freeipa.git/install/tools, branch webui-details

This patch removes the existing UI functionality, as a prep for adding the Javascript based ui.

2010-07-29T14:44:56+00:00

Fix ipa-compat-manage and ipa-nis-manage

2010-07-15T15:18:11+00:00

Neither of these was working properly, I assume due to changes in the ldap
backend. The normalizer now appends the basedn if it isn't included and
this was causing havoc with these utilities.

After fixing the basics I found a few corner cases that I also addressed:
- you can't/shouldn't disable compat if the nis plugin is enabled
- we always want to load the nis LDAP update so we get the netgroup config
- LDAPupdate.update() returns True/False, not an integer

I took some time and fixed up some things pylint complained about too.

Ticket #83

Fall back to DM password if GSSAPI fails and make deleting more user-friendly

2010-06-01T13:52:21+00:00

Try to be a bit more descriptive about why a deletion fails and generate a
prettier error message.

Query the remote server to see if this replica host already exists.

2010-06-01T13:52:14+00:00

If it does then the installation will fail trying to set up the
keytabs, and not in a way that you say "aha, it's because the host is
already enrolled."

Add LDAP upgrade over ldapi support.

2010-06-01T13:52:10+00:00

This disables all but the ldapi listener in DS so it will be quiet when
we perform our upgrades. It is expected that any other clients that
also use ldapi will be shut down by other already (krb5 and dns).

Add ldapi as an option in ipaldap and add the beginning of pure offline
support (e.g. direct editing of LDIF files).

Create default HBAC rule allowing any user to access any host from any host

2010-05-05T18:57:58+00:00

This is to make initial installation and testing easier.

Use the --no_hbac_allow option on the command-line to disable this when
doing an install.

To remove it from a running server do: ipa hbac-del allow_all

Make the installer/uninstaller more aware of its state

2010-05-03T19:41:18+00:00

We have had a state file for quite some time that is used to return
the system to its pre-install state. We can use that to determine what
has been configured.

This patch:
- uses the state file to determine if dogtag was installed
- prevents someone from trying to re-install an installed server
- displays some output when uninstalling
- re-arranges the ipa_kpasswd installation so the state is properly saved
- removes pkiuser if it was added by the installer
- fetches and installs the CA on both masters and clients

Fix a couple of syntax errors in the installer.

2010-04-27T21:51:13+00:00

I meant to push these along with the original patch but pushed the wrong one.

Replace a new instance of IPAdmin use in ipa-server-install.

2010-04-27T20:29:36+00:00

Connect to the ldap during the uninstallation

2010-04-23T21:19:36+00:00

We need to ask the user for a password and connect to the ldap so the
bind uninstallation procedure can remove old records. This is of course
only helpful if one has more than one IPA server configured.