freeipa.git/ipa-client/ipa-install/ipa-client-install, branch navigation

ipa-client-install uninstall does not work on IPA server

2011-04-29T20:32:59+00:00

When IPA server is being uninstalled, IPA client on-master
uninstallation which is called by the script fails.

https://fedorahosted.org/freeipa/ticket/1197

Forbid reinstallation in ipa-client-install

2011-04-29T07:28:37+00:00

The --force option may be misused to reinstall an existing IPA
client. This is not supported and may lead to unexpected errors.
When required, the cleanest way to re-install IPA client is to
run uninstall and then install again.

This patch also includes few cosmetic changes in messages to user
to provide more consistent user experience with the script.

https://fedorahosted.org/freeipa/ticket/1117

Prevent uninstalling client on the IPA server

2011-04-29T07:23:59+00:00

This patch prevents uninstalling IPA client when it is configured
as a part of IPA server. ipa-server-installation script is advised
for this situation.

https://fedorahosted.org/freeipa/ticket/1049

Log temporary files in ipa-client-install

2011-04-28T08:02:18+00:00

This patch adds logging of temporary files (Kerberos configuration,
nsupdate commands) that may be very useful for debugging purposes.

https://fedorahosted.org/freeipa/ticket/1093
https://fedorahosted.org/freeipa/ticket/1094

Suppress --on-master from ipa-client-install command-line and man page.

2011-04-12T07:31:56+00:00

This option is only used when configuring an IPA client on an IPA server.
Describing it on the command-line will only confuse people so don't
list it as an option.

Ticket 1050

Ensure that the system hostname is lower-case.

2011-03-18T18:54:01+00:00

ticket 1080

Always consider domain and server when doing DNS discovery in client.

2011-03-15T15:01:03+00:00

When not on master we weren't passing in the user-supplied domain and
server. Because of changes made that require TLS on the LDAP calls
we always need the server name early in the process to retrieve the IPA
CA certificate.

ticket 1090

If --hostname is provided for ipa-client-install use it everywhere.

2011-03-08T15:23:07+00:00

If a hostname was provided it wasn't used to configure either
certmonger or sssd. This resulted in a non-working configuration.

Additionally on un-enrollment the wrong hostname was unenrolled, it
used the value of gethostname() rather than the one that was passed
into the installer.

We have to modify the CA configuration of certmonger to make it
use the right principal when requesting certificates. The filename
is unpredicable but it will be in /var/lib/certmonger/cas.
We need to hunt for ipa_submit and add -k  to it, then
undo that on uninstall. These files are created the first time
the certmonger service starts, so start and stop it before messing
with them.

ticket 1029

Always try to stop tracking the server cert when uninstalling client.

2011-03-08T15:23:03+00:00

stop_tracking() is robust enough to do the right thing if no certificate
exists so go ahead and always call it. If the certificate failed to
be issued for some reason the request will still in certmonger
after uninstalling. This would cause problems when trying to reinstall
the client. This will go ahead and always tell certmonger to stop
tracking it.

ticket 1028

Fix kinit invocation in ipa-client-install

2011-03-01T22:49:45+00:00