freeipa.git/install/tools/ipa-ca-install, branch ipasam_getkeytab

ipa-ca-install: error when replica file is passed with domain level > 0

2015-11-27T15:14:06+00:00

with replica promotion (domain level > 0) there are no replica files,
thus adding replica file as parameter when domain level > 0 should be
disallowed.

https://fedorahosted.org/freeipa/ticket/5455

Reviewed-By: Martin Babinsky 
Reviewed-By: Jan Cholasta

install: drop support for Dogtag 9

2015-11-25T08:12:25+00:00

Dogtag 9 CA and CA DS install and uninstall code was removed. Existing
Dogtag 9 CA and CA DS instances are disabled on upgrade.

Creating a replica of a Dogtag 9 IPA master is still supported.

https://fedorahosted.org/freeipa/ticket/5197

Reviewed-By: David Kupka

Check early if a CA is already installed locally

2015-10-27T16:42:30+00:00

There is no reason to proceed if a CA is already installed, and the
check does not involve a lot of setup, so do it early on.

Ticket: https://fedorahosted.org/freeipa/ticket/5397

Signed-off-by: Simo Sorce 
Reviewed-By: Martin Basti

Domain levels: use constants rather than hardcoded values

2015-10-27T09:29:41+00:00

Added constants for domain levels
DOMAIN_LEVEL_0 = 0
DOMAIN_LEVEL_1 = 1

This allows to search for domain level easier in code.

Reviewed-By: Petr Spacek 
Reviewed-By: Tomas Babej

Allow to install the KRA on a promoted server

2015-10-22T15:53:14+00:00

Signed-off-by: Simo Sorce 
Reviewed-By: Martin Babinsky 
Reviewed-By: Jan Cholasta

Allow ipa-ca-install to use the new promotion code

2015-10-22T11:40:04+00:00

This makes it possible to install a CA after-the-fact on a server
that has been promoted (and has no replica file available).

https://fedorahosted.org/freeipa/ticket/2888

Signed-off-by: Simo Sorce 
Reviewed-By: Martin Babinsky 
Reviewed-By: Jan Cholasta

load RA backend plugins during standalone CA install on CA-less IPA master

2015-09-09T06:21:32+00:00

CA-less IPA master has 'ra_plugin' set to 'none' in IPA config. When setting
up Dogtag CA on the master we must override this setting in order to load
dogtag backend plugins and succesfully complete CA installation.

https://fedorahosted.org/freeipa/ticket/5288

Reviewed-By: Jan Cholasta

install: Move private_ccache from ipaserver to ipapython

2015-06-08T15:33:36+00:00

https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti

Move CA installation code into single module.

2015-06-08T06:22:54+00:00

https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Jan Cholasta

move realm_to_serverid to installutils module

2015-05-05T09:56:49+00:00

To avoid cyclic imports realm_to_serverid function had to be moved to
installutils from dsinstance.

Required for: https://fedorahosted.org/freeipa/ticket/4925

Reviewed-By: Martin Babinsky