freeipa.git/install/share, branch master

Store list of non-master replicas in DIT and provide way to list them

2011-03-02T14:46:46+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/1007

Use Sudo rather than SUDO as a label.

2011-03-01T21:48:35+00:00

ticket 1005

Fix replica setup using replication admin kerberos credentials

2011-03-01T16:02:55+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/1022

Create default disabled sudo bind user

2011-02-23T20:32:24+00:00

Read access is denied to the sudo container for unauthenticated users.
This shared user can be used to provide authenticated access to the
sudo information.

https://fedorahosted.org/freeipa/ticket/998

Entitlements ACIs not visible to Permission plugin

2011-02-22T15:04:19+00:00

This patch fixes Entitlements privileges and ACIs. There were
missing descriptions or the ACIs could not be processed by
Permissino plugin because of missing prefix.

https://fedorahosted.org/freeipa/ticket/997

Add default roles and permissions for HBAC, SUDO and pw policy

2011-02-22T15:02:24+00:00

Created some default roles as examples. In doing so I realized that
we were completely missing default rules for HBAC, SUDO and password
policy so I added those as well.

I ran into a problem when the updater has a default record and an add
at the same time, it should handle it better now.

ticket 585

Browser configuration support for Firefox 4

2011-02-17T17:12:23+00:00

Support of navigator.preferences that is used to access browser
configuration was dropped in Firefox 4. This disables automatic
configuration of user preferences in this browser that is needed
to use Kerberos single sign-on.

This patch detectes a lack of this interface and tries to
configure the browser using new Services module introduced in
Gecko 2 (used in Firefox 4, SeaMonkey 2.1).

https://fedorahosted.org/freeipa/ticket/975

Updated default Kerberos password policy

2011-02-17T03:28:08+00:00

https://fedorahosted.org/freeipa/ticket/930

Fixed cn attribute in ipaUniqueID uniqueness config.

2011-02-17T00:38:18+00:00

Fine tuning DNS options

2011-02-14T19:45:22+00:00

Add pointer to self to /etc/hosts to avoid chicken/egg problems when
restarting DNS.

On servers set both dns_lookup_realm and dns_lookup_kdc to false so we don't
attempt to do any resolving. Leave it to true on clients.

Set rdns to false on both server and client.

https://fedorahosted.org/freeipa/ticket/931