freeipa.git/install/tools/man, branch kdc-fixes

Allow value 'no' for replica-certify-all attr in abort-clean-ruv subcommand

2015-07-17T14:47:18+00:00

--force option set replica-certify-all to 'no' during abort-clean-ruv
subcommand

https://fedorahosted.org/freeipa/ticket/4988

Reviewed-By: Petr Vobornik

ipa-adtrust-install: allow configuring of trust agents

2015-07-07T23:56:52+00:00

Trust agents are IPA master without Samba which can serve
information about users from trusted forests. Such IPA masters
cannot be used to configure trust but they can resolve AD users and groups
for IPA clients enrolled to them.

Since support from both FreeIPA and SSSD is needed to enable
trust agent support, we currently only consider those IPA masters
which have been upgraded to FreeIPA 4.2 or later.

Part of https://fedorahosted.org/freeipa/ticket/4951

Reviewed-By: Tomas Babej

man: Add manpage for ipa-winsync-migrate

2015-07-02T11:23:21+00:00

https://fedorahosted.org/freeipa/ticket/4524

Reviewed-By: Martin Babinsky

Fix typo in ipa-server-upgrade man page

2015-05-26T05:53:44+00:00

Server Upgrade: ipa-ldap-updater will not do overall upgrade

2015-05-19T12:43:04+00:00

ipa-ldap-updater is now just util which applies changes specified in update
files or schema files.

ipa-ldap-updater will not do overall server upgrade anymore, use
ipa-server-upgrade instead.

https://fedorahosted.org/freeipa/ticket/4904

Reviewed-By: David Kupka

Server Upgrade: Allow base64 encoded values

2015-05-11T16:08:01+00:00

This patch allows to use base64 encoded values in update files.

Double colon ('::') must be used as separator between attribute name
and base64 encoded value.

add:attr::
replace:attr::::

https://fedorahosted.org/freeipa/ticket/4984

Reviewed-By: Jan Cholasta

Server Upgrade: remove CSV from upgrade files

2015-05-11T16:08:01+00:00

CSV values are not supported in upgrade files anymore

Instead of

   add:attribute: 'first, part', second

please use

  add:attribute: firts, part
  add:attribute: second

Required for ticket: https://fedorahosted.org/freeipa/ticket/4984

Reviewed-By: Jan Cholasta

ipa-server-install: deprecate manual setting of master KDC password

2015-05-07T14:00:00+00:00

Option '-P' was used in older version of FreeIPA to set up KDC master password
during server install. This is no longer neccessary or desirable since the
password of sufficient strength can be generated automatically during
installation.

https://fedorahosted.org/freeipa/ticket/4516

Reviewed-By: Petr Vobornik

Remove unneeded ip-address option in ipa-adtrust-install

2015-05-05T09:44:51+00:00

https://fedorahosted.org/freeipa/ticket/4575

Reviewed-By: Martin Basti

Server Upgrade: Verify version and platform

2015-05-04T11:16:26+00:00

Verify version and platform before upgrade or ipactl start|restart

Upgrade:
* do not allow upgrade on different platforms
* do not allow upgrade data with higher version than build has

Start:
* do not start services if platform mismatch
* do not start services if upgrade is needed
* do not start services if data with higher version than build has

New ipactl options:
--skip-version-check: do not validate IPA version
--ignore-service-failures (was --force): ignore if a service start fail
      and continue with starting other services
--force: combine --skip-version-check and --ignore-service-failures

https://fedorahosted.org/freeipa/ticket/4904

Reviewed-By: Jan Cholasta 
Reviewed-By: David Kupka