freeipa.git/install/tools/ipa-upgradeconfig, branch mindatefix

Import included profiles during install or upgrade

2015-06-04T08:27:33+00:00

Add a default service profile template as part of FreeIPA and format
and import it as part of installation or upgrade process.

Also remove the code that modifies the old (file-based)
`caIPAserviceCert' profile.

Fixes https://fedorahosted.org/freeipa/ticket/4002

Reviewed-By: Martin Basti

Server Upgrade: Move code from ipa-upgradeconfig to separate module

2015-05-25T16:34:44+00:00

This also prevent the script ipa-upgradeconfig execute upgrading.
Upgrade of services is called from ipa-server-upgrade

https://fedorahosted.org/freeipa/ticket/4904

Reviewed-By: Jan Cholasta

move realm_to_serverid to installutils module

2015-05-05T09:56:49+00:00

To avoid cyclic imports realm_to_serverid function had to be moved to
installutils from dsinstance.

Required for: https://fedorahosted.org/freeipa/ticket/4925

Reviewed-By: Martin Babinsky

Make certificate renewal process synchronized

2015-01-13T18:34:59+00:00

Synchronization is achieved using a global renewal lock.

https://fedorahosted.org/freeipa/ticket/4803

Reviewed-By: David Kupka

Restart dogtag when its server certificate is renewed

2015-01-13T18:34:59+00:00

https://fedorahosted.org/freeipa/ticket/4803

Reviewed-By: David Kupka

Remove the removal of the ccache

2015-01-08T14:54:36+00:00

It is not necessary to remove the ccache on upgrades on modern IPA
servers, even if the ccache contains stale data either it is re-initialized by
mod_auth_kerb or a new ccache collection is created (if completely unrelated
credentials were present), at least when using DIR or keyring ccaches.

This line causes wrong SELinux labels to be set in the kernel keyring on
uprades, which the cause the apache server to fail to use th ccache.

https://fedorahosted.org/freeipa/ticket/4815

Reviewed-By: Martin Kosek

Using wget to get status of CA

2014-12-10T16:59:56+00:00

This is just workaround

Ticket: https://fedorahosted.org/freeipa/ticket/4676
Reviewed-By: Jan Cholasta

Upgrade fix: masking named should be executed only once

2014-12-09T12:03:53+00:00

There was error in code, masking was executed more times, even it was
succesful

https://fedorahosted.org/freeipa/ticket/4755

Reviewed-By: David Kupka

Add TLS 1.2 to the protocol list in mod_nss config

2014-11-25T11:44:13+00:00

https://fedorahosted.org/freeipa/ticket/4653

Reviewed-By: Martin Kosek

Show warning instead of error if CA did not start

2014-11-20T09:30:22+00:00

This is just workaround, checking if CA is working raises false positive
exception during upgrade

Ticket: https://fedorahosted.org/freeipa/ticket/4676
Reviewed-By: Simo Sorce