From ee6d031a6a0939c1f51a874b1f8f9b19ec727203 Mon Sep 17 00:00:00 2001
From: Stanislav Laznicka <slaznick@redhat.com>
Date: Mar 14 2017 16:09:47 +0000
Subject: Backup KDC certificate pair


KDC certificate pair was added but is not included in backup which
might cause issues when restoring the IPA service.

https://pagure.io/freeipa/issue/6748

Reviewed-By: Martin Basti <mbasti@redhat.com>

---

diff --git a/ipaserver/install/ipa_backup.py b/ipaserver/install/ipa_backup.py
index 8fc2a1c..07c50c8 100644
--- a/ipaserver/install/ipa_backup.py
+++ b/ipaserver/install/ipa_backup.py
@@ -163,6 +163,8 @@ class Backup(admintool.AdminTool):
         paths.CACERT_P12,
         paths.KRACERT_P12,
         paths.KRB5KDC_KDC_CONF,
+        paths.KDC_CERT,
+        paths.KDC_KEY,
         paths.SYSTEMD_IPA_SERVICE,
         paths.SYSTEMD_SSSD_SERVICE,
         paths.SYSTEMD_CERTMONGER_SERVICE,