[Freeipa-devel] [freeipa PR#4974][opened] CAless installation: set the perms on KDC cert file

[flo-renaud]

   URL: https://github.com/freeipa/freeipa/pull/4974
Author: flo-renaud
 Title: #4974: CAless installation: set the perms on KDC cert file
Action: opened

PR body:
"""
###  CAless installation: set the perms on KDC cert file

In CA less installation, the KDC certificate file does not have
the expected 644 permissions. As a consequence, WebUI login
fails.

The fix makes sure that the KDC cert file is saved with 644 perms.

Fixes: https://pagure.io/freeipa/issue/8440

###  ipatests: check KDC cert permissions in CA less install

The KDC certificate file must be stored with 644 permissions.
Add a test checking the file permissions on server + replica.

Related: https://pagure.io/freeipa/issue/8440
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4974/head:pr4974
git checkout pr4974