freeipa.git, branch 4084 Unnamed repository; edit this file 'description' to name the repository. Switch httpd to use default CCACHE 2014-01-16T13:12:29+00:00 Martin Kosek mkosek@redhat.com 2014-01-16T13:12:29+00:00 3900c6dd598971c42481da90b21d200eb2ab1922 Stock httpd no longer uses systemd EnvironmentFile option which is making FreeIPA's KRB5CCNAME setting ineffective. This can lead in hard to debug problems during subsequent ipa-server-install's where HTTP may use a stale CCACHE in the default kernel keyring CCACHE. Avoid forcing custom CCACHE and switch to system one, just make sure that it is properly cleaned by kdestroy run as "apache" user during FreeIPA server installation process. https://fedorahosted.org/freeipa/ticket/4084 
Stock httpd no longer uses systemd EnvironmentFile option which is
making FreeIPA's KRB5CCNAME setting ineffective. This can lead in hard
to debug problems during subsequent ipa-server-install's where HTTP
may use a stale CCACHE in the default kernel keyring CCACHE.

Avoid forcing custom CCACHE and switch to system one, just make sure
that it is properly cleaned by kdestroy run as "apache" user during
FreeIPA server installation process.

https://fedorahosted.org/freeipa/ticket/4084
Add runas option to run function 2014-01-16T13:10:42+00:00 Martin Kosek mkosek@redhat.com 2014-01-16T13:10:42+00:00 f5e69b15a070ea94e8651fa8e0d51eb13031219c Run function can now run the specified command as different user by setting the EUID and EGID for executed process. 
Run function can now run the specified command as different user by
setting the EUID and EGID for executed process.
Do not start the service in stopped_service if it was not running before. 2014-01-15T16:44:10+00:00 Jan Cholasta jcholast@redhat.com 2013-10-15T17:49:07+00:00 7ce3320996e9666581a2b4495b5063b5d99aa937 This fixes a possible NSS database corruption in renew_ca_cert. 
This fixes a possible NSS database corruption in renew_ca_cert.
ipaserver/install/installutils: clean up properly after yield 2014-01-15T16:44:10+00:00 Alexander Bokovoy abokovoy@redhat.com 2014-01-15T16:26:10+00:00 cb411ff94e71579e2a608319b1c7eab877b98019 When a context to which we yield generates exception, the code in private_ccache() and stopped_service() didn't get called for cleanup. 
When a context to which we yield generates exception, the code in
private_ccache() and stopped_service() didn't get called for cleanup.
CLDAP: do not prepend \\ 2014-01-15T15:26:09+00:00 Sumit Bose sbose@redhat.com 2014-01-13T09:43:33+00:00 487a8f4749bfff9206564abe43e73c0a8362d05b For NETLOGON_NT_VERSION_5EX requests the prepended \\ is not expected in the PDC NetBIOS name. In general AD seems to be smart enough to handle the two \ signs. But if the NetBIOS name reaches the maximum of 15 character AD does not accept the responses anymore. Fixes https://fedorahosted.org/freeipa/ticket/4028 
For NETLOGON_NT_VERSION_5EX requests the prepended \\ is not expected in
the PDC NetBIOS name. In general AD seems to be smart enough to handle
the two \ signs. But if the NetBIOS name reaches the maximum of 15
character AD does not accept the responses anymore.

Fixes https://fedorahosted.org/freeipa/ticket/4028
trustdomain-find: report status of the (sub)domain 2014-01-15T15:19:26+00:00 Alexander Bokovoy abokovoy@redhat.com 2014-01-15T13:42:10+00:00 0cad0fa1116cf3d23a6a44225d05e4956e3c4d95 Show status of each enumerated domain trustdomain-find shows list of domains associated with the trust. Each domain except the trust forest root can be enabled or disabled with the help of trustdomain-enable and trustdomain-disable commands. https://fedorahosted.org/freeipa/ticket/4096 
Show status of each enumerated domain

trustdomain-find shows list of domains associated with the trust.
Each domain except the trust forest root can be enabled or disabled
with the help of trustdomain-enable and trustdomain-disable commands.

https://fedorahosted.org/freeipa/ticket/4096
trust-fetch-domains: create ranges for new child domains 2014-01-15T14:43:40+00:00 Alexander Bokovoy abokovoy@redhat.com 2014-01-14T11:55:56+00:00 0e2cda9da79b58fc67434d262155e86b718125e4 When trust is added, we do create ranges for discovered child domains. However, this functionality was not available through 'trust-fetch-domains' command. Additionally, make sure non-existing trust will report proper error in trust-fetch-domains. https://fedorahosted.org/freeipa/ticket/4111 https://fedorahosted.org/freeipa/ticket/4104 
When trust is added, we do create ranges for discovered child domains.
However, this functionality was not available through
'trust-fetch-domains' command.

Additionally, make sure non-existing trust will report proper error in
trust-fetch-domains.

https://fedorahosted.org/freeipa/ticket/4111
https://fedorahosted.org/freeipa/ticket/4104
Fix ipa-client-automount uninstall when fstore is empty. 2014-01-15T11:10:05+00:00 Jan Cholasta jcholast@redhat.com 2014-01-15T09:48:10+00:00 e369e3dcade7d85575645bf7a67040248dfd1ccf https://fedorahosted.org/freeipa/ticket/4091 
https://fedorahosted.org/freeipa/ticket/4091
Add missing example to sudorule 2014-01-15T10:01:36+00:00 Martin Kosek mkosek@redhat.com 2014-01-15T08:31:37+00:00 7cc8c3b14b8155fe8d688ea93fd1cf375b2f7f1e https://fedorahosted.org/freeipa/ticket/4090 
https://fedorahosted.org/freeipa/ticket/4090
sudoOrder missing in sudoers 2014-01-15T10:00:35+00:00 Martin Kosek mkosek@redhat.com 2014-01-15T07:58:16+00:00 48ffe39b6b80c4f22ae4e11a85cc3d3fd46e0232 sudoers compat plugin configuration missed the sudoOrder attribute and it thus did not show up in ou=sudoers. Add the definion to update file. https://fedorahosted.org/freeipa/ticket/4107 
sudoers compat plugin configuration missed the sudoOrder attribute
and it thus did not show up in ou=sudoers. Add the definion to update
file.

https://fedorahosted.org/freeipa/ticket/4107