freeipa.git/install/share, branch platform-master

Let Bind track data changes

2011-08-31T14:46:12+00:00

Integrate new bind-dyndb-ldap features to automatically track
DNS data changes:

 1) Zone refresh
    Set --zone-refresh in installation to define number of seconds
    between bind-dyndb-ldap polls for new DNS zones. User now
    doesn't have to restart name server when a new zone is added.

 2) New zone notifications
    Use LDAP persistent search mechanism to immediately get
    notification when any new DNS zone is added. Use --zone-notif
    install option to enable. This option is mutually exclusive
    with Zone refresh.

To enable this functionality in existing IPA installations,
update a list of arguments for bind-dyndb-ldap in /etc/named.conf.
An example when zone refresh is disabled and DNS data change
notifications (argument psearch of bind-dyndb-ldap) are enabled:

dynamic-db "ipa" {
...
        arg "zone_refresh 0";
        arg "psearch yes";
};

This patch requires bind-dyndb-ldap-1.0.0-0.1.b1 or later.

https://fedorahosted.org/freeipa/ticket/826

34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin

2011-08-31T07:49:43+00:00

Added new container in etc to hold the automembership configs.
Modified constants to point to the new container
Modified dsinstance to create the container
Created automember.py to add the new commands
Added xmlrpc test to verify functionality
Added minor fix to user.py for constant behavior between memberof
and automember

https://fedorahosted.org/freeipa/ticket/1272

v3-schema: Add new ipaExternalGroup objectclass

2011-08-26T12:26:13+00:00

This construct allows to have a group of ipaExternalMember attributes, that can
be nested in a normal ipa Group ('memberOf' is allowed).

It cannot contain normal ipa users/groups and cannot be nested with another
group of the same type ('member' is not allowed).

schema: Split ipadns definitions from basev2 ones

2011-08-26T12:26:13+00:00

install: Use proper case for boolean values

2011-08-26T12:24:50+00:00

install: Remove uid=kdc user

2011-08-26T12:24:50+00:00

The ipadb DAL driver gets access to the ldap server as Directory Manager now so
this user is not needed anymore.

ipa-kdb: Change install to use the new ipa-kdb kdc backend

2011-08-26T12:24:50+00:00

Use ipakdb instead of kldap and change install procedures accordingly
Note that we do not need to store the master key in a keytab as we can
read it off of ldap in our driver.

Change the way has_keytab is determined, also check for password.

2011-08-24T12:12:01+00:00

We need an indicator to see if a keytab has been set on host and
service entries. We also need a way to know if a one-time password is
set on a host.

This adds an ACI that grants search on userPassword and
krbPrincipalKey so we can do an existence search on them. This way
we can tell if the attribute is set and create a fake attribute
accordingly.

When a userPassword is set on a host a keytab is generated against
that password so we always set has_keytab to False if a password
exists. This is fine because when keytab gets generated for the
host the password is removed (hence one-time).

This adds has_keytab/has_password to the user, host and service plugins.

ticket https://fedorahosted.org/freeipa/ticket/1538

Fixed browser configuration pages

2011-08-17T17:28:25+00:00

The browser configuration pages have been modified to improve the
content and appearance.

Ticket #1624

Redirection after changing browser configuration

2011-08-08T17:49:26+00:00

https://fedorahosted.org/freeipa/ticket/1502

Added redirection link.
CSS styling of configuration page.
Some CSS cleaning.