freeipa.git, branch master

replica prepare: fix wrong IPA CA nickname in replica file

2017-03-22T14:56:54+00:00

Lookup IPA CA subject and pass it to CertDB when creating dscert.p12 and
httpcert.p12, otherwise a generic nickname will be used for the IPA CA
certificate instead of "$REALM IPA CA".

This fixes replica install on domain level 0 from a replica file created
using ipa-replica-install on IPA 4.5.

https://pagure.io/freeipa/issue/6777

Reviewed-By: Martin Babinsky

Fixing replica install: fix ldap connection in domlvl 0

2017-03-22T14:31:40+00:00

Now, at the domain level 0, the replica install always uses
Directory Manager credentials to create the LDAP connection.
Since ACIs permitting hosts to manage their own services were
added in 4.2 release,  the old master denies this operations.

https://pagure.io/freeipa/issue/6549

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta

Constrain wheel package versions

2017-03-22T14:16:25+00:00

The presence of IPA packages on PyPI revealed an interesting issue with
make wheel_bundle. pip gives final releases a higher precedence than our
development packages. make wheel_bundle downloads ipa 4.5.0 from PyPI
instead of using our own wheels.

Use a constraint file to enforce correct versions.

https://pagure.io/freeipa/issue/6468

Signed-off-by: Christian Heimes 
Reviewed-By: Martin Basti

httpinstance: clean up /etc/httpd/alias on uninstall

2017-03-22T13:58:18+00:00

Restore cert8.db, key3.db, pwdfile.txt and secmod.db in /etc/httpd/alias
from backup on uninstall.

Files modified by IPA are kept with .ipasave suffix.

https://pagure.io/freeipa/issue/4639

Reviewed-By: Martin Babinsky

certs: do not implicitly create DS pin.txt

2017-03-22T13:58:18+00:00

Do not implicitly create DS pin.txt in `CertDB.init_from_pkcs12()`, create
it explicitly in `DSInstance.__enable_ssl()`.

This stops the file from being created in /etc/httpd/alias during classic
replica install.

https://pagure.io/freeipa/issue/4639

Reviewed-By: Martin Babinsky

Travis CI: invoke integration test helper scripts before test execution

2017-03-22T13:18:51+00:00

This is to verify that all the executables are working properly (have
correct import paths etc.)

Reviewed-By: Tomas Krizek

Move remaining util functions to tasks module

2017-03-22T12:42:04+00:00

https://pagure.io/freeipa/issue/6798
Signed-off-by: Christian Heimes 
Reviewed-By: Milan Kubik

Ship ipatests.pytest_plugins.integration

2017-03-22T12:42:04+00:00

https://pagure.io/freeipa/issue/6798
Signed-off-by: Christian Heimes 
Reviewed-By: Milan Kubik

Move function run_repeatedly to tasks module

2017-03-22T12:42:04+00:00

https://pagure.io/freeipa/issue/6798
Signed-off-by: Christian Heimes 
Reviewed-By: Milan Kubik

Move hosts module to ipatests.pytest_plugins.integration.hosts

2017-03-22T12:42:04+00:00

https://pagure.io/freeipa/issue/6798
Signed-off-by: Christian Heimes 
Reviewed-By: Milan Kubik