|
 |
483b06 |
From dd300d7db884db2d0aa228c08d2447539ce14c1c Mon Sep 17 00:00:00 2001
|
|
|
483b06 |
From: Martin Babinsky <mbabinsk@redhat.com>
|
|
|
483b06 |
Date: Wed, 22 Mar 2017 16:52:14 +0100
|
|
|
483b06 |
Subject: [PATCH] Remove duplicate functionality in upgrade
|
|
|
483b06 |
|
|
|
483b06 |
Since krbinstance code can now handle all operations of the
|
|
|
483b06 |
`enabled_anonymous_principal` function from upgrade we can remove
|
|
|
483b06 |
extraneous function altogether.
|
|
|
483b06 |
|
|
|
483b06 |
https://pagure.io/freeipa/issue/6799
|
|
|
483b06 |
|
|
|
483b06 |
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
|
|
|
483b06 |
---
|
|
|
483b06 |
ipaserver/install/server/upgrade.py | 16 +---------------
|
|
|
483b06 |
1 file changed, 1 insertion(+), 15 deletions(-)
|
|
|
483b06 |
|
|
|
483b06 |
diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py
|
|
|
483b06 |
index 0db764cb80f6d0fb22f00719dadf1f921f97bf62..25b86297af3ae9d5f21cebb93f493b90670dcfc3 100644
|
|
|
483b06 |
--- a/ipaserver/install/server/upgrade.py
|
|
|
483b06 |
+++ b/ipaserver/install/server/upgrade.py
|
|
|
483b06 |
@@ -1482,20 +1482,6 @@ def add_default_caacl(ca):
|
|
|
483b06 |
sysupgrade.set_upgrade_state('caacl', 'add_default_caacl', True)
|
|
|
483b06 |
|
|
|
483b06 |
|
|
|
483b06 |
-def enable_anonymous_principal(krb):
|
|
|
483b06 |
- princ_realm = krb.get_anonymous_principal_name()
|
|
|
483b06 |
- dn = DN(('krbprincipalname', princ_realm), krb.get_realm_suffix())
|
|
|
483b06 |
- try:
|
|
|
483b06 |
- _ = api.Backend.ldap2.get_entry(dn) # pylint: disable=unused-variable
|
|
|
483b06 |
- except ipalib.errors.NotFound:
|
|
|
483b06 |
- krb.add_anonymous_principal()
|
|
|
483b06 |
-
|
|
|
483b06 |
- try:
|
|
|
483b06 |
- api.Backend.ldap2.set_entry_active(dn, True)
|
|
|
483b06 |
- except ipalib.errors.AlreadyActive:
|
|
|
483b06 |
- pass
|
|
|
483b06 |
-
|
|
|
483b06 |
-
|
|
|
483b06 |
def setup_pkinit(krb):
|
|
|
483b06 |
root_logger.info("[Setup PKINIT]")
|
|
|
483b06 |
|
|
|
483b06 |
@@ -1809,7 +1795,7 @@ def upgrade_configuration():
|
|
|
483b06 |
KDC_CERT=paths.KDC_CERT,
|
|
|
483b06 |
KDC_KEY=paths.KDC_KEY,
|
|
|
483b06 |
CACERT_PEM=paths.CACERT_PEM)
|
|
|
483b06 |
- enable_anonymous_principal(krb)
|
|
|
483b06 |
+ krb.add_anonymous_principal()
|
|
|
483b06 |
http.request_anon_keytab()
|
|
|
483b06 |
setup_pkinit(krb)
|
|
|
483b06 |
|
|
|
483b06 |
--
|
|
|
483b06 |
2.12.2
|
|
|
483b06 |
|