freeipa.git/install, branch mspac

Do not allow '%' in DM password

2013-10-04T15:41:20+00:00

Having '%' in DM password causes pkispawn to crash. Do not allow
users to enter it until pkispawn is fixed.

https://bugzilla.redhat.com/show_bug.cgi?id=953488

Update translations from Transifex

2013-10-04T12:51:19+00:00

Remove faulty DNS memberOf Task

2013-10-04T12:30:13+00:00

This task was added with a DN colliding with privilege update memberOf
task being run later and caused this task to be ineffective and thus
miss some privilege membership, like "SELinux User Map Administrators"

DNS update plugin do not need to run any task at all as privileges
will be updated later in scope of 55-pbacmemberof.update

https://fedorahosted.org/freeipa/ticket/3877

Allow PKCS#12 files with empty password in install tools.

2013-10-04T08:27:23+00:00

https://fedorahosted.org/freeipa/ticket/3897

Read passwords from stdin when importing PKCS#12 files with pk12util.

2013-10-04T08:27:23+00:00

This works around pk12util refusing to use empty password files, which prevents
the use of PKCS#12 files with empty password.

https://fedorahosted.org/freeipa/ticket/3897

Warn user about realm-domain mismatch in install scripts

2013-10-03T10:02:44+00:00

If the IPA server is setup with non-matching domain and realm
names, it will not be able to estabilish trust with the Active
Directory.

Adds warnings to the ipa-server-install and warning to the
ipa-adtrust-install (which has to be confirmed).

Man pages for the ipa-server-install and ipa-adtrust-install were
updated with the relevant notes.

https://fedorahosted.org/freeipa/ticket/3924

Fix enablement of automount map type selector

2013-10-03T07:13:45+00:00

Map type radio used old way of defining that its value should not be used in add command.  Recent patch related to 'enable' attribute hardened/fixed the behavior of radio widgets so they are disabled in UI as well when enabled==false. Automount did not reflect this change.

https://fedorahosted.org/freeipa/ticket/3954

Allow edit of ipakrbokasdelegate in Web UI when attrlevelrights are unknown

2013-09-26T08:24:14+00:00

Old host entries are missing object class with krbticketflags attribute. Therefore UI does not receive attrlevelrights for it. This OC is added when ipakrbokasdelegate is set.

This patch adds the usual hack for such cases.

https://fedorahosted.org/freeipa/ticket/3940

ipa-sam: do not modify objectclass when trust object already created

2013-09-20T07:59:02+00:00

When trust is established, last step done by IPA framework is to set
encryption types associated with the trust. This operation fails due
to ipa-sam attempting to modify object classes in trust object entry
which is not allowed by ACI.

Additionally, wrong handle was used by dcerpc.py code when executing
SetInformationTrustedDomain() against IPA smbd which prevented even to
reach the point where ipa-sam would be asked to modify the trust object.

Fix redirection on deletion of last dns record entry

2013-09-16T11:56:25+00:00

https://fedorahosted.org/freeipa/ticket/3907