A quick fix for https://fedorahosted.org/freeipa/ticket/5288
-- Martin^3 Babinsky
From ba43a113194b49dcbf3e0eeaa3a41bc204120c08 Mon Sep 17 00:00:00 2001 From: Martin Babinsky <mbabi...@redhat.com> Date: Fri, 4 Sep 2015 15:14:48 +0200 Subject: [PATCH] load RA backend plugins during standalone CA install on CA-less IPA master CA-less IPA master has 'ra_plugin' set to 'none' in IPA config. When setting up Dogtag CA on the master we must override this setting in order to load dogtag backend plugins and succesfully complete CA installation. https://fedorahosted.org/freeipa/ticket/5288 --- install/tools/ipa-ca-install | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/install/tools/ipa-ca-install b/install/tools/ipa-ca-install index 8b1cea8d557f315ae38c2448e816ca0b2557077f..6564e4d0304d4e189b133c495b75f200b04e2988 100755 --- a/install/tools/ipa-ca-install +++ b/install/tools/ipa-ca-install @@ -160,7 +160,9 @@ def install_master(safe_options, options): if not dsinstance.DsInstance().is_configured(): sys.exit("IPA server is not configured on this system.\n") - api.bootstrap(in_server=True) + # override ra_plugin setting read from default.conf so that we have + # functional dogtag backend plugins during CA install + api.bootstrap(in_server=True, ra_plugin='dogtag') api.finalize() dm_password = options.password -- 2.4.3
-- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
