From ce33f82cfe528c17d3a1367172bb1475fe169b25 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Thu, 4 Jun 2015 22:49:01 -0400 Subject: Fix certificate subject base Profile management patches introduced a regression where a custom certificate subject base (if configured) is not used in the default profile. Use the configured subject base. Part of: https://fedorahosted.org/freeipa/ticket/4002 Reviewed-By: Martin Basti --- ipaserver/install/cainstance.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ipaserver') diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py index ca0b6df5d..42225c28c 100644 --- a/ipaserver/install/cainstance.py +++ b/ipaserver/install/cainstance.py @@ -1665,7 +1665,7 @@ def import_included_profiles(): DOMAIN=ipautil.format_netloc(api.env.domain), IPA_CA_RECORD=IPA_CA_RECORD, CRL_ISSUER='CN=Certificate Authority,o=ipaca', - SUBJECT_DN_O=str(DN(('O', api.env.realm))), + SUBJECT_DN_O=dsinstance.DsInstance().find_subject_base(), ) server_id = installutils.realm_to_serverid(api.env.realm) -- cgit