freeipa.git/ipaserver/install, branch testotp FreeIPA project ACIs for HOTP support 2014-02-11T12:37:49+00:00 Alexander Bokovoy abokovoy@redhat.com 2014-02-11T12:37:49+00:00 495ddaf64af51ed41c8a35029a1a500cecccca51 






Add OTP last token plugin
2014-02-10T17:13:21+00:00

Nathaniel McCallum
npmccallum@redhat.com

2013-12-16T21:19:08+00:00

ab00dce3f50042062f7171c6a6ab5ea8f494790f

This plugin prevents the deletion or deactivation of the last
valid token for a user. This prevents the user from migrating
back to single factor authentication once OTP has been enabled.

Thanks to Mark Reynolds for helping me with this patch.





This plugin prevents the deletion or deactivation of the last
valid token for a user. This prevents the user from migrating
back to single factor authentication once OTP has been enabled.

Thanks to Mark Reynolds for helping me with this patch.







Remove working directory for bind-dyndb-ldap plugin.
2014-01-27T15:04:33+00:00

Petr Spacek
pspacek@redhat.com

2014-01-27T13:47:10+00:00

c91936353865ecb03b06e2a558c370e6a50fa0dc

The working directory will be provided directly
by bind-dyndb-ldap package.

This partially reverts commit 689382dc833e687d30349b10a8fd7dc740d54d08.

https://fedorahosted.org/freeipa/ticket/3967





The working directory will be provided directly
by bind-dyndb-ldap package.

This partially reverts commit 689382dc833e687d30349b10a8fd7dc740d54d08.

https://fedorahosted.org/freeipa/ticket/3967







Convert remaining update code to LDAPEntry API.
2014-01-24T19:29:31+00:00

Jan Cholasta
jcholast@redhat.com

2013-10-31T16:55:07+00:00

97c1c95f20762055932a83cb7ac08a408437a661












Convert remaining installer code to LDAPEntry API.
2014-01-24T19:29:31+00:00

Jan Cholasta
jcholast@redhat.com

2013-10-31T16:54:49+00:00

08051f16516a3978494ae94032d55cc8b1426df9












httpd should destroy all CCACHEs
2014-01-22T16:00:46+00:00

Martin Kosek
mkosek@redhat.com

2014-01-22T15:08:51+00:00

b7f1531262723d9a9c50bedad21c3b3cc51e34e9

Use "kdestroy -A" command to destroy all CCACHEs, both the primary
and the non-primary ones to make sure that the non-primary ones are
not used later.

https://fedorahosted.org/freeipa/ticket/4084





Use "kdestroy -A" command to destroy all CCACHEs, both the primary
and the non-primary ones to make sure that the non-primary ones are
not used later.

https://fedorahosted.org/freeipa/ticket/4084







Switch httpd to use default CCACHE
2014-01-22T09:14:05+00:00

Martin Kosek
mkosek@redhat.com

2014-01-16T13:12:29+00:00

f49c26db2c38e5b60a6be990b95c2926ecfa6247

Stock httpd no longer uses systemd EnvironmentFile option which is
making FreeIPA's KRB5CCNAME setting ineffective. This can lead in hard
to debug problems during subsequent ipa-server-install's where HTTP
may use a stale CCACHE in the default kernel keyring CCACHE.

Avoid forcing custom CCACHE and switch to system one, just make sure
that it is properly cleaned by kdestroy run as "apache" user during
FreeIPA server installation process.

https://fedorahosted.org/freeipa/ticket/4084





Stock httpd no longer uses systemd EnvironmentFile option which is
making FreeIPA's KRB5CCNAME setting ineffective. This can lead in hard
to debug problems during subsequent ipa-server-install's where HTTP
may use a stale CCACHE in the default kernel keyring CCACHE.

Avoid forcing custom CCACHE and switch to system one, just make sure
that it is properly cleaned by kdestroy run as "apache" user during
FreeIPA server installation process.

https://fedorahosted.org/freeipa/ticket/4084







ipa-adtrust-install: configure host netbios name by default
2014-01-20T09:35:03+00:00

Alexander Bokovoy
abokovoy@redhat.com

2014-01-17T12:09:34+00:00

531ede2904608a2bfe24d09c94dc0b87d780f30a

Ensure we set host netbios name by default in smb.conf

https://fedorahosted.org/freeipa/ticket/4116





Ensure we set host netbios name by default in smb.conf

https://fedorahosted.org/freeipa/ticket/4116







Treat error during write to /etc/resolv.conf as non-fatal.
2014-01-16T16:04:40+00:00

Petr Spacek
pspacek@redhat.com

2014-01-14T09:48:31+00:00

79fa07341156eddab7466f2780a45de959f42368

https://fedorahosted.org/freeipa/ticket/4110





https://fedorahosted.org/freeipa/ticket/4110







Do not start the service in stopped_service if it was not running before.
2014-01-15T16:44:10+00:00

Jan Cholasta
jcholast@redhat.com

2013-10-15T17:49:07+00:00

7ce3320996e9666581a2b4495b5063b5d99aa937

This fixes a possible NSS database corruption in renew_ca_cert.





This fixes a possible NSS database corruption in renew_ca_cert.