Martin Babinsky b45629fc48 check for replica's KDC entry on master before requesting PKINIT cert ...

This prevents replication-based race conditions to break PKINIT
certificate requests on replica installation.

https://pagure.io/freeipa/issue/6739

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2017-03-15 16:39:39 +01:00

..

plugins

Moving ipaCert from HTTPD_ALIAS_DIR

2017-03-01 09:43:41 +00:00

server

Move PKINIT configuration to a later stage of server/replica install

2017-03-15 16:39:39 +01:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

adtrustinstance.py

use the methods of the parent class to retrieve CIFS kerberos keys

2017-02-22 18:50:30 +01:00

bindinstance.py

py3: create DNS zonefile: use textual mode

2017-02-10 14:03:04 +01:00

ca.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

cainstance.py

Remove copy-schema-to-ca.py from master branch

2017-03-14 15:16:20 +01:00

certs.py

Don't fail more if cert req/cert creation failed

2017-03-14 15:02:42 +01:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Moving ipaCert from HTTPD_ALIAS_DIR

2017-03-01 09:43:41 +00:00

dns.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

dnskeysyncinstance.py

ipa_generate_password algorithm change

2017-01-06 09:26:56 +01:00

dogtag.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

dogtaginstance.py

Use https to get security domain from Dogtag

2017-03-03 13:33:51 +01:00

dsinstance.py

installer: update time estimates

2017-03-10 15:46:34 +01:00

httpinstance.py

httpinstance: disable system trust module in /etc/httpd/alias

2017-03-14 17:12:19 +01:00

installutils.py

Add a new user to run the framework code

2017-02-15 07:13:37 +01:00

ipa_backup.py

Backup KDC certificate pair

2017-03-14 17:09:47 +01:00

ipa_cacert_manage.py

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22 08:07:48 +00:00

ipa_kra_install.py

Don't allow standalone KRA uninstalls

2017-03-13 16:27:23 +01:00

ipa_ldap_updater.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_otptoken_import.py

Finish port to PyCA cryptography

2017-03-01 12:51:50 +01:00

ipa_replica_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_replica_prepare.py

Remove pkinit from ipa-replica-prepare

2017-03-15 16:23:21 +01:00

ipa_restore.py

Configure HTTPD to work via Gss-Proxy

2017-02-15 07:13:37 +01:00

ipa_server_certinstall.py

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22 08:07:48 +00:00

ipa_server_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_server_upgrade.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_winsync_migrate.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

kra.py

Don't allow standalone KRA uninstalls

2017-03-13 16:27:23 +01:00

krainstance.py

installer: update time estimates

2017-03-10 15:46:34 +01:00

krbinstance.py

check for replica's KDC entry on master before requesting PKINIT cert

2017-03-15 16:39:39 +01:00

ldapupdate.py

py3: ldapupdate: fix logging str(bytes) issue

2017-02-08 18:09:49 +01:00

ntpinstance.py

installer: Stop adding distro-specific NTP servers into ntp.conf

2017-01-05 10:45:30 +01:00

odsexporterinstance.py

services: replace admin_conn with api.Backend.ldap2

2016-11-22 16:17:27 +01:00

opendnssecinstance.py

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29 14:50:51 +01:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

Make wait_for_entry raise exceptions

2017-03-15 16:39:39 +01:00

schemaupdate.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

service.py

installer: update time estimates

2017-03-10 15:46:34 +01:00

sysupgrade.py

ipapython: move certmonger and sysrestore to ipalib.install

2016-11-29 14:50:51 +01:00

upgradeinstance.py

installer: update time estimates

2017-03-10 15:46:34 +01:00