9d39d5e replica install: do not set CA renewal master flag

Authored and Committed by jcholast 4 years ago
    replica install: do not set CA renewal master flag
    
    The CA renewal master flag was uncoditionally set on every replica during
    replica install. This causes the Dogtag certificates initially shared
    among all replicas to differ after renewal.
    
    Do not set the CA renewal master flag in replica install anymore. On
    upgrade, remove the flag from all but one IPA masters.
    
    https://fedorahosted.org/freeipa/ticket/5902
    
    Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
    
        
file modified
+5 -1