freeipa.git/install/tools, branch kdc-fixes

Allow value 'no' for replica-certify-all attr in abort-clean-ruv subcommand

2015-07-17T14:47:18+00:00

--force option set replica-certify-all to 'no' during abort-clean-ruv
subcommand

https://fedorahosted.org/freeipa/ticket/4988

Reviewed-By: Petr Vobornik

ipa-adtrust-install: allow configuring of trust agents

2015-07-07T23:56:52+00:00

Trust agents are IPA master without Samba which can serve
information about users from trusted forests. Such IPA masters
cannot be used to configure trust but they can resolve AD users and groups
for IPA clients enrolled to them.

Since support from both FreeIPA and SSSD is needed to enable
trust agent support, we currently only consider those IPA masters
which have been upgraded to FreeIPA 4.2 or later.

Part of https://fedorahosted.org/freeipa/ticket/4951

Reviewed-By: Tomas Babej

Fix regression: ipa-dns-install will add CA records if required

2015-07-07T22:32:05+00:00

https://fedorahosted.org/freeipa/ticket/5101

Reviewed-By: Tomas Babej

Improve error handling in ipa-httpd-kdcproxy

2015-07-07T14:31:04+00:00

The pre start script 'ipa-httpd-kdcproxy' for httpd.service now handles
connection and authentication errors more gracefully. If the script is
not able to conenct to LDAP, it only prints a warning and exits with
status code 0. All other errors are still reported as fatal error and
result in a non-zero exit code.

This fixes a problem with offline RPM updates. A restart of Apache no
longer fails when LDAP is not running.

Reviewed-By: Alexander Bokovoy

DNSSEC: Detect attempt to install & disable master at the same time.

2015-07-07T06:37:15+00:00

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Petr Spacek

DNSSEC: update message

2015-07-07T06:37:15+00:00

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Petr Spacek

DNSSEC: allow to disable/replace DNSSEC key master

2015-07-07T06:37:15+00:00

This commit allows to replace or disable DNSSEC key master

Replacing DNSSEC master requires to copy kasp.db file manually by user

ipa-dns-install:
--disable-dnssec-master  DNSSEC master will be disabled
--dnssec-master --kasp-db=FILE  This configure new DNSSEC master server,  kasp.db from old server is required for sucessful replacement
--force Skip checks

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Petr Spacek

ipa-replica-manage del: add timeout to segment removal check

2015-07-03T06:47:23+00:00

Reviewed-By: David Kupka

ipa-replica-manage del: relax segment deletement check if topology is disconnected

2015-07-03T06:47:23+00:00

https://fedorahosted.org/freeipa/ticket/5072

Reviewed-By: David Kupka

man: Add manpage for ipa-winsync-migrate

2015-07-02T11:23:21+00:00

https://fedorahosted.org/freeipa/ticket/4524

Reviewed-By: Martin Babinsky