freeipa.git/ipa-client/ipaclient, branch kdc-fixes

Modernize number literals

2015-07-31T13:22:19+00:00

Use Python-3 compatible syntax, without breaking compatibility with py 2.7

- Octals literals start with 0o to prevent confusion
- The "L" at the end of large int literals is not required as they use
  long on Python 2 automatically.
- Using 'int' instead of 'long' for small numbers is OK in all cases except
  strict type checking checking, e.g. type(0).

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Jan Cholasta

enable debugging of ntpd during client installation

2015-07-20T14:19:08+00:00

When installing IPA client in debug mode, the ntpd command spawned during
initial time-sync with master KDC will also run in debug mode.

https://fedorahosted.org/freeipa/ticket/4931

Reviewed-By: Jan Cholasta 
Reviewed-By: Martin Basti

Remove tuple unpacking from except clause ipa-client/ipaclient/ipachangeconf.py

2015-07-14T11:43:50+00:00

Python 3 doesn't support tuple unpacking in except clauses. All implicit
tuple unpackings have been replaced with explicit unpacking of e.args.

https://fedorahosted.org/freeipa/ticket/5120

Reviewed-By: Tomas Babej 
Reviewed-By: Alexander Bokovoy

ipa client: make --ntp-server option multivalued

2015-04-24T13:36:07+00:00

There can be more ntp servers in ntp.conf

Required for ticket: https://fedorahosted.org/freeipa/ticket/4981

Reviewed-By: Martin Babinsky

Adopted kinit_keytab and kinit_password for kerberos auth

2015-04-20T08:27:35+00:00

Calls to ipautil.run using kinit were replaced with calls
kinit_keytab/kinit_password functions implemented in the PATCH 0015.

Reviewed-By: Jan Cholasta 
Reviewed-By: Simo Sorce 
Reviewed-By: Petr Spacek

client: Fix ca_is_enabled calls

2015-03-19T14:38:34+00:00

The command was added in API version 2.107. Old IPA servers may crash with
NetworkError on ca_is_enabled, handle this case gracefully.

https://fedorahosted.org/freeipa/ticket/4565

Reviewed-By: David Kupka

Timeout when performing time sync during client install

2015-03-16T14:55:26+00:00

We use ntpd now to sync time before fetching a TGT during client
install.  Unfortuantely, ntpd will hang forever if it is unable to
reach the NTP server.

This patch adds the ability for commands run via ipautil.run() to
have an optional timeout.  This capability is used by the NTP sync
code that is run during ipa-client-install.

Ticket: https://fedorahosted.org/freeipa/ticket/4842
Reviewed-By: Martin Babinsky

ipa-client-install: put eol character after the last line of altered config file(s)

2015-02-10T11:54:29+00:00

https://fedorahosted.org/freeipa/ticket/4864

Reviewed-By: Martin Basti

Add debug messages into client autodetection

2015-01-21T07:34:26+00:00

Is hard to debug what the problem with REALM is without debug messages.

Reviewed-By: Alexander Bokovoy

Do not wait for new CA certificate to appear in LDAP in ipa-certupdate

2014-10-30T09:51:36+00:00

If new certificate is not available, reuse the old one, instead of waiting
indefinitely for the new certificate to appear.

https://fedorahosted.org/freeipa/ticket/4628

Reviewed-By: David Kupka