freeipa.git/install, branch views

WIP: support idviews in compat tree

2014-09-24T12:20:43+00:00

idviews: Add ipaOriginalUid

2014-09-24T12:06:59+00:00

idviews: Add Default Trust View as part of adtrustinstall

2014-09-22T11:49:32+00:00

idviews: Update the referential plugin config to watch for ipaAssignedIDView

2014-09-22T10:00:13+00:00

We need the referential plugin config to watch for changes in the ID view
objects, since hosts refer to them in ipaAssignedIDView attribute.

Part of: https://fedorahosted.org/freeipa/ticket/3979

idviews: Add ipaOriginalUid

2014-09-22T10:00:06+00:00

idviews: Create container for ID views under cn=accounts

2014-09-17T12:41:50+00:00

Part of: https://fedorahosted.org/freeipa/ticket/3979

idviews: Add necessary schema for the ID views

2014-09-17T12:41:50+00:00

Re-enable uninstall feature for ipa-kra-install

2014-09-15T08:58:29+00:00

The underlying Dogtag issue (Dogtag ticket 1113) has been fixed.
We can therefore re-enable the uninstall option for ipa-kra-install.
Also, fixes an incorrect path in the ipa-pki-proxy.conf, and adds
a debug statement to provide status to the user when an uninstall
is done.  Also, re-added the no_host_dns option which is used when
unpacking a replica file.

Part of the work for: https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: Petr Viktorin

Update referential integrity config for DS 1.3.3

2014-09-12T15:42:08+00:00

Hisorically DS provided defaults for the referential
integrity plugin in nsslapd-pluginArg*:

    nsslapd-pluginarg3: member
    nsslapd-pluginarg4: uniquemember
    nsslapd-pluginarg5: owner
    nsslapd-pluginarg6: seeAlso

In 389-ds 1.3.3, the multi-valued referint-membership-attr
is used instead.

The old way still works, but it requires that the values
are numbered consecutively, so IPA's defaults that started
with 7 were not taken into account.

Convert IPA defaults to use referint-membership-attr.

https://fedorahosted.org/freeipa/ticket/4537

Reviewed-By: Martin Kosek

Update SSL ciphers configured in 389-ds-base

2014-09-12T14:42:09+00:00

use configuration parameters to enable ciphers provided by NSS
and not considered weak.
This requires 389-ds version 1.3.3.2 or later

https://fedorahosted.org/freeipa/ticket/4395

Reviewed-By: Nathaniel McCallum