Re: [Freeipa-devel] [PATCH] 197 Track DS certificate with certmonger on replicas

2013-10-29 Thread Petr Viktorin
On 10/17/2013 03:27 PM, Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/3975. Honza Thanks! Works for me, ACK, pushed to master: e98abdca9b4cf772e93176b42e17ec5fb5736ea4 ipa-3-3: 074816faf36650dbfa5aa8a22a3896a31b64dbf1 -- Petr³

Re: [Freeipa-devel] [PATCH] 197 Track DS certificate with certmonger on replicas

2013-10-17 Thread Rob Crittenden
Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/3975. Just thinking out loud here, haven't tried it... What about creating a replica on a non-CA host, I think it wouldn't be tracked. Can you use the value or existence of api.env.ra_plugin instead?

Re: [Freeipa-devel] [PATCH] 197 Track DS certificate with certmonger on replicas

2013-10-17 Thread Jan Cholasta
On 17.10.2013 15:40, Rob Crittenden wrote: Jan Cholasta wrote: Hi, the attached patch fixes https://fedorahosted.org/freeipa/ticket/3975. Just thinking out loud here, haven't tried it... What about creating a replica on a non-CA host, I think it wouldn't be tracked. AFAIU cacert.p12 is