freeipa.git/init, branch AD-binds

move IPA-related http runtime directories to common subdirectory

2015-05-19T12:59:18+00:00

When both 'mod_auth_kerb' and 'mod_auth_gssapi' are installed at the same
time, they use common directory for storing Apache ccache file. Uninstallation
of 'mod_auth_kerb' removes this directory leading to invalid CCache path for
httpd and authentication failure.

Using an IPA-specific directory for credential storage during apache runtime
avoids this issue.

https://fedorahosted.org/freeipa/ticket/4973

Reviewed-By: David Kupka

provide dedicated ccache file for httpd

2015-05-12T11:01:45+00:00

httpd service stores Kerberos credentials in kernel keyring which gets
destroyed and recreated during service install/upgrade, causing problems when
the process is run under SELinux context other than 'unconfined_t'. This patch
enables HTTPInstance to set up a dedicated CCache file for Apache to store
credentials.

https://fedorahosted.org/freeipa/ticket/4973

Reviewed-By: Jan Cholasta 
Reviewed-By: Alexander Bokovoy

Use mod_auth_gssapi instead of mod_auth_kerb.

2015-03-30T13:06:12+00:00

https://fedorahosted.org/freeipa/ticket/4190

Reviewed-By: Jan Cholasta 
Reviewed-By: Petr Vobornik 
Reviewed-By: Rob Crittenden 
Reviewed-By: Simo Sorce

DNSSEC: add ipa dnssec daemons

2014-10-21T10:23:03+00:00

Tickets:
https://fedorahosted.org/freeipa/ticket/3801
https://fedorahosted.org/freeipa/ticket/4417

Design:
https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC

Reviewed-By: Jan Cholasta 
Reviewed-By: David Kupka

Remove systemd upgrader as it is not used anymore

2013-08-15T06:49:15+00:00

Avoid exporting KRB5_KTNAME in dirsrv env

2013-05-24T12:36:43+00:00

The variable is already defined, exporting in dirsrv systemd
environment is not needed and produces a (benign) error.

Remove syslog.target from ipa.server

2013-03-29T07:59:41+00:00

This required target is no longer needed as systemd from version 38
has its own journal which is also in the basic set of service unit
requirementes.

https://fedorahosted.org/freeipa/ticket/3511

Get list of service from LDAP only at startup

2012-11-01T14:58:19+00:00

We check (possibly different) data from LDAP only at (re)start.
This way we always shutdown exactly the services we started even if the list
changed in the meanwhile (we avoid leaving a service running even if it was
removed from LDAP as the admin decided it should not be started in future).

This should also fix a problematic deadlock with systemd when we try to read
the list of service from LDAP at shutdown.

Disable false pylint error in freeipa-systemd-upgrade

2012-02-15T05:26:18+00:00

Add ipa_memcached service

2012-02-09T19:20:28+00:00

* Adds ipa_memcached SystemV initscript

* Adds ipa_memcached service file and tmpfiles.d/ipa.conf
  to recreate /var/run/ipa_memcached on reboot.

* Adds ipa_memcached config file

* Adds memcacheinstnace.py to manage ipa_memcaced as
  as SimpleService object.

* Updates the IPA service list to include ipa_memcached,
  at service positon 39, httpd is position 40

* Updates the spec file:
  - requires the memcached daemon and python client
  - installs service or initscripts depending on OS
  - installs config file
  - creates /var/run/ipa_memcached directory

* Modifies ipa-server-install to install ipa_memcached