From 0862e320916e0123df7e8505ba61229db0cb1e4a Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Thu, 16 Feb 2017 11:19:09 +0100 Subject: server upgrade: always upgrade KRA agent PEM file Before the KRA agent PEM file is exported in server upgrade, the sysupgrade state file is consulted. This causes the KRA agent PEM file not to be exported to the new location if the upgrade was executed in the past. Do not consult the sysupgrade state file to decide whether to upgrade the KRA agent PEM file or not, the existence of the file is enough to make this decision. https://fedorahosted.org/freeipa/ticket/6675 Reviewed-By: Stanislav Laznicka --- ipaplatform/base/paths.py | 1 + 1 file changed, 1 insertion(+) (limited to 'ipaplatform/base') diff --git a/ipaplatform/base/paths.py b/ipaplatform/base/paths.py index 8db9e61f5..5d5fb993f 100644 --- a/ipaplatform/base/paths.py +++ b/ipaplatform/base/paths.py @@ -39,6 +39,7 @@ class BasePathNamespace(object): HOSTS = "/etc/hosts" ETC_HTTPD_DIR = "/etc/httpd" HTTPD_ALIAS_DIR = "/etc/httpd/alias" + OLD_KRA_AGENT_PEM = "/etc/httpd/alias/kra-agent.pem" IPA_RADB_DIR = "/var/lib/ipa/radb" HTTPD_CONF_D_DIR = "/etc/httpd/conf.d/" HTTPD_IPA_KDCPROXY_CONF = "/etc/ipa/kdcproxy/ipa-kdc-proxy.conf" -- cgit