freeipa.git/ipa-client, branch views FreeIPA project No longer generate a machine certificate on client installs 2014-09-05T15:50:59+00:00 Rob Crittenden rcritten@redhat.com 2014-09-03T19:14:45+00:00 c1bf5203937827369c7ce023d03c75d2da6d83ee https://fedorahosted.org/freeipa/ticket/4449 Reviewed-By: Petr Viktorin <pviktori@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4449

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Allow user to force Kerberos realm during installation. 2014-09-05T12:50:36+00:00 David Kupka dkupka@redhat.com 2014-08-27T10:31:09+00:00 dc4bdd327ffffa639877b7d4553810b69943d996 User can set realm not matching one resolved from DNS. This is useful especially when DNS is missconfigured. https://fedorahosted.org/freeipa/ticket/4444 Reviewed-By: Jan Cholasta <jcholast@redhat.com> 
User can set realm not matching one resolved from DNS. This is useful especially
when DNS is missconfigured.

https://fedorahosted.org/freeipa/ticket/4444

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Use certmonger D-Bus API instead of messing with its files. 2014-09-05T08:51:42+00:00 David Kupka dkupka@redhat.com 2014-09-03T07:07:16+00:00 6d94cdf250c470bf77a0e769ea30a90fa5815b81 FreeIPA certmonger module changed to use D-Bus to communicate with certmonger. Using the D-Bus API should be more stable and supported way of using cermonger than tampering with its files. >=certmonger-0.75.13 is needed for this to work. https://fedorahosted.org/freeipa/ticket/4280 Reviewed-By: Jan Cholasta <jcholast@redhat.com> 
FreeIPA certmonger module changed to use D-Bus to communicate with certmonger.
Using the D-Bus API should be more stable and supported way of using cermonger than
tampering with its files.

>=certmonger-0.75.13 is needed for this to work.

https://fedorahosted.org/freeipa/ticket/4280

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
ipa-client-install: Do not add already configured sources to nsswitch.conf entries 2014-09-04T11:39:13+00:00 Tomas Babej tbabej@redhat.com 2014-08-27T07:10:59+00:00 fd26560a164e757970584009d54f81c678a7056c Makes sure that any new sources added are not already present in the entry. https://fedorahosted.org/freeipa/ticket/4508 Reviewed-By: Petr Viktorin <pviktori@redhat.com> 
Makes sure that any new sources added are not already present
in the entry.

https://fedorahosted.org/freeipa/ticket/4508

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
Add client certificate update tool ipa-certupdate. 2014-07-30T14:04:21+00:00 Jan Cholasta jcholast@redhat.com 2014-06-27T10:31:50+00:00 60e19b585cc12e5b4d51b2d18c504f253cc692ca Part of https://fedorahosted.org/freeipa/ticket/3259 Part of https://fedorahosted.org/freeipa/ticket/3520 Reviewed-By: Rob Crittenden <rcritten@redhat.com> 
Part of https://fedorahosted.org/freeipa/ticket/3259
Part of https://fedorahosted.org/freeipa/ticket/3520

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Get CA certs for system-wide store from cert store in ipa-client-install. 2014-07-30T14:04:21+00:00 Jan Cholasta jcholast@redhat.com 2014-06-12T15:20:19+00:00 55d3bab57b83a32e8c0976902deea80236f387e7 All of the certificates and associated key policy are now stored in /etc/pki/ca-trust/source/ipa.p11-kit. Part of https://fedorahosted.org/freeipa/ticket/3259 Part of https://fedorahosted.org/freeipa/ticket/3520 Reviewed-By: Rob Crittenden <rcritten@redhat.com> 
All of the certificates and associated key policy are now stored in
/etc/pki/ca-trust/source/ipa.p11-kit.

Part of https://fedorahosted.org/freeipa/ticket/3259
Part of https://fedorahosted.org/freeipa/ticket/3520

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Get CA certs for /etc/pki/nssdb from certificate store in ipa-client-install. 2014-07-30T14:04:21+00:00 Jan Cholasta jcholast@redhat.com 2014-06-12T11:40:56+00:00 b5471a9f3eb2134ce7017224dd732f9a4b2a10f8 Part of https://fedorahosted.org/freeipa/ticket/3259 Part of https://fedorahosted.org/freeipa/ticket/3520 Reviewed-By: Rob Crittenden <rcritten@redhat.com> 
Part of https://fedorahosted.org/freeipa/ticket/3259
Part of https://fedorahosted.org/freeipa/ticket/3520

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Get CA certs for /etc/ipa/ca.crt from certificate store in ipa-client-install. 2014-07-30T14:04:21+00:00 Jan Cholasta jcholast@redhat.com 2014-06-12T10:04:59+00:00 459d6cff4efc529f2a9031e817c80a0377bf19a4 Part of https://fedorahosted.org/freeipa/ticket/3259 Part of https://fedorahosted.org/freeipa/ticket/3520 Reviewed-By: Rob Crittenden <rcritten@redhat.com> 
Part of https://fedorahosted.org/freeipa/ticket/3259
Part of https://fedorahosted.org/freeipa/ticket/3520

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Support multiple CA certificates in /etc/ipa/ca.crt in ipa-client-install. 2014-07-30T14:04:21+00:00 Jan Cholasta jcholast@redhat.com 2014-06-12T09:58:28+00:00 fd400588d78c50c79f64e7bc83e1cd367374a9f9 Part of https://fedorahosted.org/freeipa/ticket/3259 Part of https://fedorahosted.org/freeipa/ticket/3520 Reviewed-By: Rob Crittenden <rcritten@redhat.com> 
Part of https://fedorahosted.org/freeipa/ticket/3259
Part of https://fedorahosted.org/freeipa/ticket/3520

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Refactor CA certificate fetching code in ipa-client-install. 2014-07-30T14:04:21+00:00 Jan Cholasta jcholast@redhat.com 2014-06-12T09:52:38+00:00 29f42cbec16ef62f4cb4f5279a41f8fbac976f62 Part of https://fedorahosted.org/freeipa/ticket/3259 Part of https://fedorahosted.org/freeipa/ticket/3520 Reviewed-By: Rob Crittenden <rcritten@redhat.com> 
Part of https://fedorahosted.org/freeipa/ticket/3259
Part of https://fedorahosted.org/freeipa/ticket/3520

Reviewed-By: Rob Crittenden <rcritten@redhat.com>