freeipa.git/ipaserver, branch systemd-master

Spin for connection success also when socket is not (yet) available

2011-10-24T12:23:11+00:00

We were spinning for socket connection if attempt to connect returned errno 111
(connection refused). However, it is not enough for local AF_UNIX sockets as
heavy applications might not be able to start yet and therefore the whole path
might be missing. So spin for errno 2 (no such file or directory) as well.

Partial fix for
  https://fedorahosted.org/freeipa/ticket/1990

Add support for systemd environments and use it to support Fedora 16

2011-10-24T12:23:11+00:00

https://fedorahosted.org/freeipa/ticket/1192

Check /etc/hosts file in ipa-server-install

2011-10-13T04:54:45+00:00

There may already be a record in /etc/hosts for chosen IP address
which may not be detected under some circumstances. Make sure
that /etc/hosts is checked properly.

https://fedorahosted.org/freeipa/ticket/1923

Hostname used by IPA must be a system hostname

2011-10-13T04:54:41+00:00

Make sure that the hostname IPA uses is a system hostname. If user
passes a non-system hostname, update the network settings and
system hostname in the same way that ipa-client-install does.

This step should prevent various services failures which may not
be ready to talk to IPA with non-system hostname.

https://fedorahosted.org/freeipa/ticket/1931

Check hostname resolution sanity

2011-10-13T04:54:37+00:00

Always check (even with --setup-dns or --no-host-dns) that if the
host name or ip address resolves, it resolves to sane value. Otherwise
report an error. Misconfigured /etc/hosts causing these errors could
harm the installation later.

https://fedorahosted.org/freeipa/ticket/1923

Work around limits not being updatable in 389-ds.

2011-10-13T02:42:07+00:00

The bug to fix updates, BZ 741744, isn't working. For the short
term add the attributes we want to update to the REPLACE
whitelist so rather than using an ADD and DEL operation it will
use a REPLACE.

https://fedorahosted.org/freeipa/ticket/1888

Fix has_upg() to work with relocated managed entries configuration.

2011-10-13T19:38:03+00:00

https://fedorahosted.org/freeipa/ticket/1964

Optimize member/memberof searches in LDAP

2011-10-12T10:31:16+00:00

When investigating if member/memberof attribute is direct/indirect
we do a lot of LDAP SCOPE_SUBTREE searches when we actually search
just for one item. Make sure we search only with SCOPE_BASE to improve
the performance.

One not so efficient iteration was also changed to list comprehension
to speed things up a tiny bit.

https://fedorahosted.org/freeipa/ticket/1885

Don't leak passwords through kdb5_ldap_util command line arguments.

2011-10-12T01:25:17+00:00

ticket 1948

Write KRB5REALM to /etc/sysconfig/krb5kdc and make use of common backup_config_and_replace_variables() tool

2011-10-11T22:21:48+00:00

systemd service unit for krb5kdc in Fedora 16 uses KRB5REALM variable of
/etc/sysconfig/krb5kdc to start krb5kdc for the default realm. Thus, we
need to make sure it is always existing and pointing to our realm.

Partial fix for:
   https://fedorahosted.org/freeipa/ticket/1192