freeipa.git/install/tools/ipa-server-install, branch my-master

Do not display an interactive mode message in unattended mode

2013-04-24T17:33:49+00:00

https://fedorahosted.org/freeipa/ticket/3576

Drop --selfsign server functionality

2013-04-15T20:56:12+00:00

Design: http://freeipa.org/page/V3/Drop_selfsign_functionality
Ticket: https://fedorahosted.org/freeipa/ticket/3494

ipa-server-install: correct help text for --external_{cert,ca}_file

2013-04-15T11:32:58+00:00

The options take PEM certificates, not PKCS#10.
This corrects both the --help output and the man page.

https://fedorahosted.org/freeipa/ticket/3523

Load the CA cert into server NSS databases

2013-04-02T13:28:50+00:00

The CA cert was not loaded, so if it was missing from the PKCS#12 file,
installation would fail.
Pass the cert filename to the server installers and include it in
the NSS DB.

Part of the work for: https://fedorahosted.org/freeipa/ticket/3363

Support installing with custom SSL certs, without a CA

2013-04-02T13:28:50+00:00

Design: http://freeipa.org/page/V3/CA-less_install
https://fedorahosted.org/freeipa/ticket/3363

ipa-server-install: Remove the --selfsign option

2013-04-02T13:28:50+00:00

Instead, certificates in pkcs12 files can be given to set up
IPA with no CA at all.
Use a flag, setup_ca, to signal if a CA is being installed.

Design: http://freeipa.org/page/V3/Drop_selfsign
Part of the work for: https://fedorahosted.org/freeipa/ticket/3494

ipa-server-install: Make temporary pin files available for the whole installation

2013-04-02T13:28:50+00:00

We pass names of files with pkcs12 pins to installers which may continue to
use the files after the initial call to create_instance, at which point
the installer has already removed them.
Also, some of the files were not properly removed on failure.

Use ipautil.write_tmp_file for the pin files, which returns a
NamedTemporaryFile object that removes the underlying file when it is
garbage-collected.
Create the files at start of installation. This will allow checking
the pkcs#12 files before the system is modified.

Add mkhomedir option to ipa-server-install and ipa-replica-install

2013-03-28T07:45:37+00:00

Add the option to create home directories for users on their
first login to ipa-server-install and ipa-replica-install.

https://fedorahosted.org/freeipa/ticket/3515

Add DNS Setup Prompt to Install

2013-03-21T08:56:54+00:00

Currently the only way to setup integrated DNS is by passing --setup-dns
to ipa-server-install. This patch modifies install so that if
--setup-dns is not passed, the user is asked if they want to configure
integrated dns.

http://fedorahosted.org/freeipa/ticket/2575

Fix installing server with external CA

2013-03-08T14:42:20+00:00

Reorganize ipa-server-instal so that DS (and NTP server) installation
only happens in step one.

Change CAInstance to behave correctly in two-step install.

Add an `init_info` method to DSInstance that includes common
attribute/sub_dict initialization from create_instance and create_replica.
Use it in ipa-server-install to get a properly configured DSInstance
for later tasks.

https://fedorahosted.org/freeipa/ticket/3459