freeipa

#5967 "CA" segment can be created for servers without CA suffix
Closed: Fixed Opened by pvoborni.

Closed: Fixed
Reopen Issue

It should not be allowed. There is nothing to replicate.

Web UI also offers CA segment creation for such masters.

Also topologysuffix-verify ca reports error for replicas without CA

Linked to Bugzilla bug: https://bugzilla.redhat.com/show_bug.cgi?id=1298848 (Red Hat Enterprise Linux 7)

master:

  • 5b5258b01081aa9ad4bf83907941c1c2d8a47722 Fix topologysuffix-verify failing connections
  • 13328bc7518a9e536d26562a738b4591c0494b75 topo segment-add: validate that both masters support target suffix

Metadata Update from @pvoborni:
- Issue assigned to stlaz
- Issue set to the milestone: FreeIPA 4.4
Metadata
None
None
None
Low
defect
IPA
1
pvoborni
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.