freeipa.git/install/tools/man, branch systemd-master

Add explicit instructions to ipa-replica-manage for winsync replication

2011-10-14T07:05:06+00:00

https://fedorahosted.org/freeipa/ticket/1946

Hostname used by IPA must be a system hostname

2011-10-13T04:54:41+00:00

Make sure that the hostname IPA uses is a system hostname. If user
passes a non-system hostname, update the network settings and
system hostname in the same way that ipa-client-install does.

This step should prevent various services failures which may not
be ready to talk to IPA with non-system hostname.

https://fedorahosted.org/freeipa/ticket/1931

Fix DNS permissions and membership in privileges

2011-10-10T03:44:22+00:00

This resolves two issues:

1. The DNS acis lacked a prefix so weren't tied to permissions
2. The permissions were added before the privileges so the member
   values weren't calculated properly

For updates we need to add in the members and recalculate memberof via
a DS task.

https://fedorahosted.org/freeipa/ticket/1898

- note that PKCS#12 files also contain private keys, and that the "pkinit" options refer to the KDC's credentials

2011-10-05T02:59:56+00:00

Be more clear about selfsign option

2011-10-04T09:00:42+00:00

Installing IPA server --selfsign option is currently a one-way ticket
to server with limited certificate capabilities. Make sure that user
really want to install it by implementing the following steps:

- moving the option to the bottom of certificate options section
- adding a warning to ipa-server-install man page
- adding a warning to ipa-server-install help
- adding a warning to ipa-server-install configuration summary
  when one runs ipa-server-install

https://fedorahosted.org/freeipa/ticket/1908

25 Create Tool for Enabling/Disabling Managed Entry Plugins

2011-09-21T07:22:13+00:00

Remove legacy ipa-host-net-manage
Add ipa-managed-entries tool
Add man page for ipa-managed-entries tool

https://fedorahosted.org/freeipa/ticket/1181

Add ipa-adtrust-install utility

2011-09-14T22:45:13+00:00

https://fedorahosted.org/freeipa/ticket/1619

Update ipa-ldap-updater man page saying it is not an end-user utility

2011-09-14T12:39:55+00:00

https://fedorahosted.org/freeipa/ticket/1792

Improve man pages structure

2011-09-07T10:55:12+00:00

There are too many options in ipa-*-install scripts which makes it
difficult to read. This patch adds subsections to install script
online help and man pages to improve readability. No option has
been changed.

To further improve man pages:

1) All man pages were changed to have the same header and top-center
   title to provide united look.

2) Few typos in man pages have been fixed

https://fedorahosted.org/freeipa/ticket/1687

Let Bind track data changes

2011-08-31T14:46:12+00:00

Integrate new bind-dyndb-ldap features to automatically track
DNS data changes:

 1) Zone refresh
    Set --zone-refresh in installation to define number of seconds
    between bind-dyndb-ldap polls for new DNS zones. User now
    doesn't have to restart name server when a new zone is added.

 2) New zone notifications
    Use LDAP persistent search mechanism to immediately get
    notification when any new DNS zone is added. Use --zone-notif
    install option to enable. This option is mutually exclusive
    with Zone refresh.

To enable this functionality in existing IPA installations,
update a list of arguments for bind-dyndb-ldap in /etc/named.conf.
An example when zone refresh is disabled and DNS data change
notifications (argument psearch of bind-dyndb-ldap) are enabled:

dynamic-db "ipa" {
...
        arg "zone_refresh 0";
        arg "psearch yes";
};

This patch requires bind-dyndb-ldap-1.0.0-0.1.b1 or later.

https://fedorahosted.org/freeipa/ticket/826