freeipa

#5556 --setup-dns is forgotten for using an external PKI
Closed: Fixed Opened by pvoborni.

Closed: Fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Fedora): Bug 1292099

If I run
        ipa-server-install -n example.com -r EXAMPLE.COM --external-ca
--subject="O=example AG,C=DE" --setup-dns --forwarder ...
then it asks me get signed certificates and to run ipa-server-install again.
Quote:
        The next step is to get /root/ipa.csr signed by your CA and re-run
/usr/sbin/ipa-server-install as:
        /usr/sbin/ipa-server-install
--external-cert-file=/path/to/signed_certificate
--external-cert-file=/path/to/external_ca_certificate
If I do, then DNS is not setup. I have to add the DNS specific options again.
This is highly misleading. ipa-server-install should show *all* necessary
command line arguments to complete the second step, according to step 1.
Unfortunately the log file is gone. Did you know that ipa-server-install
overwrites its own logfiles?

SHould be fixed in 4.2.4, 4.3.1 and master.

master:

  • 30fbc7e948739f0ee758e01d0ef1a3a0a53984b0 installer: Propagate option values from components instead of copying them.
  • f0703d3c2a399012fa4cae0b856c08ff18b42463 installer: Fix logic of reading option values from cache.

ipa-4-3:

  • 264748b14e1177a16133c65a1ee9e0d995b17732 installer: Propagate option values from components instead of copying them.
  • 2b3a0a4519b409c4c363afcb61da77ad9b9a1436 installer: Fix logic of reading option values from cache.

ipa-4-2:

  • 2bead374900a597234e09b483c380574a6c53d14 installer: Propagate option values from components instead of copying them.
  • d655b949d3bd8f5d192605acd579314e82492b86 installer: Fix logic of reading option values from cache.

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1301674

Metadata Update from @pvoborni:
- Issue assigned to dkupka
- Issue set to the milestone: FreeIPA 4.2.4
Metadata
None
None
None
Normal
defect
Installation
1
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.