freeipa.git/install/share, branch custodia

Allow to setup the CA when promoting a replica

2015-10-15T12:24:33+00:00

This patch makes --setup-ca work to set upa clone CA while creating
a new replica. The standalone ipa-ca-install script is not converted
yet though.

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

handle multiple managed suffixes

2015-10-15T12:24:33+00:00

    trigger topology updaet if suffix entry is added
    trigger topology update if managedSuffix is modified in host entry

Reviewed-by: Simo Sorce 
Reviewed-By: Jan Cholasta

topology: manage ca replication agreements

2015-10-15T12:24:33+00:00

Configure IPA so that topology plugin will manage also CA replication
agreements.

upgrades if CA is congigured:
- ipaca suffix is added to cn=topology,cn=ipa,cn=etc,$SUFFIX
- ipaReplTopoManagedSuffix: o=ipaca is added to master entry
- binddngroup is added to o=ipaca replica entry

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Add ipa-custodia service

2015-10-15T12:24:33+00:00

Add a customized Custodia daemon and enable it after installation.
Generates server keys and loads them in LDAP autonomously on install
or update.
Provides client code classes too.

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

schema: do not derive ipaVaultPublicKey from ipaPublicKey

2015-10-12T13:48:42+00:00

This is a workaround for DS bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1267782

https://fedorahosted.org/freeipa/ticket/5359

Reviewed-By: Alexander Bokovoy

Replace StandardError with Exception

2015-09-30T08:51:36+00:00

StandardError was removed in Python3 and instead
Exception should be used.

Signed-off-by: Robert Kuska 
Reviewed-By: Jan Cholasta

install: support KRA update

2015-09-17T12:55:54+00:00

https://fedorahosted.org/freeipa/ticket/5250

Reviewed-By: Petr Vobornik

vault: update access control

2015-09-17T12:55:54+00:00

Do not allow vault and container owners to manage owners. Allow adding vaults
and containers only if owner is set to the current user.

https://fedorahosted.org/freeipa/ticket/5250

Reviewed-By: Petr Vobornik

Added CLI param and ACL for vault service operations.

2015-08-17T06:10:59+00:00

The CLIs to manage vault owners and members have been modified
to accept services with a new parameter.

A new ACL has been added to allow a service to create its own
service container.

https://fedorahosted.org/freeipa/ticket/5172

Reviewed-By: Jan Cholasta 
Reviewed-By: Martin Kosek

Modernize 'except' clauses

2015-08-12T16:17:23+00:00

The 'as' syntax works from Python 2 on, and Python 3 will
drop the "comma" syntax.

Reviewed-By: Tomas Babej