freeipa.git/ipa-client/ipaclient, branch my-master

Before kinit, try to sync time with the NTP servers of the domain we are joining

2011-10-06T09:16:41+00:00

When running ipa-client-install on a system whose clock is not in sync
with the master, kinit fails and enrollment is aborted. Manual checking
of current time at the master and adjusting on the client-to-be is then
needed.

The patch tries to fetch SRV records for NTP servers of the domain we aim
to join and runs ntpdate to get time synchronized. If no SRV records are
found, sync with IPA server itself.  If that fails, warn that time might
be not in sync with KDC.

https://fedorahosted.org/freeipa/ticket/1773

Setup and restore ntp configuration on the client side properly

2011-10-05T10:52:40+00:00

When setting up the client-side NTP configuration, make sure that /etc/ntp/step-tickers
point to IPA NTP server as well.
When restoring the client during ipa-client-install --uninstall, make sure NTP configuration
is fully restored and NTP service is disabled if it was disabled before the installation.

https://fedorahosted.org/freeipa/ticket/1770

Add a function for formatting network locations of the form host:port for use in URLs.

2011-10-05T08:58:25+00:00

If the host part is a literal IPv6 address, it must be enclosed in square
brackets (RFC 2732).

ticket 1869

ipa-client assumes a single namingcontext

2011-09-30T14:53:59+00:00

When LDAP server contains more that one suffixes, the ipa client
installation does not detect it as IPA server and fails to install.
Fix ipa server discovery so that it correctly searches all naming
contexts for the IPA one.

https://fedorahosted.org/freeipa/ticket/1868

ipa-client-install: Fix joining when LDAP access is restricted

2011-09-30T14:42:30+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/1881

Don't remove /tmp when removing temp cert dir

2011-09-23T02:02:54+00:00

If /tmp happens to be empty os.removedirs() happily removes it...

https://fedorahosted.org/freeipa/ticket/1843

Convert client-side tools to platform-independent access to system services

2011-09-13T09:15:31+00:00

https://fedorahosted.org/freeipa/ticket/1605

Make sure that hostname specified by user is not an IP address.

2011-07-25T05:47:52+00:00

ticket 1375

Make ipa-client-install error messages more understandable and relevant.

2011-07-20T00:41:54+00:00

* Check remote LDAP server to see if it is a V2 server
* Replace numeric return values with alphanumeric constants
* Display the error message from the ipa-enrollment extended op
* Remove generic join failed error message when XML-RPC fails
* Don't display Certificate subject base when enrollment fails
* Return proper error message when LDAP bind fails

https://fedorahosted.org/freeipa/ticket/1417

KDC autodiscovery may fail when domain is not realm

2011-05-17T06:56:22+00:00

When ipa-client-install autodiscovers IPA server values it
doesn't fill the fixed KDC address to Kerberos configuration
file. However, when realm != domain or the autodiscovered values
are overridden, installation may fail because it cannot find the
KDC.

This patch adds a failover to use static KDC address in case when
such an issue occurs.

https://fedorahosted.org/freeipa/ticket/1100