freeipa.git/ipaserver/install, branch certauth

Support for Certificate Identity Mapping

2017-02-23T12:05:07+00:00

See design http://www.freeipa.org/page/V4/Certificate_Identity_Mapping

https://fedorahosted.org/freeipa/ticket/6542

Fix ipa-server-upgrade

2017-02-23T09:14:49+00:00

Running ipa-server-upgrade would fail to stop ipa_memcached if
it's already uninstalled.

https://fedorahosted.org/freeipa/ticket/5959

Reviewed-By: Christian Heimes

Use newer Certificate.serial_number in krainstance.py

2017-02-23T09:14:04+00:00

Reviewed-By: Florence Blanc-Renaud

use the methods of the parent class to retrieve CIFS kerberos keys

2017-02-22T17:50:30+00:00

adtrustinstance will now use parent's methods to retrieve keys for CIFS
principal. Since the keys are appended to the host keytab
(/etc/krb5.keytab) we need to make sure that only the stale CIFS keys
are purged from the file and that we do not re-set its ownership.

https://fedorahosted.org/freeipa/ticket/6638

Reviewed-By: Martin Basti 
Reviewed-By: Alexander Bokovoy

httpinstance: re-use parent's methods to retrieve anonymous keytab

2017-02-22T17:50:30+00:00

https://fedorahosted.org/freeipa/ticket/6638

Reviewed-By: Martin Basti 
Reviewed-By: Alexander Bokovoy

Make request_service_keytab into a public method

2017-02-22T17:50:30+00:00

a cosmetic change: we had private method comprising of calls to public
ones, which did not make much sense in our case

https://fedorahosted.org/freeipa/ticket/6638

Reviewed-By: Martin Basti 
Reviewed-By: Alexander Bokovoy

allow for more flexibility when requesting service keytab

2017-02-22T17:50:30+00:00

The service installers can now override the methods for cleaning up
stale keytabs and changing file ownership of the newly acquired keytabs.

The default actions should be usable by most installers without specific
overriding.

https://fedorahosted.org/freeipa/ticket/6638

Reviewed-By: Martin Basti 
Reviewed-By: Alexander Bokovoy

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22T08:07:48+00:00

Commit 1e6a204b4372bbbfb722a00370a5ce4e34406b9f added explicit confdir
setting to api.bootstrap() calls of a randomly selected portion of
server-side scripts and tests. This commit adds it to the rest of
server-side code for consistency.

https://fedorahosted.org/freeipa/ticket/6389

Reviewed-By: Stanislav Laznicka

FIPS: perform replica installation check

2017-02-21T16:09:00+00:00

Check status of remote server's FIPS mode and proceed with
installation only if it matches the current replica's FIPS mode.

https://fedorahosted.org/freeipa/ticket/5695

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta 
Reviewed-By: Stanislav Laznicka

replicainstall: add context manager for rpc client

2017-02-21T16:09:00+00:00

Abstract creating rpc client into a context manager to allow re-use.

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta 
Reviewed-By: Stanislav Laznicka