freeipa.git/install/tools, branch fix_ber_scanf

Move ipachangeconf from ipaclient.install to ipapython

2019-08-29T02:15:50+00:00

This will let us call it from ipaplatform.

Mark the original location as deprecated.

Reviewed-By: Francois Cami 
Reviewed-By: Rob Crittenden

Fix UnboundLocalError in ipa-replica-manage on errors

2019-08-06T05:13:37+00:00

If ipa-replica-manage is unable to retrieve e.g. due to certificate
validity problem. An UnboundLocalError is thrown for `type1`. This fixes
the issue with a clean exit.

Reviewed-By: Christian Heimes

move MSCSTemplate classes to ipalib

2019-07-17T14:58:58+00:00

As we expand the integration tests for external CA functionality, it
is helpful (and avoids duplication) to use the MSCSTemplate*
classes.  These currently live in ipaserver.install.cainstance, but
ipatests is no longer permitted to import from ipaserver (see commit
81714976e5e13131654c78eb734746a20237c933).  So move these classes to
ipalib.

Part of: https://pagure.io/freeipa/issue/7548

Reviewed-By: Florence Blanc-Renaud

Introduce minimal ipa-client-automount.in and ipactl.in

2019-06-28T08:53:07+00:00

Now that ipa-client-automount and ipactl main logic has been
moved into modules, introduce minimal executables.

Fixes: https://pagure.io/freeipa/issue/7984
Signed-off-by: François Cami 
Reviewed-By: Christian Heimes 
Reviewed-By: Rob Crittenden

Move ipa-client-automount.in and ipactl into modules

2019-06-28T08:53:07+00:00

Fixes: https://pagure.io/freeipa/issue/7984
Signed-off-by: François Cami 
Reviewed-By: Christian Heimes 
Reviewed-By: Rob Crittenden

Replace PYTHONSHEBANG with valid shebang

2019-06-24T07:35:57+00:00

Replace the @PYTHONSHEBANG@ substitution with a valid #!/usr/bin/python3
shebang. This turns Python .in files into valid Python files. The files
can now be checked with pylint and IDEs recognize the files as Python
files.

The shebang is still replaced with "#!$(PYTHON) -E" to support
platform-python.

Related: https://pagure.io/freeipa/issue/7984
Signed-off-by: Christian Heimes 
Reviewed-By: Francois Cami

Fix CustodiaClient ccache handling

2019-06-18T00:36:24+00:00

A CustodiaClient object has to the process environment a bit, e.g. set
up GSSAPI credentials. To reuse the credentials in libldap connections,
it is also necessary to set up a custom ccache store and to set the
environment variable KRBCCNAME temporarily.

Fixes: https://pagure.io/freeipa/issue/7964
Co-Authored-By: Fraser Tweedale 
Signed-off-by: Christian Heimes 
Reviewed-By: Christian Heimes 
Reviewed-By: Fraser Tweedale

ipa-cert-fix: add man page

2019-05-29T02:49:27+00:00

Part of: https://pagure.io/freeipa/issue/7885

Reviewed-By: Florence Blanc-Renaud

Add ipa-cert-fix tool

2019-05-29T02:49:27+00:00

The ipa-cert-fix tool wraps `pki-server cert-fix`, performing
additional certificate requests for non-Dogtag IPA certificates and
performing additional actions.  In particular:

- Run cert-fix with arguments particular to the IPA deployment.

- Update IPA RA certificate in the ipara user entry (if renewed).

- Add shared certificates (if renewed) to the ca_renewal LDAP
  container for replication.

- Become the CA renewal master if shared certificates were renewed.
  This ensures other CA replicas, including the previous CA renewal
  master if not the current host, pick up those new certificates
  when Certmonger attempts to renew them.

Fixes: https://pagure.io/freeipa/issue/7885
Reviewed-By: Florence Blanc-Renaud

ipa-replica-manage: remove "last init status" if it's None.

2019-05-28T07:47:55+00:00

we remove the "last init status" section in the output of
ipa-replica-manage to avoid confusion and show epoch date
when status is None

Fixes: https://pagure.io/freeipa/issue/7716

Signed-off-by: German Parente 
Reviewed-By: Rob Crittenden 
Reviewed-By: Francois Cami 
Reviewed-By: Florence Blanc-Renaud