freeipa.git/ipa-client/ipa-install/ipa-client-install, branch master

Fix client krb5 domain mapping and DNS

2011-10-21T12:53:12+00:00

Add Kerberos mapping for clients outside of server domain. Otherwise
certmonger had problems issuing the certificate. Also make sure that
client DNS records on the server are set before certmonger is started
and certificate is requested.

Based on Lars Sjostrom patch.

https://fedorahosted.org/freeipa/ticket/2006

If our domain is already configured in sssd.conf start with a new config.

2011-10-14T01:24:07+00:00

https://fedorahosted.org/freeipa/ticket/1989

Update all LDAP configuration files that we can.

2011-10-14T00:45:06+00:00

LDAP can be configured in any number of places, we need to update everything
we find.

https://fedorahosted.org/freeipa/ticket/1986

Hostname used by IPA must be a system hostname

2011-10-13T04:54:41+00:00

Make sure that the hostname IPA uses is a system hostname. If user
passes a non-system hostname, update the network settings and
system hostname in the same way that ipa-client-install does.

This step should prevent various services failures which may not
be ready to talk to IPA with non-system hostname.

https://fedorahosted.org/freeipa/ticket/1931

Refactor authconfig use in ipa-client-install

2011-10-12T23:20:09+00:00

When certain features are being configured via authconfig, we need to
remember what was configured and what was the state before it so that
during uninstall we restore proper state of the services.

Mostly it affects sssd configuration with multiple domains but also
pre-existing LDAP and krb5 configurations.

This should fix following tickets:
https://fedorahosted.org/freeipa/ticket/1750
https://fedorahosted.org/freeipa/ticket/1769

ipa-client-install hangs if the discovered server is unresponsive

2011-10-12T04:50:22+00:00

Add a timeout to the wget call to cover a case when autodiscovered
server does not response to our attempt to download ca.crt. Let
user specify a different IPA server in that case.

https://fedorahosted.org/freeipa/ticket/1960

Remove more redundant configuration values from krb5.conf.

2011-10-12T02:00:50+00:00

ticket 1358

Make ipa-join work against an LDAP server that disallows anon binds

2011-10-11T22:26:29+00:00

We determine the realm in the client installer so we can deduce
the base dn, pass that into ipa-join so we don't have to hunt for
it.

Re-order the bind so when doing an OTP enrollment so we can use the host
entry to authenticate before we retrieve the subject base, then initiate
the enrollment.

If ipa-join is called without a basedn it will still attempt to
determine it, but it will fail if anonymous binds are not allowed.

https://fedorahosted.org/freeipa/ticket/1935

Increase number of 'getent passwd attempts' to 10

2011-10-11T08:36:45+00:00

During ipa-client-install SSSD is not always started up properly for some
reason, things like "getent passwd admin" do not work.  This is particulary
true for large setups where admin is included in a large set of groups.

https://fedorahosted.org/freeipa/ticket/1774

Make sure ipa-client-install returns correct error code

2011-10-07T13:23:17+00:00

https://fedorahosted.org/freeipa/ticket/1937