diff options
| author | Jan Cholasta <jcholast@redhat.com> | 2011-12-07 03:40:51 -0500 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2012-02-13 22:21:43 -0500 |
| commit | c34f5fbc882b16baebc18d795511e8e1fc50668b (patch) | |
| tree | 05b15df263fceb0dff104e274338178d33f29dd7 /install/tools/ipa-server-install | |
| parent | 9b6649a1ce7c15043c9d197363c3b9fdd4b12a1d (diff) | |
| download | freeipa.git-c34f5fbc882b16baebc18d795511e8e1fc50668b.tar.gz freeipa.git-c34f5fbc882b16baebc18d795511e8e1fc50668b.tar.xz freeipa.git-c34f5fbc882b16baebc18d795511e8e1fc50668b.zip | |
Update host SSH public keys on the server during client install.
This is done by calling host-mod to update the keys on IPA server and nsupdate
to update DNS SSHFP records. DNS update can be disabled using --no-dns-sshfp
ipa-client-install option.
https://fedorahosted.org/freeipa/ticket/1634
Diffstat (limited to 'install/tools/ipa-server-install')
| -rwxr-xr-x | install/tools/ipa-server-install | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/install/tools/ipa-server-install b/install/tools/ipa-server-install index 949d0219..2d6f0672 100755 --- a/install/tools/ipa-server-install +++ b/install/tools/ipa-server-install @@ -200,6 +200,8 @@ def parse_options(): dns_group.add_option("--no-host-dns", dest="no_host_dns", action="store_true", default=False, help="Do not use DNS for hostname lookup during installation") + dns_group.add_option("--no-dns-sshfp", dest="create_sshfp", default=True, action="store_false", + help="do not automatically create DNS SSHFP records") parser.add_option_group(dns_group) uninstall_group = OptionGroup(parser, "uninstall options") @@ -1037,7 +1039,10 @@ def main(): # Call client install script try: - run(["/usr/sbin/ipa-client-install", "--on-master", "--unattended", "--domain", domain_name, "--server", host_name, "--realm", realm_name, "--hostname", host_name]) + args = ["/usr/sbin/ipa-client-install", "--on-master", "--unattended", "--domain", domain_name, "--server", host_name, "--realm", realm_name, "--hostname", host_name] + if not options.create_sshfp: + args.append("--no-dns-sshfp") + run(args) except Exception, e: sys.exit("Configuration of client side components failed!\nipa-client-install returned: " + str(e)) |