summaryrefslogtreecommitdiffstats
path: root/ipa-server/ipa-install/ipa-replica-install
Commit message (Collapse)AuthorAgeFilesLines
* Install the ca.crt file early on so that we can always enforce SSLSimo Sorce2008-08-131-7/+18
| | | | | protected connections to other LDAP servers Fix error reporting on replica creation.
* Used the encrypt_file and decrypt_file utility functions to encrypt replicaSimo Sorce2008-08-111-17/+25
| | | | | | information. This way we do not risk to leave around sensitive data. Set the destination host in the replica file too and do checks against in ipa-replica-install
* Fix few syntax errors.Martin Nagy2008-08-061-2/+2
|
* Don't assume that the Firefox autoconfig files exist.Rob Crittenden2008-07-281-8/+9
| | | | | | | These are created by an object-signing cert and needs to be done after the fact if a server is created with user-supplied PKCS#12 files. 452402
* Wrap up the raw_input() to user_input() for convenience and uniformity.Martin Nagy2008-07-231-7/+3
|
* Rework the way SSL certificates are imported from PKCS#12 files.Rob Crittenden2008-07-141-2/+5
| | | | | | | | Add the ability to provide PKCS#12 files during initial installation Add the ability to provide PKCS#12 files when preparing a replica Correct some issues with ipa-server-certinstall 452402
* Add -p/--password option so the DM password can be passed on the command-line.Rob Crittenden2008-06-041-5/+10
| | | | | | The import for version moved from ipaserver to ipa, fix that as well. 449858
* Fix the case where domain != lower(REALM)Simo Sorce2008-05-291-0/+9
| | | | | add the domain to the ipa.conf file for apps that need to know This should fix a bug in the replica setup
* Display information on how to uninstall a partially installed server.Rob Crittenden2008-05-091-4/+10
| | | | | | | This may have failed either because the user pressed ^C or something failed during installation. 442454
* Detect existing DS instances and prompt for removal during replica install.Rob Crittenden2008-05-081-0/+32
| | | | 442454
* Add missing colon to function definition that broke the buildRob Crittenden2008-05-081-1/+1
|
* Add a version API to the server so it knows what version it is.Rob Crittenden2008-05-081-1/+2
| | | | 435019
* Don't prompt for confirmation of DM password when installing a replica.Rob Crittenden2008-05-081-2/+7
| | | | | | | | | It implies that you are setting a new password and you really aren't. Also added a catch for KeyboardInterrupt with instructions on how to recover from a partial install. 441607
* Use the same kpasswd.keytab on all replicas.Rob Crittenden2008-04-091-1/+3
| | | | | | | If we generate a new keytab for each replica then effectively password changes can only occur on the last replica created. 439905
* Put the replica hostname back together properlyRob Crittenden2008-03-271-2/+3
| | | | 439057
* Make the memberof task a public function.Rob Crittenden2008-03-271-2/+7
| | | | | | | | | | | | | | This is used when a new replica is created as well as whenever a replica is re-initialized from another master. In order for this to work when not creating an instance the __init__ function needs to be able to determine the suffix and the dm_password is needed. I've also added the time to the RDN of the member task to ensure uniqueness. 438222
* Fix file permissions on ca.crt when it is installed.Rob Crittenden2008-03-261-0/+1
| | | | 438220
* Fixed the way we call ipa-client-install from ipa-replica-install.Nathan Kinder2008-02-281-1/+1
| | | | 434980
* Start ntpd first unless we do not want it.Simo Sorce2008-02-201-5/+9
| | | | | Make sure we do sync the clock leaping to the current correct time. This avoids problems with bad dates on certificates, etc..
* Run ipa-client-install after server install bitsSimo Sorce2008-02-201-4/+11
|
* Warn if a user tries to install a replica on the wrong target machineRob Crittenden2008-02-191-0/+12
| | | | 432691
* Add some error handling for LDAP connection issuesRob Crittenden2008-02-191-3/+23
| | | | | | Verify the DM password earlier in the process 433368
* Verify current domain with user during installationRob Crittenden2008-02-151-3/+4
| | | | | | Use that domain when creating replicas Resolves 432066
* Set the license uniformly to GPLv2 only.Rob Crittenden2008-02-041-1/+1
|
* Use file to store the current CA serial numberRob Crittenden2008-02-051-10/+27
| | | | | | | No longer create a PKCS#12 file that contains the CA No longer send the entire CA to each replica, generate the SSL certs on master Fix number of bugs in ipa-replica-install and prepare Produce status output during replica creation
* Remove reference to radius that wasn't used and was causing program to fail.Rob Crittenden2008-01-291-1/+1
| | | | Resolves 429853
* Fix issues reported by rpmlint.Rob Crittenden2008-01-181-1/+0
| | | | | | | | | | | | | | - Removing shebangs (#!) from a bunch of python libraries - Don't use a variable name in init scripts for the lock file - Keep the init script name consistent with the binary name, so renamed ipa-kpasswd.init to ipa_kpasswd.init - Add status option to the init scripts - Move most python scripts out of /usr/share/ipa and into the python site-packages directories (ipaserver and ipaclient) - Remove unnecessary sys.path.append("/usr/share/ipa") - Fix the license string in the spec files - Rename ipa-webgui to ipa_webgui everywhere - Fix a couple of issues reported by pychecker in ipa-python
* - Enable ssl for replication.Karl MacMillan2007-12-211-1/+1
| | | | | - Add replication management script that allows listing adding, and deleting replicas.
* Convert replication to use the new cert infrastructure andKarl MacMillan2007-12-201-13/+32
| | | | | | correctly issue certs from the same authority. Also remove support for read-only replicas since that work will not be finished and tested for 1.0.
* Initial replication setup.Karl MacMillan2007-11-211-0/+142
This add replication setup through two new commands: ipa-replica-prepare and ipa-replica-install. The procedure is to run ipa-replica-prepare on an existing master. This will collect information about the realm and the current master and create a file storing all of the information. After copying that file to the new replica, ipa-replica-install is run (with -r to create a read-only replica). This version of the patch also includes fixes for the sasl mappings on the replicas. Remaining features: - ssl for replication. - automatic configuration of mesh topology for master (or a simpler way to replicate multiple masters. - tool for view / configuring current replication.