freeipa.git/install, branch master

Prototype

2011-03-25T22:32:29+00:00

Automatically update IPA LDAP on rpm upgrades

2011-03-21T17:23:53+00:00

Re-enable ldapi code in ipa-ldap-updater and remove the searchbase
restriction when run in --upgrade mode. This allows us to autobind
giving root Directory Manager powers.

This also:
 * corrects the ipa-ldap-updater man page
 * remove automatic --realm, --server, --domain options
 * handle upgrade errors properly
 * saves a copy of dse.ldif before we change it so it can be recovered
 * fixes an error discovered by pylint

ticket 1087

pwpolicy priority

2011-03-18T20:06:08+00:00

Priority is now a required field in order to add a new password policy.  Thus, not having the field present means we cannot create one.

https://fedorahosted.org/freeipa/ticket/1102

Update translation file (ipa.pot).

2011-03-18T18:59:34+00:00

Fix SELinux errors caused by enabling TLS on dogtag 389-ds instance.

2011-03-15T18:09:57+00:00

This fixes 2 AVCS:

* One because we are enabling port 7390 because an SSL port must be
  defined to use TLS On 7389.
* We were symlinking to the main IPA 389-ds NSS certificate databsae.
  Instead generate a separate NSS database and certificate and have
  certmonger track it separately

I also noticed some variable inconsistency in cainstance.py. Everywhere
else we use self.fqdn and that was using self.host_name. I found it
confusing so I fixed it.

ticket 1085

Use TLS for dogtag replication agreements.

2011-03-10T14:57:36+00:00

Configure the dogtag 389-ds instance with SSL so we can enable TLS
for the dogtag replication agreements. The NSS database we use is a
symbolic link to the IPA 389-ds instance.

ticket 1060

Fixed self service page.

2011-03-08T22:05:01+00:00

Collaborated with ayoung to fix this problem:
https://fedorahosted.org/freeipa/ticket/1070

chkconfig the ipa service off when it is uninstalled.

2011-03-08T15:23:10+00:00

ticket 1056

Improve error handling and return status codes in ipactl

2011-03-07T23:16:48+00:00

There are cases when ipactl returns success even when it fails. Plus,
when the error really is detected the status codes are not LSB
compliant. This may result in consequent issues.

This patch improves error handling in ipactl and adds LSB compliant
status codes. Namely:

0   program is running or service is OK
3   program is not running
4   program or service status is unknown

for "status" action. Status code 4 is issued when IPA is not
configured to distinguish this state from not running IPA.

For other actions, the following non-zero status codes are
implemented:

1   generic or unspecified error
2   invalid or excess argument(s)
4   user had insufficient privilege
6   program is not configured

https://fedorahosted.org/freeipa/ticket/1055

Fixed memory leak caused by certificate dialogs.

2011-03-07T19:53:29+00:00

Ticket 1054