freeipa.git/ipa-client, branch 30gatepo

The SECURE_NFS value needs to be lower-case yes on SysV systems.

2012-10-26T19:18:55+00:00

The sysV rpcgssd init script tests for [ "${SECURE_NFS}" != "yes" ].

This also works as lower case for system so a simple fix.

https://fedorahosted.org/freeipa/ticket/3207

ipa-client-automount: Add the autofs service if it doesn't exist yet

2012-10-25T18:27:38+00:00

https://fedorahosted.org/freeipa/ticket/3201

Refactoring of default.conf man page

2012-10-23T00:48:04+00:00

Description for the 'dogtag_version', 'startup_timeout', 'server',
'wait_for_attr' option has been added. Option 'server' has been
marked as deprecated, as it is not used anywhere in IPA code. All
the options have been sorted lexicographically.

https://fedorahosted.org/freeipa/ticket/3071

Add uninstall command hints to ipa-*-install

2012-10-16T07:12:41+00:00

Add uninstall command to the uninstall instructions in the "already
installed" responses of ipa-server-install, ipa-client-install and
ipa-replica-install.

https://fedorahosted.org/freeipa/ticket/3065

Notify user about necessary ports in ipa-client-install

2012-10-09T20:57:06+00:00

Connection error message in ipa-client-install now warns the user
about the need of opening of all the necessary ports for ipa-client
enrollment when error that might have been caused by closed ports
is encountered. Mentions the ports needed after the client
enrollment as well.

Improves other error messages during installation in various ways.

https://fedorahosted.org/freeipa/ticket/2816

Clear kernel keyring in client installer, save dbdir on new connections

2012-10-03T17:22:00+00:00

This patch addresses two issues:

1. If a client is previously enrolled in an IPA server and the server
   gets re-installed then the client machine may still have a keyring
   entry for the old server. This can cause a redirect from the
   session URI to the negotiate one. As a rule, always clear the keyring
   when enrolling a new client.

2. We save the NSS dbdir in the connection so that when creating a new
   session we can determine if we need to re-initialize NSS or not. Most
   of the time we do not. The dbdir was not always being preserved between
   connections which could cause an NSS_Shutdown() to happen which would
   fail because of existing usage. This preserves the dbdir information when
   a new connection is created as part of the session mechanism.

https://fedorahosted.org/freeipa/ticket/3108

Improve DN usage in ipa-client-install

2012-10-02T11:39:11+00:00

A hotfix pushed in a scope of ticket 3088 forced conversion of DN
object (baseDN) in IPA client discovery so that ipa-client-install
does not crash when creating an IPA default.conf. Since this is not
a preferred way to handle DN objects, improve its usage:

- make sure, that baseDN retrieved by client discovery is always
  a DN object
- update ipachangeconf.py code to handle strings better and instead
  of concatenating objects, make sure they are converted to string
  first

As a side-effect of ipachangeconf changes, default.conf config file
generated by ipa-client-install has no longer empty new line at the
end of a file.

Whole ipachangeconf.py has been modified to be compliant with PEP8.

https://fedorahosted.org/freeipa/ticket/3088

Don't use bare except: clauses in ipa-client-install

2012-09-27T12:43:01+00:00

Instead of `except:`, use `except Exception:`. This means that errors
like KeyboardInterrupt are not handled, letting them terminate the
script as expected.

https://fedorahosted.org/freeipa/ticket/2941

Fix python syntax in ipa-client-automount

2012-09-24T16:00:36+00:00

https://fedorahosted.org/freeipa/ticket/3081

Set master_kdc and dns_lookup_kdc to true

2012-09-20T00:47:12+00:00

https://fedorahosted.org/freeipa/ticket/2515