freeipa.git/install/tools/ipa-upgradeconfig, branch getkeytab

admin tools: Log IPA version

2014-05-27T10:08:55+00:00

Add the IPA version, and vendor version if applicable, to the beginning
of admintool logs -- both framework and indivitual tools that don't yet
use the framework.
This will make debugging easier.

https://fedorahosted.org/freeipa/ticket/4219

Reviewed-By: Alexander Bokovoy

Update certmonger configuration in ipa-upgradeconfig.

2014-03-25T15:54:56+00:00

Reviewed-By: Petr Viktorin

Use the same certmonger configuration for both CA masters and clones.

2014-03-25T15:54:55+00:00

Reviewed-By: Petr Viktorin

Use dogtag-ipa-ca-renew-agent to track certificates on master CA.

2014-03-25T15:54:55+00:00

Before, dogtag-ipa-renew-agent was used to track the certificates and the
certificates were stored to LDAP in renew_ca_cert and renew_ra_cert. Since
dogtag-ipa-ca-renew-agent can store the certificates itself, the storage code
was removed from renew_ca_cert and renew_ra_cert.

Reviewed-By: Petr Viktorin

Remove working directory for bind-dyndb-ldap plugin.

2014-01-27T15:04:33+00:00

The working directory will be provided directly
by bind-dyndb-ldap package.

This partially reverts commit 689382dc833e687d30349b10a8fd7dc740d54d08.

https://fedorahosted.org/freeipa/ticket/3967

Switch httpd to use default CCACHE

2014-01-22T09:14:05+00:00

Stock httpd no longer uses systemd EnvironmentFile option which is
making FreeIPA's KRB5CCNAME setting ineffective. This can lead in hard
to debug problems during subsequent ipa-server-install's where HTTP
may use a stale CCACHE in the default kernel keyring CCACHE.

Avoid forcing custom CCACHE and switch to system one, just make sure
that it is properly cleaned by kdestroy run as "apache" user during
FreeIPA server installation process.

https://fedorahosted.org/freeipa/ticket/4084

Enable Retro Changelog and Content Synchronization DS plugins

2014-01-14T15:37:56+00:00

Enable Retro Changelog and Content Synchronization DS plugins which are required
for SyncRepl support.

Create a working directory /var/named/ipa required by bind-dyndb-ldap v4+.

https://fedorahosted.org/freeipa/ticket/3967

Use /usr/bin/python2

2014-01-03T08:46:05+00:00

Part of the effort to port FreeIPA to Arch Linux,
where Python 3 is the default.

FreeIPA hasn't been ported to Python 3, so the code must be modified to
run /usr/bin/python2

https://fedorahosted.org/freeipa/ticket/3438

Updated by pviktori@redhat.com

Remove mod_ssl port workaround.

2013-11-26T11:58:17+00:00

https://fedorahosted.org/freeipa/ticket/4021

Remove mod_ssl conflict

2013-10-25T13:35:39+00:00

Since mod_nss-1.0.8-24, mod_nss and mod_ssl can co-exist on one
machine (of course, when listening to different ports).

To make sure that mod_ssl is not configured to listen on 443
(default mod_ssl configuration), add a check to the installer checking
of either mod_nss or mod_ssl was configured to listen on that port.

https://fedorahosted.org/freeipa/ticket/3974