summaryrefslogtreecommitdiffstats
path: root/ipaserver
Commit message (Expand)AuthorAgeFilesLines
* WIP: support idviews in compat treeviewsAlexander Bokovoy2014-09-241-0/+10
* idviews: Add Default Trust View as part of adtrustinstallTomas Babej2014-09-221-0/+22
* trusts: Add conversion from SID to object nameTomas Babej2014-09-171-0/+49
* idviews: Add necessary schema for the ID viewsTomas Babej2014-09-171-0/+1
* Re-enable uninstall feature for ipa-kra-installAde Lee2014-09-152-8/+9
* Allow deleting obsolete permissions; remove operational attribute permissionsPetr Viktorin2014-09-121-18/+21
* Update SSL ciphers configured in 389-ds-baseLudwig Krispenz2014-09-121-5/+2
* install: create ff krb extension on every install, replica install and upgradePetr Vobornik2014-09-112-14/+2
* Use autobind when updating CA people entries during certificate renewalJan Cholasta2014-09-091-11/+3
* Remove internaldb password from password.confAna Krivokapic2014-09-091-0/+3
* Backup CS.cfg before modifying itJan Cholasta2014-09-051-0/+21
* Fix: Add managed read permissions for compat tree and operational attrsPetr Viktorin2014-09-051-0/+18
* Make CA-less ipa-server-install option --root-ca-file optional.Jan Cholasta2014-09-054-33/+45
* Use certmonger D-Bus API instead of messing with its files.David Kupka2014-09-055-34/+14
* Normalize external CA cert before passing it to pkispawnJan Cholasta2014-09-041-2/+12
* Add record(s) to /etc/host when IPA is configured as DNS server.David Kupka2014-09-031-1/+1
* ipaserver/dcerpc.py: Make sure trust is established only to forest root domainAlexander Bokovoy2014-09-011-0/+6
* ipaserver/dcerpc.py: be more open to what domains can be seen through the for...Alexander Bokovoy2014-09-011-1/+1
* ipaserver/dcerpc.py: Avoid hitting issue with transitive trusts on Windows Se...Alexander Bokovoy2014-09-011-3/+10
* ipaserver/dcerpc.py: make PDC discovery more robustAlexander Bokovoy2014-09-011-5/+16
* ipaserver/dcerpc.py: if search of a closest GC failed, try to find any GCAlexander Bokovoy2014-09-011-1/+5
* Add a KRA to IPAAde Lee2014-08-229-447/+1593
* Convert external CA chain to PKCS#7 before passing it to pkispawn.Jan Cholasta2014-08-141-1/+12
* Fix parsing of long nicknames in certutil -L output.Jan Cholasta2014-08-071-4/+3
* ipa-adtrust-install does not re-add member in adtrust agents groupMartin Kosek2014-08-071-18/+21
* Enable NSS PKIX certificate path discovery and validation for Dogtag.Jan Cholasta2014-07-301-0/+6
* Allow upgrading CA-less to CA-full using ipa-ca-install.Jan Cholasta2014-07-301-4/+4
* Allow adding CA certificates to certificate store in ipa-cacert-manage.Jan Cholasta2014-07-301-2/+55
* Allow changing chaining of the IPA CA certificate in ipa-cacert-manage.Jan Cholasta2014-07-301-5/+24
* Add new NSSDatabase method get_cert for getting certs from NSS databases.Jan Cholasta2014-07-301-1/+13
* Allow multiple CA certificates in replica info files.Jan Cholasta2014-07-301-1/+15
* Add function for writing list of certificates to a PEM file to ipalib.x509.Jan Cholasta2014-07-302-2/+2
* Import CA certs from certificate store to HTTP NSS database on server install.Jan Cholasta2014-07-301-0/+5
* Import CA certs from certificate store to DS NSS database on replica install.Jan Cholasta2014-07-302-1/+29
* Add new add_cert method for adding certificates to NSSDatabase and CertDB.Jan Cholasta2014-07-302-15/+13
* Rename CertDB method add_cert to import_cert.Jan Cholasta2014-07-301-3/+3
* Upload CA chain from DS NSS database to certificate store on server update.Jan Cholasta2014-07-301-16/+52
* Upload CA chain from DS NSS database to certificate store on server install.Jan Cholasta2014-07-301-19/+17
* Add permissions for certificate store.Jan Cholasta2014-07-302-0/+76
* Add LDAP schema for certificate store.Jan Cholasta2014-07-301-0/+1
* Fix trust flags in HTTP and DS NSS databases.Jan Cholasta2014-07-304-14/+26
* Allow specifying trust flags in NSSDatabase and CertDB method trust_root_cert.Jan Cholasta2014-07-301-4/+6
* Do not treat the IPA RA cert as CA cert in DS NSS database.Jan Cholasta2014-07-301-1/+1
* Allow IPA master hosts to read and update IPA master information.Jan Cholasta2014-07-301-0/+38
* Do not use ldapi in certificate renewal scripts.Jan Cholasta2014-07-301-8/+13
* Remove master ACIs when deleting a replica.Jan Cholasta2014-07-301-0/+43
* Load sysupgrade.state on demand.Jan Cholasta2014-07-301-1/+9
* Add CA certificate management tool ipa-cacert-manage.Jan Cholasta2014-07-301-0/+285
* Add permissions for CA certificate renewal.Jan Cholasta2014-07-301-0/+23
* Add method for verifying CA certificates to NSSDatabase.Jan Cholasta2014-07-301-0/+23