freeipa.git/install/tools/ipa-dns-install, branch kdc-fixes FreeIPA patches Fix regression: ipa-dns-install will add CA records if required 2015-07-07T22:32:05+00:00 Martin Basti mbasti@redhat.com 2015-07-07T14:28:48+00:00 1d9bdb240943527e1e19704acd183eae254267ae https://fedorahosted.org/freeipa/ticket/5101 Reviewed-By: Tomas Babej <tbabej@redhat.com> 
https://fedorahosted.org/freeipa/ticket/5101

Reviewed-By: Tomas Babej <tbabej@redhat.com>
DNSSEC: Detect attempt to install & disable master at the same time. 2015-07-07T06:37:15+00:00 Petr Spacek pspacek@redhat.com 2015-06-30T20:05:44+00:00 8ee975b276d0728130a148b01f9bfc0b77524ae0 https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Petr Spacek <pspacek@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Petr Spacek <pspacek@redhat.com>
DNSSEC: allow to disable/replace DNSSEC key master 2015-07-07T06:37:15+00:00 Martin Basti mbasti@redhat.com 2015-05-13T12:45:32+00:00 e151492560db25fa13c2a3edf5e2139dc6629047 This commit allows to replace or disable DNSSEC key master Replacing DNSSEC master requires to copy kasp.db file manually by user ipa-dns-install: --disable-dnssec-master DNSSEC master will be disabled --dnssec-master --kasp-db=FILE This configure new DNSSEC master server, kasp.db from old server is required for sucessful replacement --force Skip checks https://fedorahosted.org/freeipa/ticket/4657 Reviewed-By: Petr Spacek <pspacek@redhat.com> 
This commit allows to replace or disable DNSSEC key master

Replacing DNSSEC master requires to copy kasp.db file manually by user

ipa-dns-install:
--disable-dnssec-master  DNSSEC master will be disabled
--dnssec-master --kasp-db=FILE  This configure new DNSSEC master server,  kasp.db from old server is required for sucessful replacement
--force Skip checks

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Petr Spacek <pspacek@redhat.com>
DNS install: extract DNS installer into one module 2015-05-19T14:21:31+00:00 Martin Basti mbasti@redhat.com 2015-05-13T16:49:25+00:00 ae9c3e2dce000ed185b28e2e6e85043ad8d001ed This is required modification to be able move to new installers. DNS subsystem will be installed by functions in this module in each of ipa-server-install, ipa-dns-install, ipa-replica-install install scripts. https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Jan Cholasta <jcholast@redhat.com> 
This is required modification to be able move to new installers.

DNS subsystem will be installed by functions in this module in each of
ipa-server-install, ipa-dns-install, ipa-replica-install install
scripts.

https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
ipa-dns-install: use LDAPI to connect to DS 2015-03-18T11:31:23+00:00 Martin Babinsky mbabinsk@redhat.com 2015-03-12T16:05:39+00:00 26d6c6fbbbd6d024d82b1ab515d300e6113d2c34 ipa-dns-install now uses LDAPI/autobind to connect to DS during the setup of DNS/DNSSEC-related service and thus makes -p option obsolete. Futhermore, now it makes more sense to use LDAPI also for API Backend connections to DS and thus all forms of Kerberos auth were removed. This fixes https://fedorahosted.org/freeipa/ticket/4933 and brings us closer to fixing https://fedorahosted.org/freeipa/ticket/2957 Reviewed-By: Martin Basti <mbasti@redhat.com> 
ipa-dns-install now uses LDAPI/autobind to connect to DS during the setup of
DNS/DNSSEC-related service and thus makes -p option obsolete.

Futhermore, now it makes more sense to use LDAPI also for API Backend
connections to DS and thus all forms of Kerberos auth were removed.

This fixes https://fedorahosted.org/freeipa/ticket/4933 and brings us closer
to fixing https://fedorahosted.org/freeipa/ticket/2957

Reviewed-By: Martin Basti <mbasti@redhat.com>
ipa-dns-install: use STARTTLS to connect to DS 2015-03-18T11:31:23+00:00 Martin Babinsky mbabinsk@redhat.com 2015-03-12T15:14:22+00:00 7b6bee030dac08807f254fdf58ba867c36cab23d BindInstance et al. now use STARTTLS to set up secure connection to DS during ipa-dns-install. This fixes https://fedorahosted.org/freeipa/ticket/4933 Reviewed-By: Martin Basti <mbasti@redhat.com> 
BindInstance et al. now use STARTTLS to set up secure connection to DS during
ipa-dns-install. This fixes https://fedorahosted.org/freeipa/ticket/4933

Reviewed-By: Martin Basti <mbasti@redhat.com>
Use singular in help metavars + update man pages. 2014-11-26T13:33:23+00:00 David Kupka dkupka@redhat.com 2014-11-24T13:49:05+00:00 3a6d714bb229f8dd68ae219d94283f05cf57a6d7 https://fedorahosted.org/freeipa/ticket/4695 Reviewed-By: Martin Basti <mbasti@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4695

Reviewed-By: Martin Basti <mbasti@redhat.com>
Add help string on how to configure multiple DNS forwards for various cli tools 2014-11-14T14:38:52+00:00 Thorsten Scherf tscherf@redhat.com 2014-11-11T14:38:01+00:00 4c670919a5b15b70ff6efb50e9bb60eb45cecdba The man pages for various FreeIPA setup tools are more descriptive on how to configure multiple DNS forwarders than the corresponding cli help. This patch makes the cli help more verbose now for the following tools: * ipa-dns-install * ipa-replica-install * ipa-server-install https://fedorahosted.org/freeipa/ticket/4465 Reviewed-By: Martin Basti <mbasti@redhat.com> 
The man pages for various FreeIPA setup tools are more descriptive on how to
configure multiple DNS forwarders than the corresponding cli help. This patch
makes the cli help more verbose now for the following tools:

* ipa-dns-install
* ipa-replica-install
* ipa-server-install

https://fedorahosted.org/freeipa/ticket/4465

Reviewed-By: Martin Basti <mbasti@redhat.com>
DNSSEC: installation 2014-10-21T10:23:03+00:00 Martin Basti mbasti@redhat.com 2014-10-16T14:34:00+00:00 e798bad646f648748872a841f282462d28af795f Tickets: https://fedorahosted.org/freeipa/ticket/3801 https://fedorahosted.org/freeipa/ticket/4417 Design: https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: David Kupka <dkupka@redhat.com> 
Tickets:
https://fedorahosted.org/freeipa/ticket/3801
https://fedorahosted.org/freeipa/ticket/4417

Design:
https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: David Kupka <dkupka@redhat.com>
DNSSEC: validate forwarders 2014-10-21T10:23:03+00:00 Martin Basti mbasti@redhat.com 2014-10-16T14:27:00+00:00 ca030a089f9e45a5dae5f6fb5993f4cc714f1ab2 Tickets: https://fedorahosted.org/freeipa/ticket/3801 https://fedorahosted.org/freeipa/ticket/4417 Design: https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: David Kupka <dkupka@redhat.com> 
Tickets:
https://fedorahosted.org/freeipa/ticket/3801
https://fedorahosted.org/freeipa/ticket/4417

Design:
https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: David Kupka <dkupka@redhat.com>