freeipa.git/ipa-server/ipaserver, branch ipa-1-1

CVE 2008 3274 related fixes

2008-09-10T19:43:41+00:00

When an LDAP connection fails, display the host one is trying to connect to.

2008-06-10T02:13:54+00:00

Move version.py to the common ipa directory instead of being server-based so it can be used by the client tool.

2008-06-04T02:39:11+00:00

Fix the client tool imports to fail more gracefully.

Make check_inst() a standalone function in bindinstance.

2008-05-30T15:21:11+00:00

When an install instance is created that contains a pointer to a sysrestore
point it loads in the current configuration when instantiated. If an
instance is instantiated but not used then changes may occur to the
system state that it is unaware of. So one needs to take care in the order
that things are done to avoid losing information.

When bind was setup it was overwriting all data in sysrestore.state and
leaving just a [named] section. This caused problems at uninstall.

448173

Move admin into cn=users,cn=accounts

2008-05-23T19:07:37+00:00

After some deep thinking I think the advantages of keeping all
posix enabled user accounts under cn=users,cn=accounts overweight a
perceived better protection of the admin account by keeping it in a
separate tree.

Change file mode of log files to 600.

2008-05-21T02:43:03+00:00

Don't pass the Directory Manager password on the command-line to ldapmodify.

2008-05-19T21:07:41+00:00

Use split instead of find as split does not fail to provide a complete

2008-05-15T18:26:25+00:00

component if no '.' is found.

Fix typo, /etc/resolve.conf -> /etc/resolv.conf.

2008-05-14T20:25:06+00:00

Make sure all services are stopped during uninstall.

2008-05-14T13:57:09+00:00

We were just shutting down the KDC if it had been started prior to IPA
installation. We need to stop it in all cases.

And we should restart nscd as it may have made an LDAP connection.

440322