freeipa.git/install/tools/man, branch adwork

Add logging to ipa-upgradeconfig

2012-06-22T00:53:36+00:00

Log to the same file as ipa-ldap-updater --upgrade,
/var/log/ipaupgrade.log

Will output basic stauts information if executed from the command-line.

https://fedorahosted.org/freeipa/ticket/2696

Enable persistent search by default

2012-06-11T01:23:15+00:00

From IPA version 3.0, the persistent search is a preferred mechanism
to for DNS zone list management. It will be also a requirement for
several bind-dyndb-ldap features, like SOA serial automatic updates
or DNSSEC.

Make this mechanism default in ipa-server-install and ipa-dns-istall.

https://fedorahosted.org/freeipa/ticket/2524

During replication installation see if an agreement already exists.

2012-05-17T15:12:45+00:00

We were inferring that an agreement existed if the host was present
as an IPA host. This was not enough if the replica installation failed
early enough.

https://fedorahosted.org/freeipa/ticket/2030

Fix typos in ipa-replica-manage man page

2012-03-02T13:38:45+00:00

Based on contribution by Brian Harrington.

https://fedorahosted.org/freeipa/ticket/2428

Warn that deleting replica is irreversible, try to detect reconnection.

2012-02-29T15:20:49+00:00

Using ipa-replica-manage del  is irreversible. You can't
turn around and do a connect to it, all heck will break loose. This is
because we clean up all references to the replica when we delete so if
we connect to it again we'll end up deleting all of its principals.

When a connection is deleted then the agreement is removed on both sides.
What isn't removed is the nsDS5ReplicaBindDN so we can use that to
determine if we previously had a connection.

https://fedorahosted.org/freeipa/ticket/2126

Ease zonemgr restrictions

2012-02-20T14:34:45+00:00

Admin e-mail validator currently requires an email to be in
a second-level domain (hostmaster@example.com). This is too
restrictive. Top level domain e-mails (hostmaster@testrelm)
should also be allowed.

This patch also fixes default zonemgr value in help texts and man
pages.

https://fedorahosted.org/freeipa/ticket/2272

Configure ssh and sshd during ipa-client-install.

2012-02-14T03:21:47+00:00

For ssh, VerifyHostKeyDNS option is set to 'yes' if --ssh-trust-dns
ipa-client-install option is used.

For sshd, KerberosAuthentication, GSSAPIAuthentication and UsePAM
options are enabled (this can be disabled using --no-sshd
ipa-client-install option).

ticket 1634

Update host SSH public keys on the server during client install.

2012-02-14T03:21:43+00:00

This is done by calling host-mod to update the keys on IPA server and nsupdate
to update DNS SSHFP records. DNS update can be disabled using --no-dns-sshfp
ipa-client-install option.

https://fedorahosted.org/freeipa/ticket/1634

Fix/add options in ipa-managed-entries man page

2012-02-07T08:56:20+00:00

* The --entry option was wrongly listed as --entries; fix that.
  https://fedorahosted.org/freeipa/ticket/2277

* Add the --help option

Fix 'no-reverse' option description

2012-02-02T22:50:55+00:00

The description of 'no-reverse' option was fixed in both code and
manpages of ipa-replica-install and ipa-dns-install.

https://fedorahosted.org/freeipa/ticket/2161