[Freeipa-devel] [PATCH] updated replication

Rob Crittenden rcritten at redhat.com
Fri Dec 21 03:53:27 UTC 2007


Karl MacMillan wrote:
> Convert replication to use the new cert infrastructure and
> correctly issue certs from the same authority. Also remove
> support for read-only replicas since that work will not
> be finished and tested for 1.0.
> 
> Karl


You set the serial number to 2000 in dsinstance.py 
DsInstance(service.Service).

That is the same starting point for the web server.

I'd recommend either 2100 or store a file along with the CA that 
contains the last used serial number.

Otherwise it seems to be ok.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20071220/f2caf9b2/attachment.bin>


More information about the Freeipa-devel mailing list