freeipa.git/install/tools, branch custodia

Allow to install the KRA on a promoted server

2015-10-20T17:22:58+00:00

Signed-off-by: Simo Sorce

Allow ipa-ca-install to use the new promotion code

2015-10-20T17:22:54+00:00

This makes it possible to install a CA after-the-fact on a server
that has been promoted (and has no replica file available).

Signed-off-by: Simo Sorce

Add option to specify LDIF file that contains DS configuration changes

2015-10-15T16:37:52+00:00

This allows to user modify configuration changes of the directory server
instance during installation of DS

https://fedorahosted.org/freeipa/ticket/4949

Also fixes:
https://fedorahosted.org/freeipa/ticket/4048
https://fedorahosted.org/freeipa/ticket/1930

Reviewed-By: Martin Babinsky

Allow ipa-replica-conncheck to use default creds

2015-10-15T12:24:33+00:00

If the user has already run kinit try to use those credentials.
The user can always override by explicitly passing the -p flag.

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Implement replica promotion functionality

2015-10-15T12:24:33+00:00

This patch implements a new flag --promote for the ipa-replica-install command
that allows an administrative user to 'promote' an already joined client to
become a full ipa server.

The only credentials used are that of an administrator. This code relies on
ipa-custodia being available on the peer master as well as a number of other
patches to allow a computer account to request certificates for its services.

Therefore this feature is marked to work only with domain level 1 and above
servers.

Ticket: https://fedorahosted.org/freeipa/ticket/2888

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

comment: Add Documentation string to deduplicate function

2015-10-13T11:59:30+00:00

Reviewed-By: Tomas Babej

Use six.moves.xmlrpc.client instead of xmlrpclib

2015-10-07T08:27:20+00:00

The module is renamed to xmlrpc.client in Python 3.

Reviewed-By: David Kupka 
Reviewed-By: Jan Cholasta 
Reviewed-By: Martin Basti

Use six.moves.urllib instead of urllib/urllib2/urlparse

2015-10-07T08:27:20+00:00

In Python 3, these modules are reorganized.

Reviewed-By: David Kupka 
Reviewed-By: Jan Cholasta 
Reviewed-By: Martin Basti

dnssec option missing in ipa-dns-install man page

2015-09-25T11:46:35+00:00

- Add DNSSEC option ipa-replica-install and ipa-server-install man page as well

https://fedorahosted.org/freeipa/ticket/5300

Reviewed-By: Martin Basti

Rewrap errors in get_principal to CCacheError

2015-09-22T11:29:55+00:00

Causes nicer error message when kerberos credentials are not available.

https://fedorahosted.org/freeipa/ticket/5272

Reviewed-By: David Kupka 
Reviewed-By: Tomas Babej