freeipa.git/ipaserver, branch platform-master

Introduce platform-specific adaptation for services used by FreeIPA.

2011-09-13T09:25:58+00:00

Refactor FreeIPA code to allow abstracting all calls to external processes and
dependencies on modification of system-wide configuration. A platform provider
would give its own implementation of those methods and FreeIPA would use it
based on what's built in packaging process.

https://fedorahosted.org/freeipa/ticket/1605

Convert server install code to platform-independent access to system services

2011-09-13T09:14:18+00:00

https://fedorahosted.org/freeipa/ticket/1605

Fix configure.jar permissions

2011-09-07T11:11:13+00:00

Remove executable bit added by /usr/bin/signtool

https://fedorahosted.org/freeipa/ticket/1644

Fix permissions in installers

2011-09-07T11:02:43+00:00

Fix permissions for (configuration) files produced by
ipa-server-install or ipa-client-install. This patch is needed
when root has a umask preventing files from being world readable.

https://fedorahosted.org/freeipa/ticket/1644

install: We do not need a kpasswd keytab anymore

2011-08-31T20:27:20+00:00

We now use MIT's kadmin instead of our old ipa_kpasswd daemon.
kadmind knows how to fetch the keys directly from the database and doesn't need
a keytab on the filesystem.

install: We do not need a ldap password anymore

2011-08-31T20:27:20+00:00

Our new ipa-kdb driver access ldap via ldapi:// and EXTERNAL auth and doesn't
need a bind password anymore.

Fixes: https://fedorahosted.org/freeipa/ticket/1743

Use the IPA server cert profile in the installer.

2011-08-31T00:17:57+00:00

We were still using the caRAserverCert profile during installation.

https://fedorahosted.org/freeipa/ticket/1744

Let Bind track data changes

2011-08-31T14:46:12+00:00

Integrate new bind-dyndb-ldap features to automatically track
DNS data changes:

 1) Zone refresh
    Set --zone-refresh in installation to define number of seconds
    between bind-dyndb-ldap polls for new DNS zones. User now
    doesn't have to restart name server when a new zone is added.

 2) New zone notifications
    Use LDAP persistent search mechanism to immediately get
    notification when any new DNS zone is added. Use --zone-notif
    install option to enable. This option is mutually exclusive
    with Zone refresh.

To enable this functionality in existing IPA installations,
update a list of arguments for bind-dyndb-ldap in /etc/named.conf.
An example when zone refresh is disabled and DNS data change
notifications (argument psearch of bind-dyndb-ldap) are enabled:

dynamic-db "ipa" {
...
        arg "zone_refresh 0";
        arg "psearch yes";
};

This patch requires bind-dyndb-ldap-1.0.0-0.1.b1 or later.

https://fedorahosted.org/freeipa/ticket/826

34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin

2011-08-31T07:49:43+00:00

Added new container in etc to hold the automembership configs.
Modified constants to point to the new container
Modified dsinstance to create the container
Created automember.py to add the new commands
Added xmlrpc test to verify functionality
Added minor fix to user.py for constant behavior between memberof
and automember

https://fedorahosted.org/freeipa/ticket/1272

Add common is_installed() fn, better uninstall logging, check for errors.

2011-08-29T20:50:43+00:00

The installer and ipactl used two different methods to determine
whether IPA was configured, unify them.

When uninstalling report any thing that looks suspicious and warn
that a re-install may fail. This includes any remaining 389-ds instances
and any state or files that remains after all the module uninstallers
are complete.

Add wrappers for removing files and directories to log failures.

https://fedorahosted.org/freeipa/ticket/1715