freeipa.git/ipaserver, branch views FreeIPA project WIP: support idviews in compat tree 2014-09-24T12:20:43+00:00 Alexander Bokovoy abokovoy@redhat.com 2014-09-19T13:20:42+00:00 1756629835efb677244cb4e77760a1784485a069 






idviews: Add Default Trust View as part of adtrustinstall
2014-09-22T11:49:32+00:00

Tomas Babej
tbabej@redhat.com

2014-09-22T10:19:26+00:00

a3853771c0acf321d738ec0c20594fa3f505b12c












trusts: Add conversion from SID to object name
2014-09-17T12:41:51+00:00

Tomas Babej
tbabej@redhat.com

2014-09-02T12:47:29+00:00

fea3b121a2e16d493dbadbc2f32cfeb02bf8919c












idviews: Add necessary schema for the ID views
2014-09-17T12:41:50+00:00

Tomas Babej
tbabej@redhat.com

2014-07-31T09:57:53+00:00

4f44efb40acce8023405cdc09f5e52346455ac98












Re-enable uninstall feature for ipa-kra-install
2014-09-15T08:58:29+00:00

Ade Lee
alee@redhat.com

2014-09-02T02:49:54+00:00

9ca5a4e42084ba43e106fa3be9dac9965216e710

The underlying Dogtag issue (Dogtag ticket 1113) has been fixed.
We can therefore re-enable the uninstall option for ipa-kra-install.
Also, fixes an incorrect path in the ipa-pki-proxy.conf, and adds
a debug statement to provide status to the user when an uninstall
is done.  Also, re-added the no_host_dns option which is used when
unpacking a replica file.

Part of the work for: https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: Petr Viktorin <pviktori@redhat.com>





The underlying Dogtag issue (Dogtag ticket 1113) has been fixed.
We can therefore re-enable the uninstall option for ipa-kra-install.
Also, fixes an incorrect path in the ipa-pki-proxy.conf, and adds
a debug statement to provide status to the user when an uninstall
is done.  Also, re-added the no_host_dns option which is used when
unpacking a replica file.

Part of the work for: https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: Petr Viktorin <pviktori@redhat.com>







Allow deleting obsolete permissions; remove operational attribute permissions
2014-09-12T16:22:17+00:00

Petr Viktorin
pviktori@redhat.com

2014-09-12T08:18:00+00:00

4fac4f4cf65b54bc0b194928341b31e3c67d63a5

https://fedorahosted.org/freeipa/ticket/4534

Reviewed-By: Martin Kosek <mkosek@redhat.com>





https://fedorahosted.org/freeipa/ticket/4534

Reviewed-By: Martin Kosek <mkosek@redhat.com>







Update SSL ciphers configured in 389-ds-base
2014-09-12T14:42:09+00:00

Ludwig Krispenz
lkrispen@redhat.com

2014-09-12T10:43:31+00:00

ab196220fdd886fc2b1998eeee0f8e9a4b384845

use configuration parameters to enable ciphers provided by NSS
and not considered weak.
This requires 389-ds version 1.3.3.2 or later

https://fedorahosted.org/freeipa/ticket/4395

Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com>





use configuration parameters to enable ciphers provided by NSS
and not considered weak.
This requires 389-ds version 1.3.3.2 or later

https://fedorahosted.org/freeipa/ticket/4395

Reviewed-By: Nathaniel McCallum <npmccallum@redhat.com>







install: create ff krb extension on every install, replica install and upgrade
2014-09-11T07:41:51+00:00

Petr Vobornik
pvoborni@redhat.com

2014-08-29T12:11:33+00:00

4e6a3c69b0e07e5ec32381a47281ad88e41aae5d

We don't want to copy the extension from master to replica because the
replica may use newer version of FreeIPA and therefore the extension
code might be obsolete. Same reason for upgrades.

https://fedorahosted.org/freeipa/ticket/4478

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>





We don't want to copy the extension from master to replica because the
replica may use newer version of FreeIPA and therefore the extension
code might be obsolete. Same reason for upgrades.

https://fedorahosted.org/freeipa/ticket/4478

Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>







Use autobind when updating CA people entries during certificate renewal
2014-09-09T08:36:50+00:00

Jan Cholasta
jcholast@redhat.com

2014-09-02T09:28:16+00:00

3acec1267ea3e1f4faa8757d384386d8035dd6cf

Requires fix for <https://bugzilla.redhat.com/show_bug.cgi?id=1122110>, bump
selinux-policy in the spec file.

https://fedorahosted.org/freeipa/ticket/4005

Reviewed-By: Petr Viktorin <pviktori@redhat.com>





Requires fix for <https://bugzilla.redhat.com/show_bug.cgi?id=1122110>, bump
selinux-policy in the spec file.

https://fedorahosted.org/freeipa/ticket/4005

Reviewed-By: Petr Viktorin <pviktori@redhat.com>







Remove internaldb password from password.conf
2014-09-09T08:36:50+00:00

Ana Krivokapic
akrivoka@redhat.com

2013-11-06T12:29:09+00:00

d2793a3ca50bc8a0788da4b6c26f1afdf52fada5

Remove internaldb password from password.conf after switching over to
client certificate authentication. The password is no longer needed.

https://fedorahosted.org/freeipa/ticket/4005

Reviewed-By: Petr Viktorin <pviktori@redhat.com>





Remove internaldb password from password.conf after switching over to
client certificate authentication. The password is no longer needed.

https://fedorahosted.org/freeipa/ticket/4005

Reviewed-By: Petr Viktorin <pviktori@redhat.com>