freeipa.git/install, branch my-master

install: Add tool to convert from selfsign to dogtag CA

2013-05-23T16:55:27+00:00

Web UI: move ./_base/metadata_provider.js to ./metadata.js

2013-05-17T10:32:24+00:00

Metadata provider is IPA specific object, not a framework object, so it should not be in _base directory.

https://fedorahosted.org/freeipa/ticket/3604

Unite and move facet pre_ops to related modules

2013-05-17T10:32:16+00:00

Facet pre_ops defined in ./facet module were moved to modules where facet are actually defined. Moved pre_ops were united with the ones defined for the facets in these modules.

The move simplifies module dependencies - there is no reason to have general facet module dependent on specialized facet modules.

Pre_ops uniting makes the code simpler.

https://fedorahosted.org/freeipa/ticket/3605

Move spec modifications from facet factories to pre_ops

2013-05-17T10:32:06+00:00

Spec modifications in factories makes inheritance and extensibility more difficult.

Moving them to pre_ops allows modification of their output by other pre_ops.

https://fedorahosted.org/freeipa/ticket/3605

Do not display success message on failure in web UI

2013-05-17T10:31:14+00:00

https://fedorahosted.org/freeipa/ticket/3591

Add IPA OTP schema and ACLs

2013-05-17T07:30:51+00:00

This commit adds schema support for two factor authentication via
OTP devices, including RADIUS or TOTP. This schema will be used
by future patches which will enable two factor authentication
directly.

https://fedorahosted.org/freeipa/ticket/3365
http://freeipa.org/page/V3/OTP

Add ipaUserAuthType and ipaUserAuthTypeClass

2013-05-17T07:30:51+00:00

This schema addition will be useful for future commits. It allows us to
define permitted external authentication methods on both the user and
global config. The implementation is generic, but the immediate usage
is for otp support.

https://fedorahosted.org/freeipa/ticket/3365
http://freeipa.org/page/V3/OTP

Prompt for nameserver IP address in dnszone-add

2013-05-16T09:01:33+00:00

Prompt for nameserver IP address in interactive mode of dnszone-add.

Add a corresponding field to dnszone creation dialog in the web UI.

This parameter is required if and only if:
* New zone is a forward zone
* Nameserver is defined inside the new zone

Add a new unit test to cover this functionality.

https://fedorahosted.org/freeipa/ticket/3603

Set KRB5CCNAME so that dirsrv can work with newer krb5-server

2013-05-14T21:01:03+00:00

The DIR ccache format is now the default in krb5-server 1.11.2-4
but /run/user/ isn't created for Apache by anything so it
has no ccache (and it doesn't have SELinux permissions to write here
either).

Use KRB5CCNAME to set a file path instead in /etc/sysconfig/dirsrv.

https://fedorahosted.org/freeipa/ticket/3628

Fix: HBAC Test tab is missing

2013-05-14T16:43:54+00:00

Caused by typo in metadata provider source path.

No metadata -> no HBAC test entity -> no tab

https://fedorahosted.org/freeipa/ticket/3627