freeipa.git/ipa-client, branch ticket-1373

Rearrange logging for NSCD daemon.

2011-07-18T19:12:04+00:00

https://fedorahosted.org/freeipa/ticket/1373

When SSSD is in use, we actually trying to disable NSCD daemon. Telling that we failed to configure
automatic _startup_ of the NSCD is wrong then.

Configure SSSD to store user password if offline.

2011-07-14T23:26:25+00:00

ticket 1359

Remove redundant configuration values from krb5.conf.

2011-06-28T05:10:06+00:00

ticket 1358

On a master configure sssd to only talk to the local master.

2011-06-21T14:07:06+00:00

Otherwise it is possible for sssd to pick a different master to
communicate with via the DNS SRV records and if the remote master
goes down the local one will have problems as well.

ticket https://fedorahosted.org/freeipa/ticket/1187

Fix support for nss-pam-ldapd

2011-06-08T08:00:27+00:00

Client installation with --no-sssd option was broken if the client
was based on a nss-pam-ldap instead of nss_ldap. The main issue is
with authconfig rewriting the nslcd.conf after it has been
configured by ipa-client-install.

This has been fixed by changing an order of installation steps.
Additionally, nslcd daemon needed for nss-pam-ldap function is
correctly started.

https://fedorahosted.org/freeipa/ticket/1235

Properly configure nsswitch.conf when using the --no-sssd option.

2011-05-18T11:19:06+00:00

Even with --no-sssd authconfig was setting nsswitch.conf to use sssd
for users, groups, shadow and netgroups. We need to pass in the
--enableforcelegacy option hwen configuring nss_ldap.

Also always back up and restore sssd.conf. It still gets configured for
kerberos.

ticket 1142

KDC autodiscovery may fail when domain is not realm

2011-05-17T06:56:22+00:00

When ipa-client-install autodiscovers IPA server values it
doesn't fill the fixed KDC address to Kerberos configuration
file. However, when realm != domain or the autodiscovered values
are overridden, installation may fail because it cannot find the
KDC.

This patch adds a failover to use static KDC address in case when
such an issue occurs.

https://fedorahosted.org/freeipa/ticket/1100

Improve service manipulation in client install

2011-05-13T11:24:35+00:00

Remove redundant ipa-client-install error message when optional nscd
daemon was not installed. Additionally, use standard IPA functions
for service manipulation and improve logging.

https://fedorahosted.org/freeipa/ticket/1207

Consolidate man pages and IPA tools help

2011-05-12T20:55:27+00:00

IPA tools options are not consistent with information in man
pages.

https://fedorahosted.org/freeipa/ticket/1163
https://fedorahosted.org/freeipa/ticket/1178

Fix issues found by Coverity.

2011-05-09T20:23:40+00:00

tickets 1166, 1167, 1168, 1169