|
 |
590d18 |
From 3e8d1d09e5a1b19c64a0356d2b19dac74c20ad73 Mon Sep 17 00:00:00 2001
|
|
|
590d18 |
From: Fraser Tweedale <ftweedal@redhat.com>
|
|
|
590d18 |
Date: Fri, 7 Aug 2015 03:21:43 -0400
|
|
|
590d18 |
Subject: [PATCH] Fix default CA ACL added during upgrade
|
|
|
590d18 |
|
|
|
590d18 |
The upgrade script is adding the default CA ACL with incorrect
|
|
|
590d18 |
attributes - usercategory=all instead of servicecategory=all. Fix
|
|
|
590d18 |
it to create the correct object.
|
|
|
590d18 |
|
|
|
590d18 |
Fixes: https://fedorahosted.org/freeipa/ticket/5185
|
|
|
590d18 |
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
|
|
|
590d18 |
---
|
|
|
590d18 |
ipaserver/install/server/upgrade.py | 2 +-
|
|
|
590d18 |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
590d18 |
|
|
|
590d18 |
diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py
|
|
|
590d18 |
index 037127918cb4c205c5049446989bfdaa674967a4..692d0c77e0683f4ad35ebbc14d5a34decc098deb 100644
|
|
|
590d18 |
--- a/ipaserver/install/server/upgrade.py
|
|
|
590d18 |
+++ b/ipaserver/install/server/upgrade.py
|
|
|
590d18 |
@@ -1306,7 +1306,7 @@ def add_default_caacl(ca):
|
|
|
590d18 |
|
|
|
590d18 |
if not api.Command.caacl_find()['result']:
|
|
|
590d18 |
api.Command.caacl_add(u'hosts_services_caIPAserviceCert',
|
|
|
590d18 |
- hostcategory=u'all', usercategory=u'all')
|
|
|
590d18 |
+ hostcategory=u'all', servicecategory=u'all')
|
|
|
590d18 |
api.Command.caacl_add_profile(u'hosts_services_caIPAserviceCert',
|
|
|
590d18 |
certprofile=(u'caIPAserviceCert',))
|
|
|
590d18 |
|
|
|
590d18 |
--
|
|
|
590d18 |
2.4.3
|
|
|
590d18 |
|