freeipa

Clone
Source Code
GIT

#4621 Upgrade from CA-less to CA-ful is not propagated to hosts in the domain
Closed: Fixed None Opened 9 years ago by jcholast.

Closed: Fixed
Reopen Issue

When an IPA server is upgraded from CA-less to CA-ful, only that single server will know about the change, other servers and clients will still run in CA-less mode. This is because the installer only updates local configuration. Store the configuration in LDAP instead.

master:

  • cbb4caa Do not create ipa-pki-proxy.conf if CA is not configured in ipa-upgradeconfig
  • 6227ebb Do not fix trust flags in the DS NSS DB in ipa-upgradeconfig
  • 608851d Check LDAP instead of local configuration to see if IPA CA is enabled

ipa-4-1:

  • 63557c2 Do not create ipa-pki-proxy.conf if CA is not configured in ipa-upgradeconfig
  • 277850e Do not fix trust flags in the DS NSS DB in ipa-upgradeconfig
  • 5303e63 Check LDAP instead of local configuration to see if IPA CA is enabled

Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.1
7 years ago

Login to comment on this ticket.

Metadata
None
None
None
normal
None
None
None
None
defect
None
None
IPA
None
1
None
None
dkupka
None
0
None
None
None
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.