freeipa.git/ipapython, branch ipautil-refactor

Move system-specific code to ipapython/platform, use it via ipapython/services.py

2011-08-30T14:13:12+00:00

Add forgotten ipapython/services.py.in

2011-08-30T08:41:03+00:00

First phase of iputil refactoring: introduce ipapython.services and ipapython.platform

2011-08-30T08:41:03+00:00

Make sure that hostname specified by user is not an IP address.

2011-07-25T05:47:52+00:00

ticket 1375

Remove sensitive information from logs

2011-07-13T13:16:24+00:00

When -w/--password option is passed to ipa-replica-install it is
printed to ipareplica-install.log. Make sure that the value of this
option is hidden.

https://fedorahosted.org/freeipa/ticket/1378

Set the client auth callback after creating the SSL connection.

2011-07-02T01:01:22+00:00

If we set the callback before calling connect() then if the connection
tries a network family type and fails, it will try other family types.
If this happens then the callback set on the first socket will be lost
when a new socket is created. There is no way to query for the callback
in an existing socket.

https://fedorahosted.org/freeipa/ticket/1349

The IP address provided to ipa-server-install must be local

2011-06-21T02:14:10+00:00

Compare the configured interfaces with the supplied IP address and
optional netmask to determine if the interface is available.

https://fedorahosted.org/freeipa/ticket/1175

Improve IP address handling in IPA option parser

2011-06-20T00:06:21+00:00

Implements a way to pass match_local and parse_netmask parameters
to IP option checker.

Now, there is just one common option type "ip" with new optional
attributes "ip_local" and "ip_netmask" which can be used to
pass IP address validation parameters.

https://fedorahosted.org/freeipa/ticket/1333

Connection check program for replica installation

2011-06-08T07:29:52+00:00

When connection between a master machine and future replica is not
sane, the replica installation may fail unexpectedly with
inconvenient error messages. One common problem is misconfigured
firewall.

This patch adds a program ipa-replica-conncheck which tests the
connection using the following procedure:

1) Execute the on-replica check testing the connection to master
2) Open required ports on local machine
3) Ask user to run the on-master part of the check OR run it
   automatically:
     a) kinit to master as default admin user with given password
     b) run the on-master part using ssh
4) When master part is executed, it checks connection back to
   the replica and prints the check result

This program is run by ipa-replica-install as mandatory part. It
can, however, be skipped using --skip-conncheck option.
ipa-replica-install now requires password for admin user to run
the command on remote master.

https://fedorahosted.org/freeipa/ticket/1107

Do stricter checking of IP addressed passed to server install.

2011-05-30T11:38:46+00:00

ticket 1213