We need to add code to check if a server still has a split DS setup for the CA. In which case we must mark that the maximum domain level support is 0. This will force people to migrate CA setups with split instances to a unified DS setup, then they will be allowed to increase level to 1.
Other wise we can't use really the topology plugin to manage the CA agreements and GSSAPI to setup the agreements.
Split-CA support code should be removed. Only migration path should remain.
master:
Metadata Update from @simo: - Issue assigned to jcholast - Issue set to the milestone: FreeIPA 4.3
Login to comment on this ticket.