URL: https://github.com/freeipa/freeipa/pull/356
Author: jcholast
 Title: #356: server install: fix KRA agent PEM file not being created
Action: opened

PR body:
"""
In commit 822e1bc82af3a6c1556546c4fbe96eeafad45762 the call to create the
KRA agent PEM file was accidentally removed from the server installer.

Call into the KRA installer from the server installer to create the file
again.

https://fedorahosted.org/freeipa/ticket/6392
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/356/head:pr356
git checkout pr356
From 032dd28fcc4e435c11db55255c22399e08a5a969 Mon Sep 17 00:00:00 2001
From: Jan Cholasta <jchol...@redhat.com>
Date: Tue, 20 Dec 2016 14:51:40 +0100
Subject: [PATCH] server install: fix KRA agent PEM file not being created

In commit 822e1bc82af3a6c1556546c4fbe96eeafad45762 the call to create the
KRA agent PEM file was accidentally removed from the server installer.

Call into the KRA installer from the server installer to create the file
again.

https://fedorahosted.org/freeipa/ticket/6392
---
 ipaserver/install/ipa_kra_install.py | 1 +
 ipaserver/install/kra.py             | 2 +-
 ipaserver/install/server/install.py  | 2 ++
 3 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/ipaserver/install/ipa_kra_install.py b/ipaserver/install/ipa_kra_install.py
index a545f2b..340a993 100644
--- a/ipaserver/install/ipa_kra_install.py
+++ b/ipaserver/install/ipa_kra_install.py
@@ -181,6 +181,7 @@ def run(self):
 
         self.options.dm_password = self.options.password
         self.options.setup_ca = False
+        self.options.setup_kra = True
 
         api.Backend.ldap2.connect()
 
diff --git a/ipaserver/install/kra.py b/ipaserver/install/kra.py
index e7e11dd..0d1ed8e 100644
--- a/ipaserver/install/kra.py
+++ b/ipaserver/install/kra.py
@@ -77,7 +77,7 @@ def install(api, replica_config, options):
 
         pkcs12_info = None
         master_host = None
-        ra_only = False
+        ra_only = not options.setup_kra
         promote = False
     else:
         krafile = os.path.join(replica_config.dir, 'kracert.p12')
diff --git a/ipaserver/install/server/install.py b/ipaserver/install/server/install.py
index b5b9cb4..fc319d9 100644
--- a/ipaserver/install/server/install.py
+++ b/ipaserver/install/server/install.py
@@ -609,6 +609,7 @@ def install_check(installer):
 
     if setup_ca:
         ca.install_check(False, None, options)
+        kra.install_check(api, None, options)
 
     if options.setup_dns:
         dns.install_check(False, api, False, options, host_name)
@@ -809,6 +810,7 @@ def install(installer):
 
     if setup_ca:
         ca.install_step_1(False, None, options)
+        kra.install(api, None, options)
 
     # The DS instance is created before the keytab, add the SSL cert we
     # generated
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to