a2371f3 Add profiles and default CA ACL on migration

9 files Authored by ftweedal 8 years ago, Committed by jcholast 8 years ago,
    Add profiles and default CA ACL on migration
    
    Profiles and the default CA ACL were not being added during replica
    install from pre-4.2 servers.  Update ipa-replica-install to add
    these if they are missing.
    
    Also update the caacl plugin to prevent deletion of the default CA
    ACL and instruct the administrator to disable it instead.
    
    To ensure that the cainstance installation can add profiles, supply
    the RA certificate as part of the instance configuration.
    Certmonger renewal setup is avoided at this point because the NSSDB
    gets reinitialised later in installation procedure.
    
    Also move the addition of the default CA ACL from dsinstance
    installation to cainstance installation.
    
    Fixes: https://fedorahosted.org/freeipa/ticket/5459
    Reviewed-By: Jan Cholasta <jcholast@redhat.com>
    
        
file modified
+0 -1
file modified
+8 -0
file modified
+3 -2
file modified
+74 -26