freeipa.git/install/tools/ipa-server-install, branch patternfly

admin tools: Log IPA version

2014-05-27T10:08:55+00:00

Add the IPA version, and vendor version if applicable, to the beginning
of admintool logs -- both framework and indivitual tools that don't yet
use the framework.
This will make debugging easier.

https://fedorahosted.org/freeipa/ticket/4219

Reviewed-By: Alexander Bokovoy

Store information about which CA server is master for renewals in LDAP.

2014-03-25T15:54:55+00:00

Reviewed-By: Petr Viktorin

Show progress when enabling SSL in DS in ipa-server-install output.

2014-03-25T15:54:54+00:00

Reviewed-By: Petr Viktorin

Upload CA certificate from DS NSS database in CA-less server install.

2014-03-25T15:54:54+00:00

Before, the file provided in the --root-ca-file option was used directly for
the upload. However, it is the same file which is imported to the NSS
database, so the second code path is not necessary.

Also removed now unused upload_ca_dercert method of dsinstance.

Reviewed-By: Petr Viktorin

Do not create CA certificate files in CA-less server install.

2014-03-25T15:54:54+00:00

The files are created later by ipa-client-install, there's no need to do it
twice.

This also fixes a bug in CA-less, where the CA certificate is not removed from
/etc/pki/nssdb after client uninstall, because it has a different nickname.

Reviewed-By: Petr Viktorin

Move CACERT definition to a single place.

2014-03-25T15:54:54+00:00

Reviewed-By: Petr Viktorin

Update Dogtag 9 database during replica installation

2014-03-14T13:26:38+00:00

When Dogtag 10 based FreeIPA replica is being installed for a Dogtag 9
based master, the PKI database is not updated and miss several ACLs
which prevent some of the PKI functions, e.g. an ability to create
other clones.

Add an update file to do the database update. Content is based on
recommendation from PKI team:
   * https://bugzilla.redhat.com/show_bug.cgi?id=1075118#c9

This update file can be removed when Dogtag database upgrades are done
in PKI component. Upstream tickets:
   * https://fedorahosted.org/pki/ticket/710 (database upgrade framework)
   * https://fedorahosted.org/pki/ticket/906 (checking database version)

Also make sure that PKI service is restarted in the end of the installation
as the other services to make sure it picks changes done during LDAP
updates.

https://fedorahosted.org/freeipa/ticket/4243

Reviewed-By: Alexander Bokovoy 
Reviewed-By: Petr Viktorin

Typo in warning message where IPA realm and domain name differ

2014-03-05T08:58:16+00:00

Removed 'y' from warning message.

https://fedorahosted.org/freeipa/ticket/4211

Reviewed-By: Simo Sorce

Convert remaining installer code to LDAPEntry API.

2014-01-24T19:29:31+00:00

Use /usr/bin/python2

2014-01-03T08:46:05+00:00

Part of the effort to port FreeIPA to Arch Linux,
where Python 3 is the default.

FreeIPA hasn't been ported to Python 3, so the code must be modified to
run /usr/bin/python2

https://fedorahosted.org/freeipa/ticket/3438

Updated by pviktori@redhat.com