URL: https://github.com/freeipa/freeipa/pull/4331 Author: flo-renaud Title: #4331: Fixes for ipa-adtrust-install --add-agents Action: opened
PR body: """ ### ipa-adtrust-install: remote command fails if ipa-server-trust-ad pkg missing
When the command ipa-adtrust-install --add-agents is run, it executes remotely the command trust_enable_agent. This command does not require the package ipa-server-trust-ad to be installed on the remote node, but fails if it's not the case because dbus is not imported. Need to move the "import dbus" outside of the try/except related to dcerpc import.
Related: https://pagure.io/freeipa/issue/7600
### selinux policy: add the right context for org.freeipa.server.trust-enable-agent
This commit sets the system_u:object_r:ipa_helper_exec_t:s0 context to the oddjob script org.freeipa.server.trust-enable-agent. Without this context, oddjob cannot launch the command /usr/libexec/ipa/oddjob/org.freeipa.server.trust-enable-agent when ipa-adtrust-install --add-agents is run with SElinux enforcing.
Related: https://pagure.io/freeipa/issue/7600 """
To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/4331/head:pr4331 git checkout pr4331