freeipa.git/ipaplatform/base, branch mindatefix

Do not allow installation in FIPS mode

2016-06-29T14:17:27+00:00

https://fedorahosted.org/freeipa/ticket/5761

Reviewed-By: Martin Basti 
Reviewed-By: Rob Crittenden

Fixes CA always being presented as running

2016-06-15T16:11:28+00:00

Even after manually stopping the pki-tomcatd service instance the
service's is_running() method would still return True.

https://fedorahosted.org/freeipa/ticket/5898

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta

Add custodia store for lightweight CA key replication

2016-06-09T07:04:27+00:00

Due to limitations in Dogtag's use of NSSDB, importing private keys
must be done by the Dogtag Java process itself.  This requires a
PKIArchiveOptions format (signing key wrapped with host CA key) -
PKCS #12 cannot be used because that would require decrypting the
key in Dogtag's memory, albeit temporarily.

Add a new custodia store that executes a 'pki' command to acquire
the wrapped key.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta

Added krb5.conf.d/ to included dirs in krb5.conf

2016-06-05T07:47:13+00:00

The include of /etc/krb5.conf.d/ is required for crypto-policies to work properly

https://fedorahosted.org/freeipa/ticket/5912

Reviewed-By: Martin Basti 
Reviewed-By: Alexander Bokovoy

Tasks: raise NotImplementedError for not implemented methods

2016-04-26T12:01:42+00:00

Is safer to raise error than trying to find what is wrong with method
that is not correctly overriden

The new method set_hostname has been added which should be overriden on other
platforms.

https://fedorahosted.org/freeipa/ticket/5794

Reviewed-By: David Kupka

Remove deprecated hostname restoration from Fedora18

2016-04-26T12:01:42+00:00

This is not needed on new Fedora, because restore will not be effective.

https://fedorahosted.org/freeipa/ticket/5794

Reviewed-By: David Kupka

Always set hostname

2016-04-26T12:01:42+00:00

This prevents cases when hostname on system is set inconsistently
(transient and static hostname differs) and may cause IPA errors.

This commit ensures that all hostnames are set properly.

https://fedorahosted.org/freeipa/ticket/5794

Reviewed-By: David Kupka

Configure httpd service from installer instead of directly from RPM

2016-04-22T08:19:25+00:00

File httpd.service was created by RPM, what causes that httpd service may
fail due IPA specific configuration even if IPA wasn't installed or was
uninstalled (without erasing RPMs).

With this patch httpd service is configured by httpd.d/ipa.conf during
IPA installation and this config is removed by uninstaller, so no
residual http configuration related to IPA should stay there.

https://fedorahosted.org/freeipa/ticket/5681

Reviewed-By: Stanislav Laznicka

Use netifaces module instead of 'ip' command

2016-04-14T11:53:27+00:00

Netifaces allows to get addresses from local interfaces of the host in
safer way than parsing output of the ip command.

https://fedorahosted.org/freeipa/ticket/5591

Reviewed-By: David Kupka

Fix kdc.conf.template to use ipaplatform.paths.

2016-03-23T12:35:29+00:00

https://fedorahosted.org/freeipa/ticket/5343

Reviewed-By: David Kupka