freeipa.git/ipaserver/install, branch adwork

Ensure that winbind service is also started when ipa-adtrust-install is run

2012-06-27T14:13:42+00:00

Set RID bases for local domain during ipa-adtrust-install

2012-06-26T07:04:23+00:00

Add objects for initial ID range

2012-06-26T07:04:08+00:00

Add sidgen postop and task

2012-06-26T07:03:21+00:00

A postop plugin is added to create the SID for new created users and
groups. A directory server task allows to set the SID for existing
users and groups.

Fixes https://fedorahosted.org/freeipa/ticket/2825

Add external domain extop DS plugin

2012-06-26T06:56:42+00:00

This extop can be used by clients of the IPA domain, e.g. sssd, to
retrieve data from trusted external domains. It can be used e.g. to map
Windows SIDs to user or groups names and back.

restart dirsrv as part of ipa-adtrust-install

2012-06-22T06:45:55+00:00

We should restart Directory Server when performing AD trusts configuration
to enable new CLDAP plugin and force KDC to notice MS PAC is now available.
Previously we only restarted KDC but if dirsrv is restarted, KDC will notice
its socket disappeared and will refresh itself

http://fedorahosted.org/freeipa/ticket/2862

Only set sebools when necessary

2012-06-11T01:23:23+00:00

setsebool -P was run for every package upgrade or server
installation even though the sebools were already set to the new
value.

Only set sebools which are different from current system values.
This speeds up ipa-upgradeconfig or package update by 150 seconds.

Enable psearch on upgrades

2012-06-11T01:23:19+00:00

From IPA 3.0, persistent search is a preferred mechanism for new DNS
zone detection and is also needed for other features (DNSSEC, SOA
serial updates).

Enable psearch and make sure connections attribute is right. This
step is done just once for a case when user switched the persistent
search back to disabled on purpose.

ipa-upgradeconfig was updated to accept --debug option in case
somebody would want to see debug messages.

Enable persistent search by default

2012-06-11T01:23:15+00:00

From IPA version 3.0, the persistent search is a preferred mechanism
to for DNS zone list management. It will be also a requirement for
several bind-dyndb-ldap features, like SOA serial automatic updates
or DNSSEC.

Make this mechanism default in ipa-server-install and ipa-dns-istall.

https://fedorahosted.org/freeipa/ticket/2524

Add sysupgrade state file

2012-06-11T01:23:10+00:00

When IPA package is being updated, some of the configuration files
are also updated. Sometimes it may be useful to store upgrade meta
information for next package upgrades. For example an information
that some config file was already updated and we don't want to
update it again if user purposedly reverted the change.

This patch adds a new StateFile in /var/lib/ipa/sysupgrade which
is capable of holding this information. New sysupgrade.py module
was created to provide simple API to access the upgrade state
information.