freeipa.git/install/tools/ipa-replica-prepare, branch systemd-master

Check hostname resolution sanity

2011-10-13T04:54:37+00:00

Always check (even with --setup-dns or --no-host-dns) that if the
host name or ip address resolves, it resolves to sane value. Otherwise
report an error. Misconfigured /etc/hosts causing these errors could
harm the installation later.

https://fedorahosted.org/freeipa/ticket/1923

Improve ipa-replica-prepare DNS check

2011-10-06T09:27:50+00:00

Currently, verify_fqdn() function raises RuntimeError for every
problem with the hostname. This makes it difficult for tools
like ipa-replica-prepare to behave differently for a subset of
raised errors (for example to be able to create a DNS record for
new replica when verify_fqdn() reports a lookup error).

Implement own exceptions for verify_fqdn() that they can be safely
used to distinguish the error type.

https://fedorahosted.org/freeipa/ticket/1899

replica-prepare: anonymous binds may be disallowed

2011-10-06T06:41:27+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/1900

Install tools crash when password prompt is interrupted

2011-10-06T06:28:15+00:00

When getpass.getpass() function is interrupted via CTRL+D, EOFError
exception is thrown. Most of the install tools are not prepared for
this event and crash with this exception. Make sure that it is
handled properly and nice error message is printed.

https://fedorahosted.org/freeipa/ticket/1916

Detect CA installation type in ipa-replica-prepare and ipa-ca-install.

2011-09-27T15:50:46+00:00

ipa-ca-install can only add a dogtag CA to an IPA install.

ipa-replica-prepare can only be run on the initial master with a
selfsign backend.

https://fedorahosted.org/freeipa/ticket/1756
https://fedorahosted.org/freeipa/ticket/1757

Fix ipa-replica-prepare always warning the user about not using the system hostname.

2011-09-26T15:11:09+00:00

ticket 1717

Remove checks for ds-replication plugin

2011-09-22T11:14:23+00:00

The replication plugin is no longer shipped as a separate package.
Remove the code checking its existence.

https://fedorahosted.org/freeipa/ticket/1815

install: We do not need a kpasswd keytab anymore

2011-08-31T20:27:20+00:00

We now use MIT's kadmin instead of our old ipa_kpasswd daemon.
kadmind knows how to fetch the keys directly from the database and doesn't need
a keytab on the filesystem.

install: We do not need a ldap password anymore

2011-08-31T20:27:20+00:00

Our new ipa-kdb driver access ldap via ldapi:// and EXTERNAL auth and doesn't
need a bind password anymore.

Fixes: https://fedorahosted.org/freeipa/ticket/1743

Fix typo in ipa-replica-prepare

2011-07-18T12:54:41+00:00

https://fedorahosted.org/freeipa/ticket/1327
https://fedorahosted.org/freeipa/ticket/1347