freeipa.git/ipa-client/ipaclient, branch WIP

Check through all LDAP servers in the domain during IPA discovery

2011-12-09T05:19:57+00:00

When discovering IPA LDAP servers through DNS records, look through all
servers found until first success. A master might be not available or
denied access but replica may succeed.

Ticket #1827
https://fedorahosted.org/freeipa/ticket/1827

ticket 2022 - modify codebase to utilize IPALogManager, obsoletes logging

2011-11-23T08:36:18+00:00

change default_logger_level to debug in configure_standard_logging

add new ipa_log_manager module, move log_mgr there, also export
root_logger from log_mgr.

change all log_manager imports to ipa_log_manager and change
log_manager.root_logger to root_logger.

add missing import for parse_log_level()

ipa-client-install hangs if the discovered server is unresponsive

2011-10-12T04:50:22+00:00

Add a timeout to the wget call to cover a case when autodiscovered
server does not response to our attempt to download ca.crt. Let
user specify a different IPA server in that case.

https://fedorahosted.org/freeipa/ticket/1960

Before kinit, try to sync time with the NTP servers of the domain we are joining

2011-10-06T09:16:41+00:00

When running ipa-client-install on a system whose clock is not in sync
with the master, kinit fails and enrollment is aborted. Manual checking
of current time at the master and adjusting on the client-to-be is then
needed.

The patch tries to fetch SRV records for NTP servers of the domain we aim
to join and runs ntpdate to get time synchronized. If no SRV records are
found, sync with IPA server itself.  If that fails, warn that time might
be not in sync with KDC.

https://fedorahosted.org/freeipa/ticket/1773

Setup and restore ntp configuration on the client side properly

2011-10-05T10:52:40+00:00

When setting up the client-side NTP configuration, make sure that /etc/ntp/step-tickers
point to IPA NTP server as well.
When restoring the client during ipa-client-install --uninstall, make sure NTP configuration
is fully restored and NTP service is disabled if it was disabled before the installation.

https://fedorahosted.org/freeipa/ticket/1770

Add a function for formatting network locations of the form host:port for use in URLs.

2011-10-05T08:58:25+00:00

If the host part is a literal IPv6 address, it must be enclosed in square
brackets (RFC 2732).

ticket 1869

ipa-client assumes a single namingcontext

2011-09-30T14:53:59+00:00

When LDAP server contains more that one suffixes, the ipa client
installation does not detect it as IPA server and fails to install.
Fix ipa server discovery so that it correctly searches all naming
contexts for the IPA one.

https://fedorahosted.org/freeipa/ticket/1868

ipa-client-install: Fix joining when LDAP access is restricted

2011-09-30T14:42:30+00:00

Fixes: https://fedorahosted.org/freeipa/ticket/1881

Don't remove /tmp when removing temp cert dir

2011-09-23T02:02:54+00:00

If /tmp happens to be empty os.removedirs() happily removes it...

https://fedorahosted.org/freeipa/ticket/1843

Convert client-side tools to platform-independent access to system services

2011-09-13T09:15:31+00:00

https://fedorahosted.org/freeipa/ticket/1605