diff options
| author | Martin Babinsky <mbabinsk@redhat.com> | 2016-11-08 16:24:18 +0100 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2016-11-11 12:17:25 +0100 |
| commit | 6181844c0ce62b8d7d35554032346396b20ad3c0 (patch) | |
| tree | c7ff137ac15552610556b8a74ade6f5339dbb9a5 /Makefile.python.am | |
| parent | 4286f3885b173da9ceeb2d13d66f90336b9ef094 (diff) | |
| download | freeipa-6181844c0ce62b8d7d35554032346396b20ad3c0.tar.gz freeipa-6181844c0ce62b8d7d35554032346396b20ad3c0.tar.xz freeipa-6181844c0ce62b8d7d35554032346396b20ad3c0.zip | |
use DM credentials to retrieve service keytab only in DLO
In DL0 directory manager password is bundled in the supplied replica file and
the replica installer can use it to authenticate against master when
retrieving service keytabs.
In DL1, however, DM credentials are generated randomly and used during local
DS instance creation. The proper DM password is imported by custodia much
later to the process. We must not allow the installer to contact the remote
master using this random password since it would fail.
https://fedorahosted.org/freeipa/ticket/6405
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Diffstat (limited to 'Makefile.python.am')
0 files changed, 0 insertions, 0 deletions