freeipa.git/VERSION, branch ipa-2-2

Become IPA 2.2.0

2012-05-03T00:11:41+00:00

Limit permission and selfservice names to alphanumerics, -, _, space

2012-04-10T00:56:47+00:00

The DN and ACI code doesn't always escape special characters properly.
Rather than trying to fix it, this patch takes the easy way out and
enforces that the names are safe.

https://fedorahosted.org/freeipa/ticket/2585

Make revocation_reason required when revoking a certificate.

2012-04-05T06:51:38+00:00

This will prevent errors if an empty reason is provided and it is
set by default one doesn't have to always set it on the command-line.

https://fedorahosted.org/freeipa/ticket/2597

Netgroup nisdomain and hosts validation

2012-03-28T14:23:53+00:00

nisdomain validation:
Added pattern to the 'nisdomain' parameter to validate the specified
nisdomain name. According to most common use cases the same pattern as
for netgroup should fit. Unit-tests added.

https://fedorahosted.org/freeipa/ticket/2448

'add_external_pre_callback' function was created to allow validation of
all external members. Validation is based on usage of objects primary
key parameter. The 'add_external_pre_callback' fucntion has to be called
directly from in the 'pre_callback' function. This change affects
netgroup, hbacrule and sudorule commands.

For hostname, the validator allows non-fqdn and underscore characters.
validate_hostname function in ipalib.util was modified and contains
additional option that allows hostname to contain underscore characters.
This option is disabled by default.

Unit-tests added.

https://fedorahosted.org/freeipa/ticket/2447

Add missing global options in dnsconfig

2012-03-20T14:40:18+00:00

Add a support for new global options in bind-dyndb-ldap, that is:
 * idnsforwardpolicy: Default policy for conditional forwarding
 * idnsallowsyncptr: Allow globaly PTR synchronization for dynamic
   updates
 * idnszonerefresh: Default interval between regular polls of the
   name server for new DNS zones

https://fedorahosted.org/freeipa/ticket/2439

Really Become IPA v2.2.0 RC 1 (2.1.90.rc1)

2012-03-04T23:51:55+00:00

I had inadvertently set PRE to 0 and not blank so it was overriding
the RC option.

Become IPA v2.2.0 RC 1 (2.1.90.rc1)

2012-03-04T23:42:20+00:00

Fix API.txt and VERSION to reflect new sudoOrder option.

2012-03-02T03:24:37+00:00

Migration warning when compat enabled

2012-02-29T23:30:53+00:00

Added check into migration plugin to warn user when compat is enabled.
If compat is enabled, the migration fails and user is warned that he
must turn the compat off or run the script with (the newly introduced)
option '--with-compat'.

'--with-compat' is new flag. If it is set, the compat status is ignored.

https://fedorahosted.org/freeipa/ticket/2274

Add support defaultNamingContext and add --basedn to migrate-ds

2012-02-29T14:28:32+00:00

There are two sides to this, the server and client side.

On the server side we attempt to add a defaultNamingContext on already
installed servers. This will fail on older 389-ds instances but the
failure is not fatal. New installations on versions of 389-ds that
support this attribute will have it already defined.

On the client side we need to look for both defaultNamingContext and
namingContexts. We still need to check that the defaultNamingContext
is an IPA server (info=IPAV2).

The migration change also takes advantage of this and adds a new
option which allows one to provide a basedn to use instead of trying
to detect it.

https://fedorahosted.org/freeipa/ticket/1919
https://fedorahosted.org/freeipa/ticket/2314