freeipa.git/ipa-client/ipaclient, branch AD-binds FreeIPA patches ipa client: make --ntp-server option multivalued 2015-04-24T13:36:07+00:00 Martin Basti mbasti@redhat.com 2015-04-14T16:56:47+00:00 e395bdb911ebf69fbf6b3e1c9e0e148a9600bd90 There can be more ntp servers in ntp.conf Required for ticket: https://fedorahosted.org/freeipa/ticket/4981 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 
There can be more ntp servers in ntp.conf

Required for ticket: https://fedorahosted.org/freeipa/ticket/4981

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Adopted kinit_keytab and kinit_password for kerberos auth 2015-04-20T08:27:35+00:00 Martin Babinsky mbabinsk@redhat.com 2015-03-16T15:43:10+00:00 3d2feac0e416c66ba37eee53ef5b3833c2c3e414 Calls to ipautil.run using kinit were replaced with calls kinit_keytab/kinit_password functions implemented in the PATCH 0015. Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: Simo Sorce <ssorce@redhat.com> Reviewed-By: Petr Spacek <pspacek@redhat.com> 
Calls to ipautil.run using kinit were replaced with calls
kinit_keytab/kinit_password functions implemented in the PATCH 0015.

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
Reviewed-By: Petr Spacek <pspacek@redhat.com>
client: Fix ca_is_enabled calls 2015-03-19T14:38:34+00:00 Jan Cholasta jcholast@redhat.com 2015-03-17T09:35:49+00:00 572d68b5392ae23747d48e9328e4e0df42029b58 The command was added in API version 2.107. Old IPA servers may crash with NetworkError on ca_is_enabled, handle this case gracefully. https://fedorahosted.org/freeipa/ticket/4565 Reviewed-By: David Kupka <dkupka@redhat.com> 
The command was added in API version 2.107. Old IPA servers may crash with
NetworkError on ca_is_enabled, handle this case gracefully.

https://fedorahosted.org/freeipa/ticket/4565

Reviewed-By: David Kupka <dkupka@redhat.com>
Timeout when performing time sync during client install 2015-03-16T14:55:26+00:00 Nathan Kinder nkinder@redhat.com 2015-02-25T23:19:47+00:00 a58b77ca9cd3620201306258dd6bd05ea1c73c73 We use ntpd now to sync time before fetching a TGT during client install. Unfortuantely, ntpd will hang forever if it is unable to reach the NTP server. This patch adds the ability for commands run via ipautil.run() to have an optional timeout. This capability is used by the NTP sync code that is run during ipa-client-install. Ticket: https://fedorahosted.org/freeipa/ticket/4842 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 
We use ntpd now to sync time before fetching a TGT during client
install.  Unfortuantely, ntpd will hang forever if it is unable to
reach the NTP server.

This patch adds the ability for commands run via ipautil.run() to
have an optional timeout.  This capability is used by the NTP sync
code that is run during ipa-client-install.

Ticket: https://fedorahosted.org/freeipa/ticket/4842
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
ipa-client-install: put eol character after the last line of altered config file(s) 2015-02-10T11:54:29+00:00 Martin Babinsky mbabinsk@redhat.com 2015-01-30T13:24:15+00:00 a4481023474772a073553bf2395801cdd08c1088 https://fedorahosted.org/freeipa/ticket/4864 Reviewed-By: Martin Basti <mbasti@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4864

Reviewed-By: Martin Basti <mbasti@redhat.com>
Add debug messages into client autodetection 2015-01-21T07:34:26+00:00 Martin Basti mbasti@redhat.com 2015-01-20T16:30:51+00:00 af1f87a0346653532deeb04dc7f236d143c8b9a7 Is hard to debug what the problem with REALM is without debug messages. Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> 
Is hard to debug what the problem with REALM is without debug messages.

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Do not wait for new CA certificate to appear in LDAP in ipa-certupdate 2014-10-30T09:51:36+00:00 Jan Cholasta jcholast@redhat.com 2014-10-14T09:12:55+00:00 35947c6e103a18c3f81af4b6d3795218a93b3b57 If new certificate is not available, reuse the old one, instead of waiting indefinitely for the new certificate to appear. https://fedorahosted.org/freeipa/ticket/4628 Reviewed-By: David Kupka <dkupka@redhat.com> 
If new certificate is not available, reuse the old one, instead of waiting
indefinitely for the new certificate to appear.

https://fedorahosted.org/freeipa/ticket/4628

Reviewed-By: David Kupka <dkupka@redhat.com>
Check LDAP instead of local configuration to see if IPA CA is enabled 2014-10-17T10:53:11+00:00 Jan Cholasta jcholast@redhat.com 2014-10-13T12:30:15+00:00 608851d3f86a9082b394c30fe0c7a7b33d43f363 The check is done using a new hidden command ca_is_enabled. https://fedorahosted.org/freeipa/ticket/4621 Reviewed-By: David Kupka <dkupka@redhat.com> 
The check is done using a new hidden command ca_is_enabled.

https://fedorahosted.org/freeipa/ticket/4621

Reviewed-By: David Kupka <dkupka@redhat.com>
Fix certmonger search for the CA cert in ipa-certupdate and ipa-cacert-manage 2014-09-30T08:01:38+00:00 Jan Cholasta jcholast@redhat.com 2014-09-24T17:22:59+00:00 da24d8a6e7a8f63e9fd6a603f658cff6cb784996 The search criteria did not include the CA agent name. https://fedorahosted.org/freeipa/ticket/3259 Reviewed-By: Rob Crittenden <rcritten@redhat.com> 
The search criteria did not include the CA agent name.

https://fedorahosted.org/freeipa/ticket/3259

Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Get server hostname from jsonrpc_uri in ipa-certupdate 2014-09-30T08:01:38+00:00 Jan Cholasta jcholast@redhat.com 2014-09-18T09:15:49+00:00 4e680467517365caca596244ffc86e69037bde83 https://fedorahosted.org/freeipa/ticket/3259 Reviewed-By: Rob Crittenden <rcritten@redhat.com> 
https://fedorahosted.org/freeipa/ticket/3259

Reviewed-By: Rob Crittenden <rcritten@redhat.com>