<feed xmlns='http://www.w3.org/2005/Atom'>
<title>freeipa.git/ipa-client/ipa-install, branch selenium</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/'/>
<entry>
<title>Ensure that the system hostname is lower-case.</title>
<updated>2011-03-18T18:54:01+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-03-17T14:22:33+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=15e213d0258f69feaf6031a8721902f63c864ac2'/>
<id>15e213d0258f69feaf6031a8721902f63c864ac2</id>
<content type='text'>
ticket 1080
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
ticket 1080
</pre>
</div>
</content>
</entry>
<entry>
<title>Always consider domain and server when doing DNS discovery in client.</title>
<updated>2011-03-15T15:01:03+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-03-15T13:12:35+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=a36bc4ee93d13c28f8edf2bb94eb4dbfc25be568'/>
<id>a36bc4ee93d13c28f8edf2bb94eb4dbfc25be568</id>
<content type='text'>
When not on master we weren't passing in the user-supplied domain and
server. Because of changes made that require TLS on the LDAP calls
we always need the server name early in the process to retrieve the IPA
CA certificate.

ticket 1090
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
When not on master we weren't passing in the user-supplied domain and
server. Because of changes made that require TLS on the LDAP calls
we always need the server name early in the process to retrieve the IPA
CA certificate.

ticket 1090
</pre>
</div>
</content>
</entry>
<entry>
<title>If --hostname is provided for ipa-client-install use it everywhere.</title>
<updated>2011-03-08T15:23:07+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-03-04T22:53:42+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=3735450ab8089c64f196899ab6af2447d1c4a2fc'/>
<id>3735450ab8089c64f196899ab6af2447d1c4a2fc</id>
<content type='text'>
If a hostname was provided it wasn't used to configure either
certmonger or sssd. This resulted in a non-working configuration.

Additionally on un-enrollment the wrong hostname was unenrolled, it
used the value of gethostname() rather than the one that was passed
into the installer.

We have to modify the CA configuration of certmonger to make it
use the right principal when requesting certificates. The filename
is unpredicable but it will be in /var/lib/certmonger/cas.
We need to hunt for ipa_submit and add -k &lt;principal&gt; to it, then
undo that on uninstall. These files are created the first time
the certmonger service starts, so start and stop it before messing
with them.

ticket 1029
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
If a hostname was provided it wasn't used to configure either
certmonger or sssd. This resulted in a non-working configuration.

Additionally on un-enrollment the wrong hostname was unenrolled, it
used the value of gethostname() rather than the one that was passed
into the installer.

We have to modify the CA configuration of certmonger to make it
use the right principal when requesting certificates. The filename
is unpredicable but it will be in /var/lib/certmonger/cas.
We need to hunt for ipa_submit and add -k &lt;principal&gt; to it, then
undo that on uninstall. These files are created the first time
the certmonger service starts, so start and stop it before messing
with them.

ticket 1029
</pre>
</div>
</content>
</entry>
<entry>
<title>Always try to stop tracking the server cert when uninstalling client.</title>
<updated>2011-03-08T15:23:03+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-03-04T18:09:19+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=61d70657ab93bb4ce74013dcfef9b9592460caaf'/>
<id>61d70657ab93bb4ce74013dcfef9b9592460caaf</id>
<content type='text'>
stop_tracking() is robust enough to do the right thing if no certificate
exists so go ahead and always call it. If the certificate failed to
be issued for some reason the request will still in certmonger
after uninstalling. This would cause problems when trying to reinstall
the client. This will go ahead and always tell certmonger to stop
tracking it.

ticket 1028
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
stop_tracking() is robust enough to do the right thing if no certificate
exists so go ahead and always call it. If the certificate failed to
be issued for some reason the request will still in certmonger
after uninstalling. This would cause problems when trying to reinstall
the client. This will go ahead and always tell certmonger to stop
tracking it.

ticket 1028
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix kinit invocation in ipa-client-install</title>
<updated>2011-03-01T22:49:45+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>ssorce@redhat.com</email>
</author>
<published>2011-02-25T22:05:12+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=998dd701a728465aa70fe8041aa8daf8c0f1eefc'/>
<id>998dd701a728465aa70fe8041aa8daf8c0f1eefc</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Set krb5_realm in sssd.conf in the ipa provider.</title>
<updated>2011-02-22T14:06:58+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-02-21T15:25:52+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=e7ed4035b5bc7bf57d54f5b8dfd789af16671d4b'/>
<id>e7ed4035b5bc7bf57d54f5b8dfd789af16671d4b</id>
<content type='text'>
ticket 925
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
ticket 925
</pre>
</div>
</content>
</entry>
<entry>
<title>Try to register DNS name through a DNS Update on install.</title>
<updated>2011-02-18T00:43:52+00:00</updated>
<author>
<name>Simo Sorce</name>
<email>ssorce@redhat.com</email>
</author>
<published>2011-02-17T13:30:36+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=eab4e36ee50a4d924d7889a167f4917fa9bf6136'/>
<id>eab4e36ee50a4d924d7889a167f4917fa9bf6136</id>
<content type='text'>
Fixes: https://fedorahosted.org/freeipa/ticket/935
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Fixes: https://fedorahosted.org/freeipa/ticket/935
</pre>
</div>
</content>
</entry>
<entry>
<title>Configure SSSD to use DNS to find the IPA server by default.</title>
<updated>2011-02-17T22:12:42+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2011-02-17T20:19:24+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=cd2365bf6489d91db89ce23dbe112158e17f79b0'/>
<id>cd2365bf6489d91db89ce23dbe112158e17f79b0</id>
<content type='text'>
Add the server we registered with as a fallback.

ticket 980
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Add the server we registered with as a fallback.

ticket 980
</pre>
</div>
</content>
</entry>
<entry>
<title>Bugfix for ipa-client-install echo's password in cleartext to stdout https://fedorahosted.org/freeipa/ticket/959</title>
<updated>2011-02-14T20:43:18+00:00</updated>
<author>
<name>Jr Aquino</name>
<email>jr.aquino@citrix.com</email>
</author>
<published>2011-02-14T20:00:49+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=72e315c9362e2831a0a425bb7651ddc419cf5e97'/>
<id>72e315c9362e2831a0a425bb7651ddc419cf5e97</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Detection of v1 server during ipa-client-install</title>
<updated>2011-02-14T20:03:32+00:00</updated>
<author>
<name>Martin Kosek</name>
<email>mkosek@redhat.com</email>
</author>
<published>2011-02-03T16:20:26+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/edewata/public_git/freeipa.git/commit/?id=309ed42865715dbc652f1946320ecb522267e97c'/>
<id>309ed42865715dbc652f1946320ecb522267e97c</id>
<content type='text'>
When v2 IPA client is trying to join an IPA v1 server
a strange exception is printed out to the user. This patch
detects this by catching an XML-RPC error reported by ipa-join
binary called in the process which fails on unexisting IPA server
'join' method.

https://fedorahosted.org/freeipa/ticket/553
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
When v2 IPA client is trying to join an IPA v1 server
a strange exception is printed out to the user. This patch
detects this by catching an XML-RPC error reported by ipa-join
binary called in the process which fails on unexisting IPA server
'join' method.

https://fedorahosted.org/freeipa/ticket/553
</pre>
</div>
</content>
</entry>
</feed>
