freeipa.git/install, branch 4084

Switch httpd to use default CCACHE

2014-01-16T13:12:29+00:00

Stock httpd no longer uses systemd EnvironmentFile option which is
making FreeIPA's KRB5CCNAME setting ineffective. This can lead in hard
to debug problems during subsequent ipa-server-install's where HTTP
may use a stale CCACHE in the default kernel keyring CCACHE.

Avoid forcing custom CCACHE and switch to system one, just make sure
that it is properly cleaned by kdestroy run as "apache" user during
FreeIPA server installation process.

https://fedorahosted.org/freeipa/ticket/4084

sudoOrder missing in sudoers

2014-01-15T10:00:35+00:00

sudoers compat plugin configuration missed the sudoOrder attribute
and it thus did not show up in ou=sudoers. Add the definion to update
file.

https://fedorahosted.org/freeipa/ticket/4107

Enable Retro Changelog and Content Synchronization DS plugins

2014-01-14T15:37:56+00:00

Enable Retro Changelog and Content Synchronization DS plugins which are required
for SyncRepl support.

Create a working directory /var/named/ipa required by bind-dyndb-ldap v4+.

https://fedorahosted.org/freeipa/ticket/3967

acl: Remove krbPrincipalExpiration from list of admin's excluded attrs

2014-01-14T14:22:27+00:00

Since we're exposing the krbPrincipalExpiration attribute for direct
editing in the CLI, remove it from the list of attributes that
admin cannot edit by default.

Part of: https://fedorahosted.org/freeipa/ticket/3306

Revert restart scripts file permissions change

2014-01-08T08:54:53+00:00

Previous commit accidentally added executable permission to
restart_pkicad and stop_pkicad.

PKI service restart after CA renewal failed

2014-01-08T08:47:23+00:00

Fix both the service restart procedure and registration of old
pki-cad well known service name.

This patch was adapted from original patch of Jan Cholasta 178 to
fix ticket 4092.

https://fedorahosted.org/freeipa/ticket/4092

Use /usr/bin/python2

2014-01-03T08:46:05+00:00

Part of the effort to port FreeIPA to Arch Linux,
where Python 3 is the default.

FreeIPA hasn't been ported to Python 3, so the code must be modified to
run /usr/bin/python2

https://fedorahosted.org/freeipa/ticket/3438

Updated by pviktori@redhat.com

Fix incorrect path in error message on sysrestore failure

2013-12-20T15:04:22+00:00

On sysrestore failure, user is prompted out to remove the sysrestore
file. However, the path to the sysrestore file mentioned in the
sentence is not correct.

https://fedorahosted.org/freeipa/ticket/4080

Prevent garbage from readline on standard output of dogtag-ipa-retrieve-agent.

2013-12-20T13:31:05+00:00

https://fedorahosted.org/freeipa/ticket/4064

Increase stack size for Web UI builder

2013-12-13T14:17:48+00:00

Web UI build fails on some architectures or configuration due to
StackOverflow. This patch increases the stack size to solve it.

512k is usually enough but we encountered fail on ppc64 even with 2m,
therefore the 8m. The build is single threaded so it shouldn't waste
much memory.