freeipa.git/install/tools, branch patternfly

admin tools: Log IPA version

2014-05-27T10:08:55+00:00

Add the IPA version, and vendor version if applicable, to the beginning
of admintool logs -- both framework and indivitual tools that don't yet
use the framework.
This will make debugging easier.

https://fedorahosted.org/freeipa/ticket/4219

Reviewed-By: Alexander Bokovoy

Fixed typo in ipa-replica-manage man page

2014-05-12T16:43:07+00:00

Reviewed-By: Nathaniel McCallum

Adding verb to error message to make it less confusing.

2014-05-06T11:51:53+00:00

Reviewed-By: Tomas Babej

Update certmonger configuration in ipa-upgradeconfig.

2014-03-25T15:54:56+00:00

Reviewed-By: Petr Viktorin

Use the same certmonger configuration for both CA masters and clones.

2014-03-25T15:54:55+00:00

Reviewed-By: Petr Viktorin

Store information about which CA server is master for renewals in LDAP.

2014-03-25T15:54:55+00:00

Reviewed-By: Petr Viktorin

Use dogtag-ipa-ca-renew-agent to track certificates on master CA.

2014-03-25T15:54:55+00:00

Before, dogtag-ipa-renew-agent was used to track the certificates and the
certificates were stored to LDAP in renew_ca_cert and renew_ra_cert. Since
dogtag-ipa-ca-renew-agent can store the certificates itself, the storage code
was removed from renew_ca_cert and renew_ra_cert.

Reviewed-By: Petr Viktorin

Show progress when enabling SSL in DS in ipa-server-install output.

2014-03-25T15:54:54+00:00

Reviewed-By: Petr Viktorin

Upload CA certificate from DS NSS database in CA-less server install.

2014-03-25T15:54:54+00:00

Before, the file provided in the --root-ca-file option was used directly for
the upload. However, it is the same file which is imported to the NSS
database, so the second code path is not necessary.

Also removed now unused upload_ca_dercert method of dsinstance.

Reviewed-By: Petr Viktorin

Do not create CA certificate files in CA-less server install.

2014-03-25T15:54:54+00:00

The files are created later by ipa-client-install, there's no need to do it
twice.

This also fixes a bug in CA-less, where the CA certificate is not removed from
/etc/pki/nssdb after client uninstall, because it has a different nickname.

Reviewed-By: Petr Viktorin