freeipa.git/install/tools/ipa-replica-prepare, branch testing

Improve IP address handling in IPA option parser

2011-06-20T00:06:21+00:00

Implements a way to pass match_local and parse_netmask parameters
to IP option checker.

Now, there is just one common option type "ip" with new optional
attributes "ip_local" and "ip_netmask" which can be used to
pass IP address validation parameters.

https://fedorahosted.org/freeipa/ticket/1333

Improve DNS zone creation

2011-06-15T07:02:09+00:00

When a new DNS zone is being created a local hostname is set as a
nameserver of the new zone. However, when the zone is created
during ipa-replica-prepare, the the current master/replica doesn't
have to be an IPA server with DNS support. This would lead to DNS
zones with incorrect NS records as they wouldn't point to a valid
name server.

Now, a list of all master servers with DNS support is retrieved
during DNS zone creation and added as NS records for a new DNS
zone.

https://fedorahosted.org/freeipa/ticket/1261

IPA installation with --no-host-dns fails

2011-06-10T06:29:14+00:00

--no-host-dns option should allow installing IPA server on a host
without a DNS resolvable name.

Update parse_ip_address and verify_ip_address functions has been
changed not to return None and print error messages in case of
an error, but rather let the Exception be handled by the calling
routine.

https://fedorahosted.org/freeipa/ticket/1246

Fix forward zone creation in ipa-replica-prepare

2011-06-08T07:14:06+00:00

When a new forward zone is created in ipa-replica-prepare
the master DNS address gets corrupted by invalid A/AAAA record.

https://fedorahosted.org/freeipa/ticket/1260

Honor netmask in DNS reverse zone setup.

2011-05-30T11:37:03+00:00

ticket 910

Parse netmasks in IP addresses passed to server install.

2011-05-30T11:36:26+00:00

ticket 1212

Fix reverse zone creation in ipa-replica-prepare

2011-05-27T16:00:47+00:00

When a new reverse zone was created in ipa-replica-prepare (this
may happen when a new replica is from different subnet), the master
DNS address was corrupted by invalid A/AAAA record. This caused
problems for example in installing replica.

https://fedorahosted.org/freeipa/ticket/1223

Fix SELinux errors caused by enabling TLS on dogtag 389-ds instance.

2011-03-15T18:09:57+00:00

This fixes 2 AVCS:

* One because we are enabling port 7390 because an SSL port must be
  defined to use TLS On 7389.
* We were symlinking to the main IPA 389-ds NSS certificate databsae.
  Instead generate a separate NSS database and certificate and have
  certmonger track it separately

I also noticed some variable inconsistency in cainstance.py. Everywhere
else we use self.fqdn and that was using self.host_name. I found it
confusing so I fixed it.

ticket 1085

Use ldapi: instead of unsecured ldap: in ipa core tools.

2011-03-03T19:04:34+00:00

The patch also corrects exception handling in some of the tools.

Fix #874

Fix two problems with ipa-replica-prepare

2011-02-14T23:15:35+00:00

1. Fix a unicode() problem creating the DNS entries
2. Fix a strange NSS error when generating the certificates against
   a dogtag server.

The NSS errors are quite strange. When generating the first certificate
nss_shutdown() fails because the database isn't initialized yet but
nss_is_initialized() returned True. The second pass fails because
something is in use.