URL:
https://github.com/freeipa/freeipa/pull/852
Author: HonzaCholasta
Title: #852: pkinit manage: introduce ipa-pkinit-manage
Action: opened
PR body:
"""
**server certinstall: update KDC master entry**
After the KDC certificate is installed, add the PKINIT enabled flag to the
KDC master entry.
**pkinit manage: introduce ipa-pkinit-manage**
Add the ipa-pkinit-manage tool to allow enabling / disabling PKINIT after
the initial server install.
**server upgrade: do not enable PKINIT by default**
Enabling PKINIT often fails during server upgrade when requesting the KDC
certificate.
Now that PKINIT can be enabled post-install using ipa-pkinit-manage, avoid
the upgrade failure by not enabling PKINIT by default.
https://pagure.io/freeipa/issue/7000
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/852/head:pr852
git checkout pr852