freeipa.git/ipa-client, branch ad-work

Add 'ipa_server_mode' option to SSSD configuration

2013-07-18T14:16:49+00:00

https://fedorahosted.org/freeipa/ticket/3652

Fix client install exception if /etc/ssh is missing

2013-07-09T16:07:25+00:00

https://fedorahosted.org/freeipa/ticket/3766

Do not skip SSSD known hosts in ipa-client-install --ssh-trust-dns.

2013-06-27T06:48:40+00:00

https://fedorahosted.org/freeipa/ticket/3705

Remove entitlement support

2013-06-26T12:11:42+00:00

Entitlements code was not tested nor supported upstream since
version 3.0. Remove the associated code.

https://fedorahosted.org/freeipa/ticket/3739

Improve handling of options in ipa-client-install

2013-06-20T10:24:01+00:00

Improve handling of command line options related to forced client re-enrollment
in ipa-client-install:

* Make --keytab and --principal options mutually exclusive.
* Warn that using --force-join together with --keytab provides no additional
  functionality.

https://fedorahosted.org/freeipa/ticket/3686

ipa-client-install: Add 'debug' and 'show' statements to nsupdate commands

2013-05-22T10:29:47+00:00

https://fedorahosted.org/freeipa/ticket/3629

Drop uniqueMember mapping with nss-pam-ldapd.

2013-05-02T14:43:10+00:00

nss-pam-ldapd in 0.8.4 changed the default to map uniqueMember to
member so it is no longer needed in the config file, and in fact
causes an error to be raised.

Add a Conflicts on older versions.

https://fedorahosted.org/freeipa/ticket/3589

Add support for OpenSSH 6.2.

2013-04-30T15:05:39+00:00

Run sss_ssh_authorizedkeyscommand as nobody. Automatically update sshd_config
on openssh-server update.

https://fedorahosted.org/freeipa/ticket/3571

Preserve already configured options in openldap conf

2013-04-30T14:54:10+00:00

We should respect already configured options present in
/etc/openldap/ldap.conf when generating our own configuration.

With this patch, we only rewrite URI, BASE and TLS_CACERT options
only if they are not configured. In the case they are, our suggested
configuration is inserted as a comment.

Also adds tab as a delimeter character in /etc/openldap/ldap.conf

https://fedorahosted.org/freeipa/ticket/3582

Avoid removing sss from nssswitch.conf during client uninstall

2013-04-23T20:14:25+00:00

This patch makes sure that sss is not removed from nsswitch.conf
which causes probles with later uses of sssd. Makes sure that
authconfig with --disablesssd option is not executed during
ipa client uninstall.

https://fedorahosted.org/freeipa/ticket/3577