summaryrefslogtreecommitdiffstats
path: root/ipaserver/install/server/install.py
diff options
context:
space:
mode:
authorSimo Sorce <simo@redhat.com>2015-05-08 13:39:29 -0400
committerSimo Sorce <simo@redhat.com>2015-10-01 16:20:48 -0400
commit4265c7e8759482b82ce60642e51a9d0c45867848 (patch)
tree1c44443b10b77857b99140c624071e957cad52bb /ipaserver/install/server/install.py
parente3cb6305cc39caf8323ed0d1b729369910c97505 (diff)
downloadfreeipa-4265c7e8759482b82ce60642e51a9d0c45867848.tar.gz
freeipa-4265c7e8759482b82ce60642e51a9d0c45867848.tar.xz
freeipa-4265c7e8759482b82ce60642e51a9d0c45867848.zip
Add ipa-custodia service
Add a customized Custodia daemon and enable it after installation. Generates server keys and loads them in LDAP autonomously on install or update. Provides client code classes too. Signed-off-by: Simo Sorce <simo@redhat.com>
Diffstat (limited to 'ipaserver/install/server/install.py')
-rw-r--r--ipaserver/install/server/install.py8
1 files changed, 7 insertions, 1 deletions
diff --git a/ipaserver/install/server/install.py b/ipaserver/install/server/install.py
index 72f6e4d8d..e936b6798 100644
--- a/ipaserver/install/server/install.py
+++ b/ipaserver/install/server/install.py
@@ -33,7 +33,7 @@ import ipaclient.ntpconf
from ipaserver.install import (
bindinstance, ca, cainstance, certs, dns, dsinstance, httpinstance,
installutils, kra, krbinstance, memcacheinstance, ntpinstance,
- otpdinstance, replication, service, sysupgrade)
+ otpdinstance, custodiainstance, replication, service, sysupgrade)
from ipaserver.install.installutils import (
IPA_MODULES, BadHostError, get_fqdn, get_server_ip_address,
is_ipa_configured, load_pkcs12, read_password, verify_fqdn,
@@ -814,6 +814,11 @@ def install(installer):
otpd.create_instance('OTPD', host_name, dm_password,
ipautil.realm_to_suffix(realm_name))
+ custodia = custodiainstance.CustodiaInstance()
+ custodia.create_instance('KEYS', host_name, dm_password,
+ ipautil.realm_to_suffix(realm_name),
+ realm_name)
+
# Create a HTTP instance
http = httpinstance.HTTPInstance(fstore)
if options.http_cert_files:
@@ -1078,6 +1083,7 @@ def uninstall(installer):
dsinstance.DsInstance(fstore=fstore).uninstall()
if _server_trust_ad_installed:
adtrustinstance.ADTRUSTInstance(fstore).uninstall()
+ custodiainstance.CustodiaInstance().uninstall()
memcacheinstance.MemcacheInstance().uninstall()
otpdinstance.OtpdInstance().uninstall()
tasks.restore_network_configuration(fstore, sstore)