freeipa.git/install/tools, branch my-master

install: Add tool to convert from selfsign to dogtag CA

2013-05-23T16:55:27+00:00

Set KRB5CCNAME so that dirsrv can work with newer krb5-server

2013-05-14T21:01:03+00:00

The DIR ccache format is now the default in krb5-server 1.11.2-4
but /run/user/ isn't created for Apache by anything so it
has no ccache (and it doesn't have SELinux permissions to write here
either).

Use KRB5CCNAME to set a file path instead in /etc/sysconfig/dirsrv.

https://fedorahosted.org/freeipa/ticket/3628

Set KRB5CCNAME so httpd s4u2proxy can with with newer krb5-server

2013-05-09T07:15:47+00:00

The DIR ccache format is now the default in krb5-server 1.11.2-4
but /run/user/ isn't created for Apache by anything so it
has no ccache (and it doesn't have SELinux permissions to write here
either).

Use KRB5CCNAME to set a file path instead in /etc/sysconfig/httpd.

https://fedorahosted.org/freeipa/ticket/3607

Generate plugin index dynamically

2013-05-06T14:22:30+00:00

https://fedorahosted.org/freeipa/ticket/3235

Web UI plugin loader

2013-05-06T14:22:20+00:00

https://fedorahosted.org/freeipa/ticket/3235

Handle connection timeout in ipa-replica-manage

2013-05-02T14:55:54+00:00

When connecting to replica, ipa-replica-manage could fail with
unknown error due to connection time out. This patch properly
handles the situation

Fixed in conjunction with https://fedorahosted.org/freeipa/ticket/3524

Enforce host existence only where needed in ipa-replica-manage

2013-05-02T14:53:15+00:00

In ipa-replica-manage commands, we enforce that hostnames we work
with are resolvable. However, this caused errors while deleting
or disconnecting a ipa / winsync replica, if that replica was down
and authoritative server for itself.

Also adds an --no-lookup flag to disable host existence checks.

https://fedorahosted.org/freeipa/ticket/3524

Always stop dirsrv in 'ipactl stop'

2013-04-29T13:38:30+00:00

Ensure that 'ipactl stop' stops the dirsrv instance, even when no other
services are running.

https://fedorahosted.org/freeipa/ticket/3574

Fix syntax errors in schema files

2013-04-26T15:15:16+00:00

- add missing closing parenthesis in idnsRecord declaration
- remove extra dollar sign from ipaSudoRule declaration
- handle missing/extraneous X-ORIGIN lines in 10-selinuxusermap.update

This does not use the schema updater because the syntax needs to be
fixed in the files themselves, otherwise 389 1.3.2+ will fail
to start.
Older DS versions transparently fix the syntax errors.

The existing ldap-updater directive for ipaSudoRule is fixed
(ldap-updater runs after upgradeconfig).

https://fedorahosted.org/freeipa/ticket/3578

Do not display an interactive mode message in unattended mode

2013-04-24T17:33:49+00:00

https://fedorahosted.org/freeipa/ticket/3576