freeipa.git/install/tools/ipa-replica-prepare, branch selenium

Fix SELinux errors caused by enabling TLS on dogtag 389-ds instance.

2011-03-15T18:09:57+00:00

This fixes 2 AVCS:

* One because we are enabling port 7390 because an SSL port must be
  defined to use TLS On 7389.
* We were symlinking to the main IPA 389-ds NSS certificate databsae.
  Instead generate a separate NSS database and certificate and have
  certmonger track it separately

I also noticed some variable inconsistency in cainstance.py. Everywhere
else we use self.fqdn and that was using self.host_name. I found it
confusing so I fixed it.

ticket 1085

Use ldapi: instead of unsecured ldap: in ipa core tools.

2011-03-03T19:04:34+00:00

The patch also corrects exception handling in some of the tools.

Fix #874

Fix two problems with ipa-replica-prepare

2011-02-14T23:15:35+00:00

1. Fix a unicode() problem creating the DNS entries
2. Fix a strange NSS error when generating the certificates against
   a dogtag server.

The NSS errors are quite strange. When generating the first certificate
nss_shutdown() fails because the database isn't initialized yet but
nss_is_initialized() returned True. The second pass fails because
something is in use.

Disable replication version plugin by default.

2011-02-10T18:54:39+00:00

The 389-ds replication plugin may not be installed on all platforms
and our replication version plugin will cause 389-ds to not start
if it is loaded and the replication plugin is not. So disable by
default.

When a replica is prepared we check for the replication plugin.
If it exists we will enable the replication version plugin.

Likewise on installation of a replica we check for existence of
the repliation plugin and if it is there then we enable the version
plugin before replication begins.

ticket 918

Add an address for a nameserver when a new zone is created during install

2011-02-01T03:15:45+00:00

https://fedorahosted.org/freeipa/ticket/881

Use a common group for all DS instances

2011-01-31T21:35:53+00:00

Also remove the option to choose a user.
It is silly to keep it, when you can't choose the group nor the CA
directory user.

Fixes: https://fedorahosted.org/freeipa/ticket/851

Exit if a DNS A or AAAA record doesn't exist for the replica we are preparing.

2011-01-11T15:22:33+00:00

Without this it is possible to prepare a replica for a host that doesn't
exist in DNS. The result when this replica file is installed is that
replication will fail because the master won't be able to communicate
to the replica by name.

ticket 680

Allow ipa-dns-install to configure DNS on a replica.

2011-01-07T09:53:50+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/645

Change FreeIPA license to GPLv3+

2010-12-20T22:19:53+00:00

The changes include:
 * Change license blobs in source files to mention GPLv3+ not GPLv2 only
 * Add GPLv3+ license text
 * Package COPYING not LICENSE as the license blobs (even the old ones)
   mention COPYING specifically, it is also more common, I think

 https://fedorahosted.org/freeipa/ticket/239

Verify that the replication plugin exists before setting up replicas.

2010-12-17T22:31:19+00:00

ticket 502