freeipa.git/install/tools/ipa-server-install, branch mspac

Do not allow '%' in DM password

2013-10-04T15:41:20+00:00

Having '%' in DM password causes pkispawn to crash. Do not allow
users to enter it until pkispawn is fixed.

https://bugzilla.redhat.com/show_bug.cgi?id=953488

Allow PKCS#12 files with empty password in install tools.

2013-10-04T08:27:23+00:00

https://fedorahosted.org/freeipa/ticket/3897

Read passwords from stdin when importing PKCS#12 files with pk12util.

2013-10-04T08:27:23+00:00

This works around pk12util refusing to use empty password files, which prevents
the use of PKCS#12 files with empty password.

https://fedorahosted.org/freeipa/ticket/3897

Warn user about realm-domain mismatch in install scripts

2013-10-03T10:02:44+00:00

If the IPA server is setup with non-matching domain and realm
names, it will not be able to estabilish trust with the Active
Directory.

Adds warnings to the ipa-server-install and warning to the
ipa-adtrust-install (which has to be confirmed).

Man pages for the ipa-server-install and ipa-adtrust-install were
updated with the relevant notes.

https://fedorahosted.org/freeipa/ticket/3924

Do not crash if DS is down during server uninstall

2013-09-09T15:24:04+00:00

DS is contacted during server uninstallation, in order to obtain information
about replication agreements. If DS is unavailable, warn and continue with
uninstallation.

https://fedorahosted.org/freeipa/ticket/3867

Add warning when uninstalling active replica

2013-09-04T09:07:32+00:00

Add a warning when trying to uninstall a replica that has active replication
agreements.

https://fedorahosted.org/freeipa/ticket/3867

Create DS user and group during ipa-restore

2013-09-02T14:28:37+00:00

ipa-restore would fail if DS user did not exist. Check for presence of DS
user and group and create them if needed.

https://fedorahosted.org/freeipa/ticket/3856

Make CS.cfg edits with CA instance stopped

2013-08-26T14:21:36+00:00

This patch makes sure that all edits to CS.cfg configuration file
are performed while pki-tomcatd service is stopped.

Introduces a new contextmanager stopped_service for handling
a general problem of performing a task that needs certain service
being stopped.

https://fedorahosted.org/freeipa/ticket/3804

Remove support for IPA deployments with no persistent search

2013-08-09T10:14:42+00:00

Drops the code from ipa-server-install, ipa-dns-install and the
BindInstance itself. Also changed ipa-upgradeconfig script so
that it does not set zone_refresh to 0 on upgrades, as the option
is deprecated.

https://fedorahosted.org/freeipa/ticket/3632

Free NSS objects in --external-ca scenario

2013-07-26T10:51:10+00:00

In external CA installation, ipa-server-install leaked NSS objects
which caused an installation crash later when a subsequent call of
NSSConnection tried to free them.

Properly freeing the NSS objects avoid this crash.

https://fedorahosted.org/freeipa/ticket/3773