Fraser Tweedale e4462a9443 certupdate: only add LWCA tracking requests on CA servers ...

ipa-certupdate throws an exception when executed on a non-CA server
in a CA-ful deployment with lightweight sub-CAs (LWCAs).  Check that
we are on a CA server before attempting to create Certmonger
tracking requests for LWCAs.

HOW TO TEST

1. Install first server (with CA)
2. Install replica without CA
3. Create sub-CA (`ipa ca-add`)
4. Run `ipa-certupdate` on replica.  Observe that no stack trace is
   produced.

Fixes: https://pagure.io/freeipa/issue/8399
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>

2020-07-09 10:22:50 +10:00

..

__init__.py

ipa-client-install: move client install to module

2016-11-11 12:13:56 +01:00

automount.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

client.py

ipa-client-install: use sshd drop-in configuration

2020-06-23 11:11:46 +02:00

ipa_certupdate.py

certupdate: only add LWCA tracking requests on CA servers

2020-07-09 10:22:50 +10:00

ipa_client_automount.py

ipa-client-automount: call save_domain() for each change

2020-02-14 09:33:43 +02:00

ipa_client_install.py

Drop list of return values to be ignored in AdminTool

2019-06-07 11:24:45 +02:00

ipa_client_samba.py

ipa-client-samba: map domain sid of trust domain properly for display

2019-12-13 17:33:33 +02:00

ipa_epn.py

IPA-EPN: Don't treat givenname differently

2020-06-10 11:22:58 -04:00

ipachangeconf.py

Move ipachangeconf from ipaclient.install to ipapython

2019-08-28 22:15:50 -04:00

ipadiscovery.py

Make IPADiscovery available in PyPI packages

2019-03-01 11:44:27 +01:00

sssd.py

ipaclient: Remove --no-sssd and --no-ac options

2018-08-13 12:23:53 +02:00

timeconf.py

Moving prompt for NTP options to install_check

2019-05-22 18:20:22 +02:00