freeipa.git/install/tools/ipa-replica-manage, branch testing

Running ipa-replica-manage as non-root cause errors

2011-05-13T11:27:04+00:00

Logging errors are printed out when ipa-replica-manage is run
as a non-root user. Log has been disabled in such case to
prevent such messages.

https://fedorahosted.org/freeipa/ticket/1046

Store list of non-master replicas in DIT and provide way to list them

2011-03-02T14:46:46+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/1007

Use wrapper for sasl gssapi binds so it behaves like other binds

2011-03-01T16:02:55+00:00

By calling directly sasl_interactive_bind_s() we were not calling __lateinit()
This in turn resulted in some variables like dbdir not to be set on the
IPAadmin object.
Keep all bind types in the same place so the same common sbind steps can be
performed in each case.

Related to: https://fedorahosted.org/freeipa/ticket/1022

Force sync in both direction before changing replication agreements

2011-02-01T18:49:41+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/887

Always add DNS records when installing a replica

2011-01-25T19:01:35+00:00

Even if the replica is not running a DNS server other replicas might.
So if the DNS container is present, then try to add DNS records.

Fixes: https://fedorahosted.org/freeipa/ticket/824

Allow using Kerberos credentials with the 'connect' command

2011-01-14T19:06:56+00:00

Now that we can setup GSSAPI authenticated replication we are not
tied to use the Directory Manager password to set up replication
agreements.

Fixes: https://fedorahosted.org/freeipa/ticket/644

Use GSSAPI for replication

2011-01-14T19:06:56+00:00

Uses a temporary simple replication agreement over SSL to init the tree.
Then once all principals have been created switches replication to GSSAPI.

Fixes: https://fedorahosted.org/freeipa/ticket/690

Remove port argument for ipa-replica-manage

2011-01-14T19:06:56+00:00

We can't use arbitrary ports anyway. And neither AD has any way to use non
stadard ports. So remove this unnecessary option.

Refactor some replication code

2011-01-14T19:06:56+00:00

This simplifies or rationalizes some code in order to make it easier to change
it to fix bug #690

Temporary fix for 'connect' operations

2010-12-21T22:54:42+00:00

Currently the code depends on using a password to create replication
agreements. so this patch forces the request of the dirmgr password until we
can fix the internal issues that prevent using the amdin user with SASL/GSSAPI
to create replication agreements.