diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2012-11-01 12:16:25 -0400 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2012-11-23 12:19:19 +0100 |
| commit | 5fa3455764cb475078723eebacffefd2baf08016 (patch) | |
| tree | 525a40290bba5a9ca0a92498ccf5ee02bdd4b8e2 /install/share | |
| parent | d1574136754ff7e2190b0cf9a99b211c1bfededa (diff) | |
| download | freeipa-5fa3455764cb475078723eebacffefd2baf08016.tar.gz freeipa-5fa3455764cb475078723eebacffefd2baf08016.tar.xz freeipa-5fa3455764cb475078723eebacffefd2baf08016.zip | |
Update certmap.conf on IPA upgrades
This brings /etc/dirsrv/slapd-REALM/certmap.conf under IPA control.
The file is overwritten on upgrades.
This ensures that the cert for the ipaca user is recognized when
ipa-ca-install is run on older masters.
Diffstat (limited to 'install/share')
| -rw-r--r-- | install/share/certmap.conf.template | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/install/share/certmap.conf.template b/install/share/certmap.conf.template index 40b4e6cb1..cff3a669b 100644 --- a/install/share/certmap.conf.template +++ b/install/share/certmap.conf.template @@ -1,4 +1,8 @@ +# VERSION 1 - DO NOT REMOVE THIS LINE # +# This file is managed by IPA and will be overwritten on upgrades. + + # BEGIN COPYRIGHT BLOCK # This Program is free software; you can redistribute it and/or modify it under # the terms of the GNU General Public License as published by the Free Software @@ -80,6 +84,6 @@ certmap default default #default:InitFn <Init function's name> default:DNComps default:FilterComps uid -certmap ipaca CN=Certificate Authority,O=domain_name +certmap ipaca CN=Certificate Authority,O=$REALM ipaca:CmapLdapAttr seeAlso ipaca:verifycert on |