Jan Cholasta 4cdeacdedf Support MS CS as the external CA in ipa-server-install and ipa-ca-install ...

Added a new option --external-ca-type which specifies the type of the
external CA. It can be either "generic" (the default) or "ms-cs". If "ms-cs"
is selected, the CSR generated for the IPA CA will include MS template name
extension (OID 1.3.6.1.4.1.311.20.2) with template name "SubCA".

https://fedorahosted.org/freeipa/ticket/4496

Reviewed-By: Martin Kosek <mkosek@redhat.com>

2014-10-13 12:18:09 +02:00

..

plugins

idviews: Fix typo in upgrade handling of the Default Trust View

2014-09-30 11:49:53 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrustinstance.py

idviews: Add Default Trust View as part of adtrustinstall

2014-09-30 10:42:06 +02:00

bindinstance.py

Detect and configure all usable IP addresses.

2014-09-26 17:54:18 +02:00

cainstance.py

Support MS CS as the external CA in ipa-server-install and ipa-ca-install

2014-10-13 12:18:09 +02:00

certs.py

Move NSSDatabase from ipaserver.certs to ipapython.certdb

2014-09-30 10:01:38 +02:00

dogtaginstance.py

Fix certmonger configuration in installer code

2014-10-10 08:48:25 +02:00

dsinstance.py

idviews: Add necessary schema for the ID views

2014-09-30 10:42:06 +02:00

httpinstance.py

Move setting SELinux booleans to platform code

2014-09-26 12:12:59 +02:00

installutils.py

CA-less installer options usability fixes

2014-09-30 08:50:47 +02:00

ipa_backup.py

backup/restore: Add files from /etc/ipa/nssdb

2014-10-02 13:53:55 +02:00

ipa_cacert_manage.py

Fix certmonger search for the CA cert in ipa-certupdate and ipa-cacert-manage

2014-09-30 10:01:38 +02:00

ipa_kra_install.py

Fix certmonger configuration in installer code

2014-10-10 08:48:25 +02:00

ipa_ldap_updater.py

ipa-ldap-updater: make possible to use LDAPI with autobind in case of hardened LDAP configuration

2014-07-04 08:13:23 +02:00

ipa_otptoken_import.py

Implement OTP token importing

2014-06-25 12:55:02 +02:00

ipa_replica_prepare.py

Allow choosing CA-less server certificates by name

2014-09-30 08:50:47 +02:00

ipa_restore.py

ipa-restore: Set SELinux booleans when restoring

2014-09-26 12:12:59 +02:00

ipa_server_certinstall.py

Allow choosing CA-less server certificates by name

2014-09-30 08:50:47 +02:00

krainstance.py

Fix certmonger configuration in installer code

2014-10-10 08:48:25 +02:00

krbinstance.py

ipaplatform: Move all filesystem paths to ipaplatform.paths module

2014-06-16 19:48:20 +02:00

ldapupdate.py

ldapupdate: Restore 'replace' functionality

2014-07-04 15:51:55 +02:00

Makefile.am

Add ipa-adtrust-install utility

2011-09-14 18:45:13 -04:00

memcacheinstance.py

Add ipa_memcached service

2012-02-09 13:20:28 -06:00

ntpinstance.py

ipaplatform: Move all filesystem paths to ipaplatform.paths module

2014-06-16 19:48:20 +02:00

otpdinstance.py

Manage ipa-otpd.socket by IPA

2013-06-06 18:16:59 +02:00

replication.py

Add permissions for certificate store.

2014-07-30 16:04:21 +02:00

schemaupdate.py

FIX: ldap schmema updater needs correct ordering of the updates

2014-09-25 12:57:01 +02:00

service.py

ipaserver.install.service: Don't show error message on SystemExit(0)

2014-09-26 16:55:54 +02:00

sysupgrade.py

Load sysupgrade.state on demand.

2014-07-30 16:04:21 +02:00

upgradeinstance.py

upgradeinstance: Restore listeners on failure

2014-09-25 13:23:51 +02:00