summaryrefslogtreecommitdiffstats
path: root/ipaserver/install/server/upgrade.py
Commit message (Expand)AuthorAgeFilesLines
* Move config templates from install/conf to install/shareTimo Aaltonen2018-02-091-3/+6
* Replace wsgi package conflict with config fileChristian Heimes2018-02-091-0/+7
* Fix detection of KRA installation so upgrades can succeedRob Crittenden2018-02-081-2/+2
* Enable ephemeral KRA requestsRob Crittenden2017-12-151-11/+28
* Run server upgrade in ipactl start/restartRob Crittenden2017-12-121-3/+3
* Use os.path.isfile() and isdir()Christian Heimes2017-10-201-1/+1
* ipa-server-upgrade: do not add untracked certs to the request listFlorence Blanc-Renaud2017-10-171-13/+30
* ipa-server-upgrade: fix the logic for tracking certsFlorence Blanc-Renaud2017-10-171-11/+11
* Make sure upgrade also checks for IPv6 stackAlexander Bokovoy2017-09-191-0/+1
* Fix ipa-server-upgrade with server cert trackingFlorence Blanc-Renaud2017-09-191-2/+2
* Fixing how sssd.conf is updated when promoting a client to replicaFelipe Volpone2017-09-121-0/+4
* Move tmpfiles.d configuration handling back to spec fileMartin Babinsky2017-08-301-4/+0
* x509: Make certificates represented as objectsStanislav Laznicka2017-07-271-1/+1
* logging: do not log into the root loggerJan Cholasta2017-07-141-215/+225
* install: do not assume /etc/krb5.conf.d existsJan Cholasta2017-06-281-0/+33
* Turn off OCSP checkPavel Vomacka2017-06-061-22/+3
* server upgrade: do not enable PKINIT by defaultJan Cholasta2017-06-061-8/+2
* py3: update_mod_nss_cipher_suite: ordering doesn't work with NoneMartin Basti2017-06-011-1/+1
* py3: use ConfigParser instead of SafeConfigParserMartin Basti2017-06-011-1/+5
* server install: fix KDC PKINIT configurationJan Cholasta2017-05-191-13/+44
* client install: fix client PKINIT configurationJan Cholasta2017-05-191-1/+3
* certdb: use custom object for trust flagsJan Cholasta2017-05-191-1/+1
* certdb: add named trust flag constantsJan Cholasta2017-05-191-2/+2
* renew agent: get rid of virtual profilesJan Cholasta2017-05-151-1/+1
* cainstance: use correct profile for lightweight CA certificatesJan Cholasta2017-05-151-0/+16
* server upgrade: always fix certmonger tracking requestJan Cholasta2017-05-151-21/+7
* Turn on NSSOCSP check in mod_nss confPavel Vomacka2017-05-101-0/+25
* upgrade: add missing suffix to http instanceTomas Krizek2017-05-051-0/+1
* Use proper SELinux context with http.keytabMartin Basti2017-05-031-1/+9
* Do not test anonymous PKINIT after install/upgradeMartin Babinsky2017-04-281-1/+0
* Upgrade: configure local/full PKINIT depending on the master statusMartin Babinsky2017-04-281-6/+9
* Stop requesting anonymous keytab and purge all references of itMartin Babinsky2017-04-281-1/+0
* Create system users for FreeIPA services during package installationDavid Kupka2017-04-111-2/+0
* Remove duplicate functionality in upgradeMartin Babinsky2017-03-301-15/+1
* Ensure KDC is propery configured after upgradeMartin Babinsky2017-03-301-5/+5
* Upgrade: configure PKINIT after adding anonymous principalMartin Babinsky2017-03-301-1/+1
* httpinstance: disable system trust module in /etc/httpd/aliasJan Cholasta2017-03-141-0/+16
* Support certificate login after installation and upgradePavel Vomacka2017-03-141-0/+5
* server install: do not attempt to issue PKINIT cert in CA-lessJan Cholasta2017-03-021-13/+26
* Fix CA-less upgradeStanislav Laznicka2017-03-011-1/+1
* Define template version in certmap.confFlorence Blanc-Renaud2017-03-011-1/+4
* Moving ipaCert from HTTPD_ALIAS_DIRStanislav Laznicka2017-03-011-97/+64
* Move RA agent certificate file export to a different locationStanislav Laznicka2017-03-011-5/+5
* Remove DM password files after successfull pkispawn runStanislav Laznicka2017-02-231-0/+22
* Remove ra_db argument from CAInstance initStanislav Laznicka2017-02-231-1/+1
* Fix ipa-server-upgradeStanislav Laznicka2017-02-231-1/+2
* server upgrade: uninstall ipa_memcached properlyJan Cholasta2017-02-201-4/+2
* server upgrade: always upgrade KRA agent PEM fileJan Cholasta2017-02-201-3/+4
* Add password to certutil calls in NSSDatabaseStanislav Laznicka2017-02-171-0/+6
* pkinit: make sure to have proper dictionary for Kerberos instance on upgradeAlexander Bokovoy2017-02-161-0/+12