freeipa.git/ipa-client, branch WIP

Move some krb5 keys related functions from ipa-client to util

2012-04-30T15:26:24+00:00

Fix help of --hostname option in ipa-client-install

2012-04-19T17:55:44+00:00

Replace word "server" with "machine" to clearly distinguish between
IPA server and other machines (clients) and to also match the help
with ipa-client-install man pages.

https://fedorahosted.org/freeipa/ticket/1967

Use indexed format specifiers in i18n strings

2012-04-10T22:07:10+00:00

Translators need to reorder messages to suit the needs of the target
language. The conventional positional format specifiers (e.g. %s %d)
do not permit reordering because their order is tied to the ordering
of the arguments to the printf function. The fix is to use indexed
format specifiers.

https://fedorahosted.org/freeipa/ticket/2596

Fix memleak and silence Coverity defects

2012-03-22T16:33:13+00:00

Some of these are not real defects, because we are guaranteed to have valid
context in some functions, and checks are not necessary.
I added the checks anyway in order to silence Coverity on these issues.

One meleak on error condition was fixed in
daemons/ipa-kdb/ipa_kdb_pwdpolicy.c

Silence errors in ipa-client/ipa-getkeytab.c, the code looks wrong, but it is
actually fine as we count before hand so we never actually use the wrong value
that is computed on the last pass when p == 0

Fixes: https://fedorahosted.org/freeipa/ticket/2488

Add disovery domain if client domain is different from server domain

2012-03-15T02:06:26+00:00

https://fedorahosted.org/freeipa/ticket/2209

Configure a basic ldap.conf for OpenLDAP in /etc/openldap/ldap.conf

2012-03-15T01:28:52+00:00

Set URI, BASE and TLS_CACERT

Also update the man page to include a list of files that the client
changes.

https://fedorahosted.org/freeipa/ticket/1810

More exception handlers in ipa-client-install

2012-03-09T14:48:27+00:00

Added exception handler to certutil operation of adding CA to the
default NSS database. If operation fails, installation is aborted and
changes are rolled back.

https://fedorahosted.org/freeipa/ticket/2415

If obtaining host TGT fails, the installation is aborted and changes are
rolled back.

https://fedorahosted.org/freeipa/ticket/1995

Only warn if ipa-getkeytab doesn't get all requested enctypes.

2012-03-04T22:42:18+00:00

Older client machines may request DES keys not supported in newer
KDCs. Thsi was causing the entire request to fail as well as client
enrollment.

https://fedorahosted.org/freeipa/ticket/2424

Do kinit in client before connecting to backend

2012-03-04T22:23:01+00:00

The client installer was failing because a backend connection could be
created before a kinit was done.

Allow multiple simultaneous connections. This could fail with an NSS
shutdown error when the second connection was created (objects still
in use). If all connections currently use the same database then there
is no need to initialize, let it be skipped.

Add additional logging to client installer.

https://fedorahosted.org/freeipa/ticket/2478

Add --noac option to ipa-client-install man page

2012-03-04T22:17:01+00:00

https://fedorahosted.org/freeipa/ticket/2369