From e1d6f9c6b94d96ca7d78a6eed64e9c705120d6fe Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Mon, 22 Nov 2010 13:29:56 -0500 Subject: Make pkinit setup optional in ipa-replica-prepare too. Also add fixes for ipa-replica-install as that had issues too. Fixes: https://fedorahosted.org/freeipa/ticket/527 --- install/tools/ipa-replica-prepare | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'install/tools/ipa-replica-prepare') diff --git a/install/tools/ipa-replica-prepare b/install/tools/ipa-replica-prepare index af7680155..d70741f1a 100755 --- a/install/tools/ipa-replica-prepare +++ b/install/tools/ipa-replica-prepare @@ -242,6 +242,11 @@ def main(): api.bootstrap(in_server=True) api.finalize() + #Automatically disable pkinit w/ dogtag until that is supported + #[certs.ipa_self_signed() must be called only after api.finalize()] + if not options.pkinit_pkcs12 and not certs.ipa_self_signed(): + options.setup_pkinit = False + if options.ip_address: if not bindinstance.dns_container_exists(api.env.host, api.env.realm): print "You can't add a DNS record because DNS is not set up." -- cgit