<feed xmlns='http://www.w3.org/2005/Atom'>
<title>freeipa.git/install/tools/man, branch WIP</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.</subtitle>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/'/>
<entry>
<title>Fix typos in ipa-replica-manage man page</title>
<updated>2012-03-02T13:38:45+00:00</updated>
<author>
<name>Martin Kosek</name>
<email>mkosek@redhat.com</email>
</author>
<published>2012-03-02T13:36:33+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/commit/?id=1cc761353bad6d279cd7d14939f67baef784433f'/>
<id>1cc761353bad6d279cd7d14939f67baef784433f</id>
<content type='text'>
Based on contribution by Brian Harrington.

https://fedorahosted.org/freeipa/ticket/2428
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Based on contribution by Brian Harrington.

https://fedorahosted.org/freeipa/ticket/2428
</pre>
</div>
</content>
</entry>
<entry>
<title>Warn that deleting replica is irreversible, try to detect reconnection.</title>
<updated>2012-02-29T15:20:49+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2012-02-24T23:17:47+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/commit/?id=2d555256526827564f89d941c2d2b31815378a6b'/>
<id>2d555256526827564f89d941c2d2b31815378a6b</id>
<content type='text'>
Using ipa-replica-manage del &lt;replica&gt; is irreversible. You can't
turn around and do a connect to it, all heck will break loose. This is
because we clean up all references to the replica when we delete so if
we connect to it again we'll end up deleting all of its principals.

When a connection is deleted then the agreement is removed on both sides.
What isn't removed is the nsDS5ReplicaBindDN so we can use that to
determine if we previously had a connection.

https://fedorahosted.org/freeipa/ticket/2126
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Using ipa-replica-manage del &lt;replica&gt; is irreversible. You can't
turn around and do a connect to it, all heck will break loose. This is
because we clean up all references to the replica when we delete so if
we connect to it again we'll end up deleting all of its principals.

When a connection is deleted then the agreement is removed on both sides.
What isn't removed is the nsDS5ReplicaBindDN so we can use that to
determine if we previously had a connection.

https://fedorahosted.org/freeipa/ticket/2126
</pre>
</div>
</content>
</entry>
<entry>
<title>Ease zonemgr restrictions</title>
<updated>2012-02-20T14:34:45+00:00</updated>
<author>
<name>Martin Kosek</name>
<email>mkosek@redhat.com</email>
</author>
<published>2012-02-20T12:40:13+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/commit/?id=e10af0b764fb2d042c6ad730866af508f231c8cb'/>
<id>e10af0b764fb2d042c6ad730866af508f231c8cb</id>
<content type='text'>
Admin e-mail validator currently requires an email to be in
a second-level domain (hostmaster@example.com). This is too
restrictive. Top level domain e-mails (hostmaster@testrelm)
should also be allowed.

This patch also fixes default zonemgr value in help texts and man
pages.

https://fedorahosted.org/freeipa/ticket/2272
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Admin e-mail validator currently requires an email to be in
a second-level domain (hostmaster@example.com). This is too
restrictive. Top level domain e-mails (hostmaster@testrelm)
should also be allowed.

This patch also fixes default zonemgr value in help texts and man
pages.

https://fedorahosted.org/freeipa/ticket/2272
</pre>
</div>
</content>
</entry>
<entry>
<title>Configure ssh and sshd during ipa-client-install.</title>
<updated>2012-02-14T03:21:47+00:00</updated>
<author>
<name>Jan Cholasta</name>
<email>jcholast@redhat.com</email>
</author>
<published>2011-12-07T08:49:09+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/commit/?id=c00bf9e38afa4867f4ec397b260f2e467163096d'/>
<id>c00bf9e38afa4867f4ec397b260f2e467163096d</id>
<content type='text'>
For ssh, VerifyHostKeyDNS option is set to 'yes' if --ssh-trust-dns
ipa-client-install option is used.

For sshd, KerberosAuthentication, GSSAPIAuthentication and UsePAM
options are enabled (this can be disabled using --no-sshd
ipa-client-install option).

ticket 1634
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
For ssh, VerifyHostKeyDNS option is set to 'yes' if --ssh-trust-dns
ipa-client-install option is used.

For sshd, KerberosAuthentication, GSSAPIAuthentication and UsePAM
options are enabled (this can be disabled using --no-sshd
ipa-client-install option).

ticket 1634
</pre>
</div>
</content>
</entry>
<entry>
<title>Update host SSH public keys on the server during client install.</title>
<updated>2012-02-14T03:21:43+00:00</updated>
<author>
<name>Jan Cholasta</name>
<email>jcholast@redhat.com</email>
</author>
<published>2011-12-07T08:40:51+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/commit/?id=c34f5fbc882b16baebc18d795511e8e1fc50668b'/>
<id>c34f5fbc882b16baebc18d795511e8e1fc50668b</id>
<content type='text'>
This is done by calling host-mod to update the keys on IPA server and nsupdate
to update DNS SSHFP records. DNS update can be disabled using --no-dns-sshfp
ipa-client-install option.

