23:32 +00:00