freeipa.git/install/tools/ipa-replica-install, branch platform-master

Convert installation tools to platform-independent access to system services

2011-09-13T09:15:50+00:00

http://fedorahosted.org/freeipa/ticket/1605

Improve man pages structure

2011-09-07T10:55:12+00:00

There are too many options in ipa-*-install scripts which makes it
difficult to read. This patch adds subsections to install script
online help and man pages to improve readability. No option has
been changed.

To further improve man pages:

1) All man pages were changed to have the same header and top-center
   title to provide united look.

2) Few typos in man pages have been fixed

https://fedorahosted.org/freeipa/ticket/1687

install: We do not need a kpasswd keytab anymore

2011-08-31T20:27:20+00:00

We now use MIT's kadmin instead of our old ipa_kpasswd daemon.
kadmind knows how to fetch the keys directly from the database and doesn't need
a keytab on the filesystem.

install: We do not need a ldap password anymore

2011-08-31T20:27:20+00:00

Our new ipa-kdb driver access ldap via ldapi:// and EXTERNAL auth and doesn't
need a bind password anymore.

Fixes: https://fedorahosted.org/freeipa/ticket/1743

Add option to install without the automatic redirect to the Web UI.

2011-08-19T03:24:29+00:00

ticket 1570

Re-arrange CA configuration code to reduce the number of restarts.

2011-08-04T00:38:07+00:00

Ade Lee from the dogtag team looked at the configuration code and
determined that a number of restarts were not needed and recommended
re-arranging other code to reduce the number of restarts to one.

https://fedorahosted.org/freeipa/ticket/1555

Clean up of IP address checks in install scripts.

2011-07-19T10:30:47+00:00

Fixes ipa-dns-install incorrect warning.

ticket 1486

Fix creation of reverse DNS zones.

2011-07-15T14:42:16+00:00

Create reverse DNS zone for /24 IPv4 subnet and /64 IPv6 subnet by
default instead of using the netmask from the --ip-address option.

Custom reverse DNS zone can be specified using new --reverse-zone
option, which replaces the old --ip-address netmask way of creating
reverse zones.

The reverse DNS zone name is printed to the user during the install.

ticket 1398

Make dogtag an optional (and default un-) installed component in a replica.

2011-06-23T23:04:33+00:00

A dogtag replica file is created as usual. When the replica is installed
dogtag is optional and not installed by default. Adding the --setup-ca
option will configure it when the replica is installed.

A new tool ipa-ca-install will configure dogtag if it wasn't configured
when the replica was initially installed.

This moves a fair bit of code out of ipa-replica-install into
installutils and cainstance to avoid duplication.

https://fedorahosted.org/freeipa/ticket/1251

Let the framework be able to override the hostname.

2011-06-23T06:11:34+00:00

The hostname is passed in during the server installation. We should use
this hostname for the resulting server as well. It was being discarded
and we always used the system hostname value.

Important changes:
- configure ipa_hostname in sssd on masters
- set PKI_HOSTNAME so the hostname is passed to dogtag installer
- set the hostname when doing ldapi binds

This also reorders some things in the dogtag installer to eliminate an
unnecessary restart. We were restarting the service twice in a row with
very little time in between and this could result in a slew of reported
errors, though the server installed ok.

ticket 1052