summaryrefslogtreecommitdiffstats
path: root/ipaserver/install/krbinstance.py
Commit message (Expand)AuthorAgeFilesLines
* Move certauth configuration into a server krb5.conf templateRobbie Harwood2019-09-101-0/+1
* Replace replication_wait_timeout with certmonger_wait_timeoutRob Crittenden2019-09-041-1/+1
* Don't configure disabled krb5 enctypes in FIPS modeRob Crittenden2019-07-021-1/+2
* ipaserver.install.installutils: move commonly used utils to ipapython.ipautilAlexander Bokovoy2019-06-291-3/+3
* Move DS's Kerberos env vars to unit fileChristian Heimes2019-04-021-4/+0
* Use api.env.container_mastersChristian Heimes2019-03-281-5/+1
* pkinit setup: fix regression on master installFlorence Blanc-Renaud2019-02-201-2/+3
* Move realm_to_serverid/ldap_uri to ipaldapChristian Heimes2019-02-051-1/+1
* pkinit enable: use local dogtag only if host has CAFlorence Blanc-Renaud2019-01-091-1/+5
* PKINIT: fix ipa-pkinit-manage enable|disableFlorence Blanc-Renaud2018-12-051-3/+6
* Remove unused promote arg in krbinstance.create_replica in ipaserver/installThomas Woerner2018-09-121-1/+1
* Fix pylint 2.0 return-related violationsArmando Neto2018-07-111-1/+1
* Auto-retry failed certmonger requestsChristian Heimes2018-07-091-1/+2
* Delay enabling services until end of installerChristian Heimes2018-07-061-2/+2
* Ensure that public cert and CA bundle are readableChristian Heimes2018-06-271-1/+1
* Use common replication wait timeout of 5minChristian Heimes2018-06-221-5/+8
* Move client templates to separate directoryChristian Heimes2018-06-051-9/+12
* Create kadm5.acl if it doesn't existTimo Aaltonen2018-05-291-0/+5
* Enable SPAKE support using krb5.conf.d snippetRobbie Harwood2018-04-281-0/+1
* ipa-server-install: handle error when calling kdb5_util createFlorence Blanc-Renaud2018-03-131-2/+3
* certmonger: Use explicit storage formatChristian Heimes2018-02-231-5/+8
* Replace hard-coded paths with path constantsChristian Heimes2018-02-081-1/+1
* Less confusing message for PKINIT configuration during installAleksei Slaikovskii2017-10-131-2/+11
* logging: do not log into the root loggerJan Cholasta2017-07-141-13/+15
* install: do not assume /etc/krb5.conf.d existsJan Cholasta2017-06-281-1/+7
* pkinit manage: introduce ipa-pkinit-manageJan Cholasta2017-06-061-0/+24
* krb5: make sure KDC certificate is readableAlexander Bokovoy2017-05-251-1/+2
* server install: fix KDC PKINIT configurationJan Cholasta2017-05-191-11/+16
* client install: fix client PKINIT configurationJan Cholasta2017-05-191-1/+3
* ipa-server-install with external CA: fix pkinit cert issuanceFlorence Blanc-Renaud2017-05-031-0/+8
* Do not test anonymous PKINIT after install/upgradeMartin Babinsky2017-04-281-9/+0
* API for retrieval of master's PKINIT status and publishing it in LDAPMartin Babinsky2017-04-281-0/+41
* Allow for configuration of all three PKINIT variants when deploying KDCMartin Babinsky2017-04-281-52/+93
* Always check and create anonymous principal during KDC installMartin Babinsky2017-03-301-4/+13
* Split out anonymous PKINIT test to a separate methodMartin Babinsky2017-03-301-0/+2
* Remove unused variable from failed anonymous PKINIT handlingMartin Babinsky2017-03-301-1/+1
* Try out anonymous PKINIT after it is configuredMartin Babinsky2017-03-151-0/+6
* check for replica's KDC entry on master before requesting PKINIT certMartin Babinsky2017-03-151-0/+15
* Move PKINIT configuration to a later stage of server/replica installMartin Babinsky2017-03-151-7/+17
* Request PKINIT cert directly from Dogtag API on first masterMartin Babinsky2017-03-151-0/+16
* Make PKINIT certificate request logic consistent with other installersMartin Babinsky2017-03-151-8/+8
* installer: update time estimatesTomas Krizek2017-03-101-2/+2
* Refactor certmonger for OpenSSL certificatesStanislav Laznicka2017-03-011-2/+1
* Remove pkcs12 handling functions from CertDBStanislav Laznicka2017-03-011-5/+2
* Use Anonymous user to obtain FAST armor ccacheSimo Sorce2017-02-151-2/+3
* Configure Anonymous PKINIT on server installSimo Sorce2016-12-121-14/+48
* constants: remove CACERTJan Cholasta2016-11-291-2/+1
* ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIRJan Cholasta2016-11-291-1/+2
* Replace LooseVersionChristian Heimes2016-11-241-3/+3
* services: replace admin_conn with api.Backend.ldap2Tomas Krizek2016-11-221-6/+7