Commit - freeipa - ca4e6c1fdfac9b545b26f885dc4865f22ca36ae6

    Configure Anonymous PKINIT on server install
    
    Allow anonymous pkinit to be used so that unenrolled hosts can perform FAST
    authentication (necessary for 2FA for example) using an anonymous krbtgt
    obtained via Pkinit.
    
    https://fedorahosted.org/freeipa/ticket/5678
    
    Signed-off-by: Simo Sorce <simo@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

install/share/kdc.conf.template

file modified

+1 -1

install/share/profiles/KDCs_PKINIT_Certs.cfg

file added

+109

install/share/profiles/Makefile.am

file modified

+1 -0

ipaclient/install/client.py

file modified

+1 -1

ipalib/install/certmonger.py

file modified

+28 -15

ipaplatform/base/paths.py

file modified

+2 -1

ipapython/dogtag.py

file modified

+4 -0

ipaserver/install/cainstance.py

file modified

+1 -1

ipaserver/install/certs.py

file modified

+8 -2

ipaserver/install/dsinstance.py

file modified

+1 -1

ipaserver/install/httpinstance.py

file modified

+1 -1

ipaserver/install/krbinstance.py

file modified

+48 -14

ipaserver/install/server/__init__.py

file modified

+2 -2

ipaserver/install/server/install.py

file modified

+10 -11

ipaserver/install/server/replicainstall.py

file modified

+3 -1

ipaserver/install/server/upgrade.py

file modified

+35 -0

ipaserver/plugins/cert.py

file modified

+68 -18

ipaserver/plugins/dogtag.py

file modified

+2 -0

freeipa

Source Code

ca4e6c1 Configure Anonymous PKINIT on server install

18 files Authored by simo 7 years ago, Committed by jcholast 7 years ago,

`ca4e6c1` Configure Anonymous PKINIT on server install