freeipa.git/install/tools/ipa-replica-install, branch master

Fix SELinux errors caused by enabling TLS on dogtag 389-ds instance.

2011-03-15T18:09:57+00:00

This fixes 2 AVCS:

* One because we are enabling port 7390 because an SSL port must be
  defined to use TLS On 7389.
* We were symlinking to the main IPA 389-ds NSS certificate databsae.
  Instead generate a separate NSS database and certificate and have
  certmonger track it separately

I also noticed some variable inconsistency in cainstance.py. Everywhere
else we use self.fqdn and that was using self.host_name. I found it
confusing so I fixed it.

ticket 1085

Use TLS for dogtag replication agreements.

2011-03-10T14:57:36+00:00

Configure the dogtag 389-ds instance with SSL so we can enable TLS
for the dogtag replication agreements. The NSS database we use is a
symbolic link to the IPA 389-ds instance.

ticket 1060

Need to restart the dogtag 388-ds instance before using it.

2011-03-03T16:02:03+00:00

Restart the 389-ds instance to ensure all schema is loaded that
dogtag may have installed as files.

According to bug
https://bugzilla.redhat.com/show_bug.cgi?id=680984 this it is only needed
on clones.

ticket 1024

IPA replica/server install does not check for a client

2011-03-03T15:20:39+00:00

When IPA replica or server is configured it does not check for
possibly installed client. This will cause the installation to
fail in the very end.

This patch adds a check for already configured client and suggests
removing it before server/replica installation.

https://fedorahosted.org/freeipa/ticket/1002

Use a common group for all DS instances

2011-01-31T21:35:53+00:00

Also remove the option to choose a user.
It is silly to keep it, when you can't choose the group nor the CA
directory user.

Fixes: https://fedorahosted.org/freeipa/ticket/851

Don't perform some API self-tests in production mode for performance reasons

2011-01-28T23:49:17+00:00

The API does a fair number of self tests and locking to assure that the
registered commands are consistent and will work. This does not need
to be done on a production system and adds additional overhead causing
somewhere between a 30 and 50% decrease in performance.

Because makeapi is executed when a build is done ensure that it is
executed in developer mode to ensure that the framework is ok.

ticket 751

Fix assorted bugs found by pylint

2011-01-25T19:01:36+00:00

Create DNS records as early as possible

2011-01-25T19:01:35+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/833

Always add DNS records when installing a replica

2011-01-25T19:01:35+00:00

Even if the replica is not running a DNS server other replicas might.
So if the DNS container is present, then try to add DNS records.

Fixes: https://fedorahosted.org/freeipa/ticket/824

Populate shared tree with replica related values

2011-01-25T16:10:27+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/820