freeipa.git/install/tools/ipa-server-install, branch testotp

Convert remaining installer code to LDAPEntry API.

2014-01-24T19:29:31+00:00

Use /usr/bin/python2

2014-01-03T08:46:05+00:00

Part of the effort to port FreeIPA to Arch Linux,
where Python 3 is the default.

FreeIPA hasn't been ported to Python 3, so the code must be modified to
run /usr/bin/python2

https://fedorahosted.org/freeipa/ticket/3438

Updated by pviktori@redhat.com

Fix incorrect path in error message on sysrestore failure

2013-12-20T15:04:22+00:00

On sysrestore failure, user is prompted out to remove the sysrestore
file. However, the path to the sysrestore file mentioned in the
sentence is not correct.

https://fedorahosted.org/freeipa/ticket/4080

Guard import of adtrustinstance for case without trusts

2013-11-04T15:37:24+00:00

https://fedorahosted.org/freeipa/ticket/4011

Remove mod_ssl conflict

2013-10-25T13:35:39+00:00

Since mod_nss-1.0.8-24, mod_nss and mod_ssl can co-exist on one
machine (of course, when listening to different ports).

To make sure that mod_ssl is not configured to listen on 443
(default mod_ssl configuration), add a check to the installer checking
of either mod_nss or mod_ssl was configured to listen on that port.

https://fedorahosted.org/freeipa/ticket/3974

adtrustinstance: Properly handle uninstall of AD trust instance

2013-10-14T09:11:17+00:00

The uninstall method of the AD trust instance was not called upon
at all in the ipa-server-install --uninstall phase.

This patch makes sure that AD trust instance is unconfigured when
the server is uninstalled.

The following steps are undertaken:
  * Remove /var/run/samba/krb5cc_samba
  * Remove our keys from /etc/samba/samba.keytab using ipa-rmkeytab
  * Remove /var/lib/samba/*.tdb files

Additionally, we make sure winbind service is stopped from within the
stop() method.

Part of: https://fedorahosted.org/freeipa/ticket/3479

Remove --no-serial-autoincrement

2013-10-11T07:47:59+00:00

Deprecate this option and do not offer it in installation tools.
Without this option enabled, advanced DNS features like DNSSEC
would not work.

https://fedorahosted.org/freeipa/ticket/3962

Do not allow '%' in DM password

2013-10-04T15:41:20+00:00

Having '%' in DM password causes pkispawn to crash. Do not allow
users to enter it until pkispawn is fixed.

https://bugzilla.redhat.com/show_bug.cgi?id=953488

Allow PKCS#12 files with empty password in install tools.

2013-10-04T08:27:23+00:00

https://fedorahosted.org/freeipa/ticket/3897

Read passwords from stdin when importing PKCS#12 files with pk12util.

2013-10-04T08:27:23+00:00

This works around pk12util refusing to use empty password files, which prevents
the use of PKCS#12 files with empty password.

https://fedorahosted.org/freeipa/ticket/3897