summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--install/share/certmap.conf.template4
-rw-r--r--ipaserver/install/server/upgrade.py5
2 files changed, 8 insertions, 1 deletions
diff --git a/install/share/certmap.conf.template b/install/share/certmap.conf.template
index d59b095fa..bf4f4d0cd 100644
--- a/install/share/certmap.conf.template
+++ b/install/share/certmap.conf.template
@@ -1,3 +1,7 @@
+# VERSION 3 - DO NOT REMOVE THIS LINE
+#
+# This file is managed by IPA and will be overwritten on upgrades.
+#
#
# This file configures how a certificate is mapped to an LDAP entry. See the
# documentation for more information on this file.
diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py
index eef675577..d3fd4329a 100644
--- a/ipaserver/install/server/upgrade.py
+++ b/ipaserver/install/server/upgrade.py
@@ -168,6 +168,9 @@ def upgrade_file(sub_dict, filename, template, add=False):
if new < 0:
root_logger.error("%s not found." % template)
+ if new == 0:
+ root_logger.error("Template %s is not versioned." % template)
+
if old == 0:
# The original file does not have a VERSION entry. This means it's now
# managed by IPA, but previously was not.
@@ -1526,7 +1529,7 @@ def upgrade_configuration():
subject_base = find_subject_base()
if subject_base:
- sub_dict['SUBJECT_BASE'] = subject_base
+ sub_dict['ISSUER_DN'] = 'CN=Certificate Authority,' + subject_base
ca = cainstance.CAInstance(
api.env.realm, host_name=api.env.host)