[Freeipa-devel] [freeipa PR#4478][opened] [Backport][ipa-4-8] ipa-backup: Make sure all roles are installed on the current master.

[fcami]

   URL: https://github.com/freeipa/freeipa/pull/4478
Author: fcami
 Title: #4478: [Backport][ipa-4-8] ipa-backup: Make sure all roles are installed on the
current master.
Action: opened

PR body:
"""
MANUAL CHERRY-PICK of https://github.com/freeipa/freeipa/pull/4304

ipa-backup does not check whether the IPA master it is running on has
all used roles installed. This can lead into situations where backups
are done on a CAless or KRAless host when these roles are used in the
IPA cluster. These backups cannot be used to restore a complete cluster.

With this change, ipa-backup checks what roles are installed on the
current host and compares the resulting list to the list of used roles
in the cluster. A --disable-role-check knob is also provided to restore
the previous behavior.

Fixes: https://pagure.io/freeipa/issue/8217
Signed-off-by: François Cami fcami(a)redhat.com
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4478/head:pr4478
git checkout pr4478