freeipa.git/daemons/ipa-slapi-plugins, branch kdc-fixes

Fix minor typos

2015-07-17T12:33:30+00:00

 -> 
overriden -> overridden
ablity -> ability
enties -> entries
the the -> the

https://fedorahosted.org/freeipa/ticket/5109

Reviewed-By: Petr Vobornik 
Reviewed-By: Christian Heimes

extdom: add unit-test for get_user_grouplist()

2015-07-07T23:56:52+00:00

Reviewed-By: Tomas Babej

ipa-pwd-extop: expand error message to tell what user is not allowed to fetch keytab

2015-07-07T23:56:52+00:00

When retrieving keytab, it is useful to know what user was attempting
to fetch the keyts and failed. This is useful to debug one-way trust
where SSSD forks out a process of ipa-getkeytab and it might be using
a wrong credentials cache for authentication purposes.

Part of https://fedorahosted.org/freeipa/ticket/4959

Reviewed-By: Tomas Babej

ipa-sidgen: reduce log level to normal if domain SID is not available

2015-07-07T23:56:52+00:00

To support AD trust agents, we need to run sidgen and extdom plugins
on every IPA master. Lack of working configuration, thus, is not a
failure so reduce log level to normal as sidgen plugin will not
be active if domain SID is missing but it can certainly be kept
enabled.

Part of https://fedorahosted.org/freeipa/ticket/4951

Reviewed-By: Tomas Babej

allow deletion of segment if endpoint is not managed

2015-07-02T09:54:01+00:00

in the preop check do not reject the deletion of a segment, if not both endpoints
are managed servers for the suffix

thisis part of work for ticlet #5072

Reviewed-By: Simo Sorce

v2 improve processing of invalid data.

2015-07-01T10:29:24+00:00

    reject attempts to add segments to suffixes, which do not exist or are not configured.
    check completenes and validity of segment attributes

    cf ticket 5088: https://fedorahosted.org/freeipa/ticket/5088

Reviewed-By: Thierry Bordaz

v2 clear start attr from segment after initialization

2015-06-30T10:47:50+00:00

    Online initialization can be triggered by setting "nsds5BeginReplicaRefresh[;left|;right]": start to a
    segment. But this field remained in the segment and after restart the init would be executed again.
    see Ticket #5065

    To fix this the field is cleared:
    - after a backend comes back online after being initialized
    - since there is a delay and the sending server could be restarted in between,
        the field is also scheced and renḿoved at startup

Reviewed-By: Thierry Bordaz

fix coverity issues

2015-06-29T15:17:29+00:00

Reviewed-By: Martin Basti

correct management of one directional segments

2015-06-29T11:52:34+00:00

    this patch contains the following improvements:
    check for existing segments works for all combinations of one directional and bidirectional segments
    rdns of replication agreements generated from one directional segments are preserves after
        merging of segments, so that deletion of the segment deletes the corresponding replication
        agreements

Reviewed-By: Thierry Bordaz

v2-reject modifications of endpoints and connectivity of a segment

2015-06-11T11:58:02+00:00

Reviewed-By: Thierry Bordaz