URL: https://github.com/freeipa/freeipa/pull/640
Title: #640: Remove pkinit options from master/replica on DL0
MartinBasti commented:
"""
master:
* 6cda1509a68d7a21578280d381a6b9e994fd4f49 Fix the order of cert-files check
* 9e3ae785ac9b62b8e0809a4aa56363c458316135 Don't allow setting
URL: https://github.com/freeipa/freeipa/pull/640
Title: #640: Remove pkinit options from master/replica on DL0
martbab commented:
"""
@MartinBasti WebUI not working in DL0/--no-pkinit is beyond the scope of this
PR. I am working on fixing that in a separate PR.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/640
Title: #640: Remove pkinit options from master/replica on DL0
stlaz commented:
"""
Pushed a cleaner version of the previous changes, thanks @HonzaCholasta for the
suggestion.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/640
Title: #640: Remove pkinit options from master/replica on DL0
stlaz commented:
"""
@MartinBasti Even though this commit basically breaks the behavior, it's not in
its scope to fix it, it's somehow intended to break it, actually. It will be
URL: https://github.com/freeipa/freeipa/pull/640
Title: #640: Remove pkinit options from master/replica on DL0
stlaz commented:
"""
@MartinBasti Even though this commit basically breaks the behavior, it's not in
its scope to fix it, it's somehow intended to break it, actually. It will be
URL: https://github.com/freeipa/freeipa/pull/640
Title: #640: Remove pkinit options from master/replica on DL0
MartinBasti commented:
"""
With this PR applied I cannot use webUI with DL0
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/640#issuecomment-289721101
--
Manage
URL: https://github.com/freeipa/freeipa/pull/640
Title: #640: Remove pkinit options from master/replica on DL0
stlaz commented:
"""
Ah, right, replica does not have `domain_level` option
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/640#issuecomment-289684664
--
URL: https://github.com/freeipa/freeipa/pull/640
Title: #640: Remove pkinit options from master/replica on DL0
MartinBasti commented:
"""
```
ipa-replica-install --no-pkinit (as negative test without master installed)
2017-03-27T17:04:09Z DEBUG Logging to /var/log/ipareplica-install.log
URL: https://github.com/freeipa/freeipa/pull/640
Title: #640: Remove pkinit options from master/replica on DL0
abbra commented:
"""
Good question. I think we should remove all mentioning of PKINIT options for
DL0 and explicitly configure local CA there. On DL1 we already require to
provide
URL: https://github.com/freeipa/freeipa/pull/640
Title: #640: Remove pkinit options from master/replica on DL0
martbab commented:
"""
@abbra I believe these changes are in line with our recent discussion regarding
pkinit availability on DL0. Do you agree?
"""
See the full comment at
10 matches
Mail list logo