summaryrefslogtreecommitdiffstats
path: root/ipaplatform
diff options
context:
space:
mode:
authorSimo Sorce <simo@redhat.com>2015-06-11 15:45:38 -0400
committerJan Cholasta <jcholast@redhat.com>2015-10-15 14:24:33 +0200
commitd03619fff3a1eb7d21c2ba21f8867ae8018779b8 (patch)
tree0b322eaaa8846d05191e7c551b691f2b80213469 /ipaplatform
parent2cd0d20a2a454369488b77e841a9cce643b26d34 (diff)
downloadfreeipa-d03619fff3a1eb7d21c2ba21f8867ae8018779b8.tar.gz
freeipa-d03619fff3a1eb7d21c2ba21f8867ae8018779b8.tar.xz
freeipa-d03619fff3a1eb7d21c2ba21f8867ae8018779b8.zip
Implement replica promotion functionality
This patch implements a new flag --promote for the ipa-replica-install command that allows an administrative user to 'promote' an already joined client to become a full ipa server. The only credentials used are that of an administrator. This code relies on ipa-custodia being available on the peer master as well as a number of other patches to allow a computer account to request certificates for its services. Therefore this feature is marked to work only with domain level 1 and above servers. Ticket: https://fedorahosted.org/freeipa/ticket/2888 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'ipaplatform')
-rw-r--r--ipaplatform/base/paths.py1
1 files changed, 1 insertions, 0 deletions
diff --git a/ipaplatform/base/paths.py b/ipaplatform/base/paths.py
index 38b6c6eec..dc8170b41 100644
--- a/ipaplatform/base/paths.py
+++ b/ipaplatform/base/paths.py
@@ -360,5 +360,6 @@ class BasePathNamespace(object):
IPA_CUSTODIA_CONF = '/etc/ipa/custodia/custodia.conf'
IPA_CUSTODIA_SOCKET = '/run/httpd/ipa-custodia.sock'
IPA_CUSTODIA_AUDIT_LOG = '/var/log/ipa-custodia.audit.log'
+ IPA_GETKEYTAB = '/usr/sbin/ipa-getkeytab'
path_namespace = BasePathNamespace