diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2016-12-20 20:21:10 +1000 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2017-01-11 15:28:50 +0100 |
| commit | 0c95a00147b1dd508736dacc847873ddddafb504 (patch) | |
| tree | 7bfe0a947bb53859bf93801481f124d19dd93cb1 /install | |
| parent | 3f5660973251fe4b178e6486b6b86fbdd162d4d6 (diff) | |
| download | freeipa-0c95a00147b1dd508736dacc847873ddddafb504.tar.gz freeipa-0c95a00147b1dd508736dacc847873ddddafb504.tar.xz freeipa-0c95a00147b1dd508736dacc847873ddddafb504.zip | |
Add sanity checks for use of --ca-subject and --subject-base
Print an error and terminate if --ca-subject or --subject-base are
used when installing a CA-less master or when performing standalone
installation of a CA replica.
Part of: https://fedorahosted.org/freeipa/ticket/2614
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'install')
| -rwxr-xr-x | install/tools/ipa-ca-install | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/install/tools/ipa-ca-install b/install/tools/ipa-ca-install index 42906d440..0952d0088 100755 --- a/install/tools/ipa-ca-install +++ b/install/tools/ipa-ca-install @@ -122,6 +122,11 @@ def get_dirman_password(): def install_replica(safe_options, options, filename): + if options.ca_subject: + sys.exit("--ca-subject cannot be used when installing a CA replica") + if options.subject_base: + sys.exit("--subject-base cannot be used when installing a CA replica") + if options.promote: if filename is not None: sys.exit("Too many parameters provided. " |