freeipa.git/install/tools/ipa-server-install, branch testing

Verify that the hostname is fully-qualified before accessing the service information in ipactl.

2011-06-24T05:23:14+00:00

Fail gracefully if the supplied hostname isn't fully-qualified in
ipa-server-install.

ticket 1035

Let the framework be able to override the hostname.

2011-06-23T06:11:34+00:00

The hostname is passed in during the server installation. We should use
this hostname for the resulting server as well. It was being discarded
and we always used the system hostname value.

Important changes:
- configure ipa_hostname in sssd on masters
- set PKI_HOSTNAME so the hostname is passed to dogtag installer
- set the hostname when doing ldapi binds

This also reorders some things in the dogtag installer to eliminate an
unnecessary restart. We were restarting the service twice in a row with
very little time in between and this could result in a slew of reported
errors, though the server installed ok.

ticket 1052

Fix IPA install for secure umask

2011-06-22T03:45:00+00:00

Make sure that IPA can be installed with root umask set to secure
value 077. ipa-server-install was failing in DS configuration phase
when dirsrv tried to read boot.ldif created during installation.

https://fedorahosted.org/freeipa/ticket/1282

The IP address provided to ipa-server-install must be local

2011-06-21T02:14:10+00:00

Compare the configured interfaces with the supplied IP address and
optional netmask to determine if the interface is available.

https://fedorahosted.org/freeipa/ticket/1175

Improve IP address handling in IPA option parser

2011-06-20T00:06:21+00:00

Implements a way to pass match_local and parse_netmask parameters
to IP option checker.

Now, there is just one common option type "ip" with new optional
attributes "ip_local" and "ip_netmask" which can be used to
pass IP address validation parameters.

https://fedorahosted.org/freeipa/ticket/1333

Do better detection on status of CA DS instance when installing.

2011-06-13T04:15:14+00:00

The conditional used to determine if thd CA 389-ds instance was already
configured was rather poor so it was possible to pass command-line
arguments in to confuse it. This would cause it to not be installed at
all causing the dogtag installation to fail in a strange way.

https://fedorahosted.org/freeipa/ticket/1244

IPA installation with --no-host-dns fails

2011-06-10T06:29:14+00:00

--no-host-dns option should allow installing IPA server on a host
without a DNS resolvable name.

Update parse_ip_address and verify_ip_address functions has been
changed not to return None and print error messages in case of
an error, but rather let the Exception be handled by the calling
routine.

https://fedorahosted.org/freeipa/ticket/1246

Fix external CA installation

2011-06-09T15:41:43+00:00

When re-creating the CADS instance it needs to be more fully-populated
so we have enough information to create an SSL certificate and move
the principal to a real entry.

https://fedorahosted.org/freeipa/ticket/1245

Honor netmask in DNS reverse zone setup.

2011-05-30T11:37:03+00:00

ticket 910

Parse netmasks in IP addresses passed to server install.

2011-05-30T11:36:26+00:00

ticket 1212