freeipa

#5497 replica promotion requires admin credentials for connection check
Closed: Fixed Opened by pvoborni.

Closed: Fixed
Reopen Issue

I.e. -p $principal and -w $principal options or --skip-conn-check options need to be specified. Both is suboptimal.

Connection check should not require explicit admin credentials.

This requirement prevents to do: 

1. install ipa client (doesn't matter how)
2. kinit admin
3. ipa-replica-install

or 

1. install ipa client (doesn't matter how)
2. add the host to ipaservers host group (being work on in #3416 and #5401)
3. ipa-replica-install

or (#5498)

1. add the host to ipaservers host group (being work on in #3416 and #5401)
2. ipa-replica-install --otp $otp

master:

  • 00f591d4e93cfe1f6f020a1c708a3d90b5b34288 build: put oddjob scripts into separate directory
  • 8d7f67e08c8320712321501451e4a444b89a4423 replica install: add remote connection check over API
  • 14a44ea47bf9a617019ebc91fbe272215c428d82 replica promotion: use host credentials for connection check

master:

  • 8b1002a18c42e8be45f0e03e7d3526179ef5b648 spec file: Add dbus-python to BuildRequires

Metadata Update from @pvoborni:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.3
Metadata
None
None
None
Low
defect
IPA
0
0
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.