https://fedorahosted.org/freeipa/ticket/1634
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This is done by calling host-mod to update the keys on IPA server and nsupdate
to update DNS SSHFP records. DNS update can be disabled using --no-dns-sshfp
ipa-client-install option.

https://fedorahosted.org/freeipa/ticket/1634
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix/add options in ipa-managed-entries man page</title>
<updated>2012-02-07T08:56:20+00:00</updated>
<author>
<name>Petr Viktorin</name>
<email>pviktori@redhat.com</email>
</author>
<published>2012-02-06T12:59:47+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/commit/?id=5362b0b566c39f04382ad3e55080d4e68a140348'/>
<id>5362b0b566c39f04382ad3e55080d4e68a140348</id>
<content type='text'>
* The --entry option was wrongly listed as --entries; fix that.
  https://fedorahosted.org/freeipa/ticket/2277

* Add the --help option
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
* The --entry option was wrongly listed as --entries; fix that.
  https://fedorahosted.org/freeipa/ticket/2277

* Add the --help option
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix 'no-reverse' option description</title>
<updated>2012-02-02T22:50:55+00:00</updated>
<author>
<name>Ondrej Hamada</name>
<email>ohamada@redhat.com</email>
</author>
<published>2012-01-31T14:16:56+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/commit/?id=2e860f6d070db3b2fe8799891c3e568ac48a1fac'/>
<id>2e860f6d070db3b2fe8799891c3e568ac48a1fac</id>
<content type='text'>
The description of 'no-reverse' option was fixed in both code and
manpages of ipa-replica-install and ipa-dns-install.

https://fedorahosted.org/freeipa/ticket/2161
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The description of 'no-reverse' option was fixed in both code and
manpages of ipa-replica-install and ipa-dns-install.

https://fedorahosted.org/freeipa/ticket/2161
</pre>
</div>
</content>
</entry>
<entry>
<title>Update and package ipa-upgradeconfig man page.</title>
<updated>2012-01-23T15:07:49+00:00</updated>
<author>
<name>Rob Crittenden</name>
<email>rcritten@redhat.com</email>
</author>
<published>2012-01-20T18:30:25+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/commit/?id=f3b606b627ea317e87b89ffb6ce2f0fb745f38aa'/>
<id>f3b606b627ea317e87b89ffb6ce2f0fb745f38aa</id>
<content type='text'>
Require that the tool be run as root to avoid a permission-related
backtrace.

https://fedorahosted.org/freeipa/ticket/1758
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Require that the tool be run as root to avoid a permission-related
backtrace.

https://fedorahosted.org/freeipa/ticket/1758
</pre>
</div>
</content>
</entry>
<entry>
<title>Let replicas install without DNS</title>
<updated>2012-01-13T08:11:05+00:00</updated>
<author>
<name>Martin Kosek</name>
<email>mkosek@redhat.com</email>
</author>
<published>2012-01-04T19:04:21+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/commit/?id=95f3ec5d7053a54a393daf1f7d9a93be9d8a64fe'/>
<id>95f3ec5d7053a54a393daf1f7d9a93be9d8a64fe</id>
<content type='text'>
Let ipa-replica-prepare and ipa-replica-install work without
proper DNS records as records in /etc/hosts are sufficient for
DS replication.

  1) ipa-replica-prepare now just checks if the replica hostname
     is resolvable (DNS records are not required). It is now able
     to prepare a replica file even when the replica IP address is
     present in /etc/hosts only.
  2) ipa-replica-install is now able to proceed when the hostname
     is not resolvable. It uses an IP address passed in a new
     option --ip-address to create a record in /etc/hosts in the
     same way as ipa-server-install does.

https://fedorahosted.org/freeipa/ticket/2139
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Let ipa-replica-prepare and ipa-replica-install work without
proper DNS records as records in /etc/hosts are sufficient for
DS replication.

  1) ipa-replica-prepare now just checks if the replica hostname
     is resolvable (DNS records are not required). It is now able
     to prepare a replica file even when the replica IP address is
     present in /etc/hosts only.
  2) ipa-replica-install is now able to proceed when the hostname
     is not resolvable. It uses an IP address passed in a new
     option --ip-address to create a record in /etc/hosts in the
     same way as ipa-server-install does.

https://fedorahosted.org/freeipa/ticket/2139
</pre>
</div>
</content>
</entry>
<entry>
<title>Add DNS service records for Windows</title>
<updated>2011-11-30T10:28:39+00:00</updated>
<author>
<name>Sumit Bose</name>
<email>sbose@redhat.com</email>
</author>
<published>2011-10-13T10:01:57+00:00</published>
<link rel='alternate' type='text/html' href='https://fedorapeople.org/cgit/sbose/public_git/freeipa.git/commit/?id=2ac9d4816a85822825257e16f4fcf74e15a8ea02'/>
<id>2ac9d4816a85822825257e16f4fcf74e15a8ea02</id>
<content type='text'>
https://fedorahosted.org/freeipa/ticket/1939
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
https://fedorahosted.org/freeipa/ticket/1939
</pre>
</div>
</content>
</entry>
</feed>
