freeipa.git/install/tools, branch ipasam_getkeytab

implement domain level 1 specific topology checks into IPA server uninstaller

2015-12-02T13:10:19+00:00

When uninstalling domain level 1 master its removal from topology is checked
on remote masters. The uninstaller also checks whether the uninstallation
disconnects the topology and if yes aborts the procedure. The
'--ignore-disconnected-topology' options skips this check.

https://fedorahosted.org/freeipa/ticket/5377
https://fedorahosted.org/freeipa/ticket/5409

Reviewed-By: Jan Cholasta 
Reviewed-By: Martin Basti

extract domain level 1 topology-checking code from ipa-replica-manage

2015-12-02T13:10:19+00:00

This facilitates reusability of this code in other components, e.g. IPA server
uninstallers.

https://fedorahosted.org/freeipa/ticket/5409

Reviewed-By: Jan Cholasta 
Reviewed-By: Martin Basti

fix 'iparepltopomanagedsuffix' attribute consumers

2015-12-01T12:47:14+00:00

Commit 46ae52569a179f73b1445922f7bac993d598c953 reimplemented reporting of
managed topology suffixes in server-find/show commands using membership
attributes. This patch fixes consumers of this attribute in ipa-replica-manage
command and webui to reflect this change.

Reviewed-By: Martin Basti

change suffices to suffixes

2015-12-01T08:35:42+00:00

Reviewed-By: Martin Babinsky

ipa-ca-install: error when replica file is passed with domain level > 0

2015-11-27T15:14:06+00:00

with replica promotion (domain level > 0) there are no replica files,
thus adding replica file as parameter when domain level > 0 should be
disallowed.

https://fedorahosted.org/freeipa/ticket/5455

Reviewed-By: Martin Babinsky 
Reviewed-By: Jan Cholasta

install: drop support for Dogtag 9

2015-11-25T08:12:25+00:00

Dogtag 9 CA and CA DS install and uninstall code was removed. Existing
Dogtag 9 CA and CA DS instances are disabled on upgrade.

Creating a replica of a Dogtag 9 IPA master is still supported.

https://fedorahosted.org/freeipa/ticket/5197

Reviewed-By: David Kupka

check for disconnected topology and deleted agreements for all suffices

2015-11-13T16:39:24+00:00

The code in ipa-replica-manage which checks for disconnected topology and
deleted agreements during node removal was generalized so that it now performs
these checks for all suffixes to which the node belongs.

https://fedorahosted.org/freeipa/ticket/5309

Reviewed-By: Petr Vobornik

ipa-replica-manage del continues when host does not exist in domain level 1

2015-11-12T13:54:32+00:00

- Raises error and stops operation unless --cleanup is specified.

https://fedorahosted.org/freeipa/ticket/5424

Reviewed-By: Martin Basti

Incomplete ports for IPA AD Trust

2015-11-05T10:04:29+00:00

- Add subsection to ipa-adtrust-install man page
- Update port information in ipa-adtrust-install

https://fedorahosted.org/freeipa/ticket/5414

Reviewed-By: Alexander Bokovoy

ipa-csreplica-manage: disable connect/disconnect/del with domain level > 0

2015-11-02T12:31:27+00:00

* ipa-csreplica-manage {connect|disconnect} - a user should use 'ipa
topologysegment-*' commands
* ipa-csreplica-manage del - a user should use ipa-replica-manage del

https://fedorahosted.org/freeipa/ticket/5405

Reviewed-By: Martin Babinsky