freeipa.git/install/tools/ipa-server-install, branch selenium

Fix SELinux errors caused by enabling TLS on dogtag 389-ds instance.

2011-03-15T18:09:57+00:00

This fixes 2 AVCS:

* One because we are enabling port 7390 because an SSL port must be
  defined to use TLS On 7389.
* We were symlinking to the main IPA 389-ds NSS certificate databsae.
  Instead generate a separate NSS database and certificate and have
  certmonger track it separately

I also noticed some variable inconsistency in cainstance.py. Everywhere
else we use self.fqdn and that was using self.host_name. I found it
confusing so I fixed it.

ticket 1085

Use TLS for dogtag replication agreements.

2011-03-10T14:57:36+00:00

Configure the dogtag 389-ds instance with SSL so we can enable TLS
for the dogtag replication agreements. The NSS database we use is a
symbolic link to the IPA 389-ds instance.

ticket 1060

chkconfig the ipa service off when it is uninstalled.

2011-03-08T15:23:10+00:00

ticket 1056

Skip DNS validation checks if we're setting up DNS in ipa-server-install.

2011-03-04T16:05:40+00:00

If we're going to be authoritative ourselves don't bother with what
other DNS servers think.

ticket 1036

Use ldapi: instead of unsecured ldap: in ipa core tools.

2011-03-03T19:04:34+00:00

The patch also corrects exception handling in some of the tools.

Fix #874

Inconsistent sysrestore file handling by IPA server installer

2011-03-03T16:02:02+00:00

IPA server/replica uninstallation may fail when it tries to restore
a Directory server configuration file in sysrestore directory, which
was already restored before.

The problem is in Directory Server uninstaller which uses and modifies
its own image of sysrestore directory state instead of using the
common uninstaller image.

https://fedorahosted.org/freeipa/ticket/1026

IPA replica/server install does not check for a client

2011-03-03T15:20:39+00:00

When IPA replica or server is configured it does not check for
possibly installed client. This will cause the installation to
fail in the very end.

This patch adds a check for already configured client and suggests
removing it before server/replica installation.

https://fedorahosted.org/freeipa/ticket/1002

Fixed in ipa-server-install help and man page

2011-02-18T15:00:48+00:00

https://fedorahosted.org/freeipa/ticket/831

Refresh state data before removing the dirsrv user, fixes uninstall.

2011-02-07T19:41:05+00:00

The state is read only at initialization time. This works ok when
individual services remove their state data but when worked upon again
at the top-level it still has the full state in memory, so when the
state file is re-written all of the data that was removed is re-added.

ticket 916

ipa-server-install inconsistent capitalization

2011-02-03T15:34:01+00:00

A cosmetic patch to IPA server installation output aimed to make
capitalization in installer output consistent. Several installation
tasks started with a lowercase letter and several installation
task steps started with an uppercase letter.

https://fedorahosted.org/freeipa/ticket/776