[freeipa PR#852][opened] pkinit manage: introduce ipa-pkinit-manage

[HonzaCholasta]

   URL: https://github.com/freeipa/freeipa/pull/852
Author: HonzaCholasta
 Title: #852: pkinit manage: introduce ipa-pkinit-manage
Action: opened

PR body:
"""
**server certinstall: update KDC master entry**

After the KDC certificate is installed, add the PKINIT enabled flag to the
KDC master entry.

**pkinit manage: introduce ipa-pkinit-manage**

Add the ipa-pkinit-manage tool to allow enabling / disabling PKINIT after
the initial server install.

**server upgrade: do not enable PKINIT by default**

Enabling PKINIT often fails during server upgrade when requesting the KDC
certificate.

Now that PKINIT can be enabled post-install using ipa-pkinit-manage, avoid
the upgrade failure by not enabling PKINIT by default.

https://pagure.io/freeipa/issue/7000
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/852/head:pr852
git checkout pr852

[freeipa PR#852][+ack] pkinit manage: introduce ipa-pkinit-manage

[martbab]

  URL: https://github.com/freeipa/freeipa/pull/852
Title: #852: pkinit manage: introduce ipa-pkinit-manage

Label: +ack

[freeipa PR#852][+pushed] pkinit manage: introduce ipa-pkinit-manage

[martbab]

  URL: https://github.com/freeipa/freeipa/pull/852
Title: #852: pkinit manage: introduce ipa-pkinit-manage

Label: +pushed

[freeipa PR#852][comment] pkinit manage: introduce ipa-pkinit-manage

[martbab]

  URL: https://github.com/freeipa/freeipa/pull/852
Title: #852: pkinit manage: introduce ipa-pkinit-manage

martbab commented:
"""
ipa-4-5:

* 1b62e5aac9d9668604e82879c020bff310fa549f server certinstall: update KDC master entry
* c072135340bc8e75f621e2b9163b1347b9eb528f pkinit manage: introduce ipa-pkinit-manage
* cb9353d6e0fbc0912dd20bf29e3835a7740d1af6 server upgrade: do not enable PKINIT by
default


master:

* e131905f3e0fe9179c5f4a09da4e7a204012603a server certinstall: update KDC master entry
* 92276c1e8809f3ff6b59bd6124869f816627bac7 pkinit manage: introduce ipa-pkinit-manage
* 0772ef20b39b11950fddc913a350534988294c89 server upgrade: do not enable PKINIT by
default


"""

See the full comment at
https://github.com/freeipa/freeipa/pull/852#issuecomment-306458799

[freeipa PR#852][closed] pkinit manage: introduce ipa-pkinit-manage

[martbab]

   URL: https://github.com/freeipa/freeipa/pull/852
Author: HonzaCholasta
 Title: #852: pkinit manage: introduce ipa-pkinit-manage
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/852/head:pr852
git checkout pr852