freeipa.git/install/updates, branch AD-binds

Server Upgrade: create default config for NIS Server plugin

2015-06-18T15:48:36+00:00

Plugin is disabled by default.

This commit prevents false positive upgrade errors.

Reviewed-By: Martin Basti

add DS index for userCertificate attribute

2015-06-18T13:42:03+00:00

'eq' and 'pres' indices for userCertificate attribute allow for more efficient
lookup and matching of binary certificates assigned to users, hosts, and
services.

Part of http://www.freeipa.org/page/V4/User_Certificates

Reviewed-By: Martin Basti

DNS: add UnknownRecord to schema

2015-06-18T12:37:28+00:00

defintion of UnknownRecord attributetype

https://fedorahosted.org/freeipa/ticket/4939

Reviewed-By: Petr Spacek

Add CA ACL plugin

2015-06-11T10:50:31+00:00

Implement the caacl commands, which are used to indicate which
principals may be issued certificates from which (sub-)CAs, using
which profiles.

At this commit, and until sub-CAs are implemented, all rules refer
to the top-level CA (represented as ".") and no ca-ref argument is
exposed.

Also, during install and upgrade add a default CA ACL that permits
certificate issuance for all hosts and services using the profile
'caIPAserviceCert' on the top-level CA.

Part of: https://fedorahosted.org/freeipa/ticket/57
Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Martin Basti

add entries required by topology plugin on update

2015-06-11T10:10:40+00:00

These entries were not added on upgrade from old IPA servers and on replica
creation.

https://fedorahosted.org/freeipa/ticket/4302

Reviewed-By: Martin Babinsky

move replications managers group to cn=sysaccounts,cn=etc,$SUFFIX

2015-06-11T10:10:40+00:00

https://fedorahosted.org/freeipa/ticket/4302

Reviewed-By: Martin Babinsky

vault: Move vaults to cn=vaults,cn=kra

2015-06-10T16:17:34+00:00

https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka

Add usercertificate attribute to user plugin

2015-06-04T08:27:33+00:00

Part of: https://fedorahosted.org/freeipa/tickets/4938

Reviewed-By: Martin Basti

Add certprofile plugin

2015-06-04T08:27:33+00:00

Add the 'certprofile' plugin which defines the commands for managing
certificate profiles and associated permissions.

Also update Dogtag network code in 'ipapython.dogtag' to support
headers and arbitrary request bodies, to facilitate use of the
Dogtag profiles REST API.

Part of: https://fedorahosted.org/freeipa/ticket/57

Reviewed-By: Martin Basti

Add plugin to manage service constraint delegations

2015-06-03T09:47:40+00:00

Service Constraints are the delegation model used by
ipa-kdb to grant service A to obtain a TGT for a user
against service B.

https://fedorahosted.org/freeipa/ticket/3644

Reviewed-By: Martin Basti