freeipa.git/ipa-client/ipa-install/ipa-client-install, branch WIP

Fix help of --hostname option in ipa-client-install

2012-04-19T17:55:44+00:00

Replace word "server" with "machine" to clearly distinguish between
IPA server and other machines (clients) and to also match the help
with ipa-client-install man pages.

https://fedorahosted.org/freeipa/ticket/1967

Add disovery domain if client domain is different from server domain

2012-03-15T02:06:26+00:00

https://fedorahosted.org/freeipa/ticket/2209

Configure a basic ldap.conf for OpenLDAP in /etc/openldap/ldap.conf

2012-03-15T01:28:52+00:00

Set URI, BASE and TLS_CACERT

Also update the man page to include a list of files that the client
changes.

https://fedorahosted.org/freeipa/ticket/1810

More exception handlers in ipa-client-install

2012-03-09T14:48:27+00:00

Added exception handler to certutil operation of adding CA to the
default NSS database. If operation fails, installation is aborted and
changes are rolled back.

https://fedorahosted.org/freeipa/ticket/2415

If obtaining host TGT fails, the installation is aborted and changes are
rolled back.

https://fedorahosted.org/freeipa/ticket/1995

Do kinit in client before connecting to backend

2012-03-04T22:23:01+00:00

The client installer was failing because a backend connection could be
created before a kinit was done.

Allow multiple simultaneous connections. This could fail with an NSS
shutdown error when the second connection was created (objects still
in use). If all connections currently use the same database then there
is no need to initialize, let it be skipped.

Add additional logging to client installer.

https://fedorahosted.org/freeipa/ticket/2478

ipa-client-install not calling authconfig

2012-03-05T14:46:14+00:00

Option '--noac' was added. If set, the ipa-client-install will not call
authconfig for setting nsswitch.conf and PAM configuration.

https://fedorahosted.org/freeipa/ticket/2369

Configure SSH features of SSSD in ipa-client-install.

2012-03-01T23:42:56+00:00

OpenSSH server (sshd) is configured to fetch user authorized keys from
SSSD and OpenSSH client (ssh) is configured to use and trigger updates
of the SSSD-managed known hosts file.

This requires SSSD 1.8.0.

Use reboot from /sbin

2012-03-02T15:53:47+00:00

According to FHS, the reboot command should live in /sbin.
Systems may also have a symlink in /usr/bin, but they don't have to.

https://fedorahosted.org/freeipa/ticket/2480

Configure ssh and sshd during ipa-client-install.

2012-02-14T03:21:47+00:00

For ssh, VerifyHostKeyDNS option is set to 'yes' if --ssh-trust-dns
ipa-client-install option is used.

For sshd, KerberosAuthentication, GSSAPIAuthentication and UsePAM
options are enabled (this can be disabled using --no-sshd
ipa-client-install option).

ticket 1634

Update host SSH public keys on the server during client install.

2012-02-14T03:21:43+00:00

This is done by calling host-mod to update the keys on IPA server and nsupdate
to update DNS SSHFP records. DNS update can be disabled using --no-dns-sshfp
ipa-client-install option.

https://fedorahosted.org/freeipa/ticket/1634