Skip to content

Commit

Permalink
Always set ca_host when installing replica
Browse files Browse the repository at this point in the history
ipa-replica-install only set ca_host in its temporary
/etc/ipa/default.conf, when it wasn't installing a replica with CA. As a
consequence, the replica installer was picking a random CA server from
LDAP.

Always set the replication peer as ca_host. This will ensure that the
installer uses the same replication peer for CA. In case the replication
peer is not a CA master, the installer will automatically pick another
host later.

See: https://pagure.io/freeipa/issue/7566
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
  • Loading branch information
tiran authored and Tiboris committed Jun 21, 2018
1 parent 84ae625 commit 8c3ff03
Showing 1 changed file with 2 additions and 4 deletions.
6 changes: 2 additions & 4 deletions ipaserver/install/server/replicainstall.py
Expand Up @@ -241,11 +241,9 @@ def create_ipa_conf(fstore, config, ca_enabled, master=None):
gopts.extend([
ipaconf.setOption('enable_ra', 'True'),
ipaconf.setOption('ra_plugin', 'dogtag'),
ipaconf.setOption('dogtag_version', '10')
ipaconf.setOption('dogtag_version', '10'),
ipaconf.setOption('ca_host', config.ca_host_name)
])

if not config.setup_ca:
gopts.append(ipaconf.setOption('ca_host', config.ca_host_name))
else:
gopts.extend([
ipaconf.setOption('enable_ra', 'False'),
Expand Down

0 comments on commit 8c3ff03

Please sign in to comment.