From 6368a60730097311510c0e1258790d916782e6d4 Mon Sep 17 00:00:00 2001
From: Martin Kosek <mkosek@redhat.com>
Date: May 09 2013 13:13:33 +0000
Subject: Do not add ipa-ca records on CA-less installs


ipa-dns-install crashed when it was run on a CA-less server.

https://fedorahosted.org/freeipa/ticket/3617

---

diff --git a/ipaserver/install/bindinstance.py b/ipaserver/install/bindinstance.py
index 6694f01..5a2450e 100644
--- a/ipaserver/install/bindinstance.py
+++ b/ipaserver/install/bindinstance.py
@@ -733,7 +733,7 @@ class BindInstance(service.Service):
         self.__add_ipa_ca_records(self.fqdn, [self.ip_address],
                                   self.ca_configured)
 
-        if self.first_instance:
+        if self.first_instance and self.ca_configured:
             ldap = api.Backend.ldap2
             entries = ldap.get_entries(
                 DN(('cn', 'masters'), ('cn', 'ipa'), ('cn', 'etc'),