summaryrefslogtreecommitdiffstats
path: root/ipaserver/install
diff options
context:
space:
mode:
authorJan Cholasta <jcholast@redhat.com>2013-10-16 08:55:17 +0000
committerPetr Viktorin <pviktori@redhat.com>2014-03-25 16:54:55 +0100
commitb5d082ec4d08712f8be5b56ea248133a76fd923a (patch)
tree8e8cec9087e7517ff057ffd99bcb200d914a5090 /ipaserver/install
parentc3169add3be4fdb4572d6e159766a1d3cbb7e3d8 (diff)
downloadfreeipa-b5d082ec4d08712f8be5b56ea248133a76fd923a.tar.gz
freeipa-b5d082ec4d08712f8be5b56ea248133a76fd923a.tar.xz
freeipa-b5d082ec4d08712f8be5b56ea248133a76fd923a.zip
Make the default dogtag-ipa-ca-renew-agent behavior depend on CA setup.
On CA masters, a certificate is requested and stored to LDAP. On CA clones, the certificate is retrieved from LDAP. Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Diffstat (limited to 'ipaserver/install')
-rw-r--r--ipaserver/install/cainstance.py6
1 files changed, 2 insertions, 4 deletions
diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py
index 99c008a67..6180e42b7 100644
--- a/ipaserver/install/cainstance.py
+++ b/ipaserver/install/cainstance.py
@@ -925,8 +925,7 @@ class CAInstance(service.Service):
pinfile='/etc/httpd/alias/pwdfile.txt',
secdir='/etc/httpd/alias',
pre_command=None,
- post_command='restart_httpd',
- profile='ipaRetrieval')
+ post_command='restart_httpd')
except (ipautil.CalledProcessError, RuntimeError), e:
root_logger.error(
"certmonger failed to start tracking certificate: %s" % str(e))
@@ -1504,8 +1503,7 @@ class CAInstance(service.Service):
pinfile=None,
secdir=self.dogtag_constants.ALIAS_DIR,
pre_command='stop_pkicad',
- post_command='restart_pkicad "%s"' % nickname,
- profile='ipaRetrieval')
+ post_command='restart_pkicad "%s"' % nickname)
except (ipautil.CalledProcessError, RuntimeError), e:
root_logger.error(
"certmonger failed to start tracking certificate: "