freeipa.git/install/tools/ipa-server-install, branch network-fixes

Ask for reverse DNS zone information in attended install right after asking for DNS forwarders, so that DNS configuration is done in one place.

2011-08-09T11:12:19+00:00

ticket 1522

Re-arrange CA configuration code to reduce the number of restarts.

2011-08-04T00:38:07+00:00

Ade Lee from the dogtag team looked at the configuration code and
determined that a number of restarts were not needed and recommended
re-arranging other code to reduce the number of restarts to one.

https://fedorahosted.org/freeipa/ticket/1555

Clean up existing DN object usage

2011-07-29T11:13:55+00:00

Fix external CA install.

2011-07-27T02:30:21+00:00

ticket 1523

Clean up of IP address checks in install scripts.

2011-07-19T10:30:47+00:00

Fixes ipa-dns-install incorrect warning.

ticket 1486

Use information from the certificate subject when setting the NSS nickname.

2011-07-18T02:14:24+00:00

There were a few places in the code where certs were loaded from a
PKCS#7 file or a chain in a PEM file. The certificates got very
generic nicknames.

We can instead pull the subject from the certificate and use that as
the nickname.

https://fedorahosted.org/freeipa/ticket/1141

Validate that the certificate subject base is in valid DN format.

2011-07-18T02:10:03+00:00

https://fedorahosted.org/freeipa/ticket/1176

Fix creation of reverse DNS zones.

2011-07-15T14:42:16+00:00

Create reverse DNS zone for /24 IPv4 subnet and /64 IPv6 subnet by
default instead of using the netmask from the --ip-address option.

Custom reverse DNS zone can be specified using new --reverse-zone
option, which replaces the old --ip-address netmask way of creating
reverse zones.

The reverse DNS zone name is printed to the user during the install.

ticket 1398

Verify that the hostname is fully-qualified before accessing the service information in ipactl.

2011-06-24T05:23:14+00:00

Fail gracefully if the supplied hostname isn't fully-qualified in
ipa-server-install.

ticket 1035

Let the framework be able to override the hostname.

2011-06-23T06:11:34+00:00

The hostname is passed in during the server installation. We should use
this hostname for the resulting server as well. It was being discarded
and we always used the system hostname value.

Important changes:
- configure ipa_hostname in sssd on masters
- set PKI_HOSTNAME so the hostname is passed to dogtag installer
- set the hostname when doing ldapi binds

This also reorders some things in the dogtag installer to eliminate an
unnecessary restart. We were restarting the service twice in a row with
very little time in between and this could result in a slew of reported
errors, though the server installed ok.

ticket 1052