freeipa.git/ipaserver, branch hbactest

Make sure that hostname specified by user is not an IP address.

2011-07-25T05:47:52+00:00

ticket 1375

Remove wrong kpasswd sysconfig

2011-07-21T04:41:50+00:00

Clean up of IP address checks in install scripts.

2011-07-19T10:30:47+00:00

Fixes ipa-dns-install incorrect warning.

ticket 1486

35 remove escapes from the cvs parser in ipaserver/install/ldapupdate https://fedorahosted.org/freeipa/ticket/1472

2011-07-19T07:44:04+00:00

Specify the package name when the replication plugin is missing.

2011-07-18T06:55:50+00:00

ticket https://fedorahosted.org/freeipa/ticket/1155

Generate a database password by default in all cases.

2011-07-18T02:26:01+00:00

If the password passed in when creating a NSS certificate database is None
then a random password is generated. If it is empty ('') then an empty
password is set.

Because of this the HTTP instance on replicas were created with an empty
password.

https://fedorahosted.org/freeipa/ticket/1407

Set nickname of the RA to 'IPA RA' to avoid confusion with dogtag RA

2011-07-18T02:22:21+00:00

The old nickname was 'RA Subsystem' and this may confuse some users
with the dogtag RA subsystem which we do not use.

This will only affect new installs. Existing installations will
continue to work fine.

https://fedorahosted.org/freeipa/ticket/1236

Create tool to manage dogtag replication agreements

2011-07-18T02:16:32+00:00

For the most part the existing replication code worked with the
following exceptions:

- Added more port options
- It assumed that initial connections were done to an SSL port. Added
  ability to use startTLS
- It assumed that the name of the agreement was the same on both sides.
  In dogtag one is marked as master and one as clone. A new option is
  added, master, the determines which side we're working on or None
  if it isn't a dogtag agreement.
- Don't set the attribute exclude list on dogtag agreements
- dogtag doesn't set a schedule by default (which is actually recommended
  by 389-ds). This causes problems when doing a force-sync though so
  if one is done we set a schedule to run all the time. Otherwise the
  temporary schedule can't be removed (LDAP operations error).

https://fedorahosted.org/freeipa/ticket/1250

Use information from the certificate subject when setting the NSS nickname.

2011-07-18T02:14:24+00:00

There were a few places in the code where certs were loaded from a
PKCS#7 file or a chain in a PEM file. The certificates got very
generic nicknames.

We can instead pull the subject from the certificate and use that as
the nickname.

https://fedorahosted.org/freeipa/ticket/1141

Check IPA configuration in install tools

2011-07-18T07:36:43+00:00

Install tools may fail with unexpected error when IPA server is not
installed on a system. Improve user experience by implementing
a check to affected tools.

https://fedorahosted.org/freeipa/ticket/1327
https://fedorahosted.org/freeipa/ticket/1347