freeipa

Clone
Source Code
GIT

#6538 KRA: add checks to prevent removing the last instance of KRA in topology
Closed: fixed 7 years ago Opened 7 years ago by mbasti.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1397952

Please note that this Bug is private and may not be accessible as it contains confidential Red Hat customer information.

Please add checks to IPA:

  • to prevent removal of the last KRA server in topology
  • inform users that only one KRA is installed in topology and KRA replica should be created for backup (the same way as we do for CA + webUI)

Metadata Update from @mbasti:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog
7 years ago

Metadata Update from @pvoborni:
- Issue close_status updated to: None
- Issue set to the milestone: FreeIPA 4.5 (was: FreeIPA 4.5 backlog)
7 years ago

Metadata Update from @pvoborni:
- Issue assigned to stlaz (was: someone)
7 years ago

Please note that ipa-kra-install allows to uninstall KRA too. Make sure that the check is added there as well or even better, remove ability to uninstall KRA

master:

  • 670f8fb Add check to prevent removal of last KRA
  • 1e8db4b Add message about last KRA to WebUI Topology view

master:

  • 5d3a0e6 Don't allow standalone KRA uninstalls

Metadata Update from @mbasti:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
7 years ago

Login to comment on this ticket.

Metadata
None
None
None
important
None
None
None
None
defect
None
None
IPA
None
None
None
None
None
None
https://bugzilla.redhat.com/show_bug.cgi?id=1397952
None
None
None
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.