freeipa.git/ipaplatform/redhat, branch pwdpolicy

Fix for handling CalledProcessError in authconfig

2017-01-18T07:51:38+00:00

NIS configuration error should be hidden from user
while running ipa-client-install

Fixes https://fedorahosted.org/freeipa/ticket/5244

Signed-off-by: Abhijeet Kasurde 
Reviewed-By: Tomas Krizek 
Reviewed-By: Stanislav Laznicka

client, platform: Use paths.SSH* instead of get_config_dir().

2017-01-05T16:50:03+00:00

Reviewed-By: Martin Basti

ipautil: move is_fips_enabled() to ipaplatform.tasks

2016-11-29T13:50:51+00:00

The FIPS setting is platform-specific.

https://fedorahosted.org/freeipa/ticket/6474

Reviewed-By: Stanislav Laznicka

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29T13:50:51+00:00

SHARE_DIR and PLUGIN_SHARE_DIR depend on ipaplatform.

Replace all uses of SHARE_DIR with paths.USR_SHARE_IPA_DIR and remove
both SHARE_DIR and PLUGIN_SHARE_DIR.

https://fedorahosted.org/freeipa/ticket/6474

Reviewed-By: Stanislav Laznicka

Break ipaplatform / ipalib import cycle of hell

2016-11-24T15:30:32+00:00

Here is an attempt to break the import cycle of hell between ipaplatform
and ipalib. All services now pass an ipalib.api object to
services.service(). RedHatServices.__init__() still needs to do a local
import because it initializes its wellknown service dict with service
instances.

Signed-off-by: Christian Heimes 
Reviewed-By: Martin Basti

Minor fixes for IPAVersion class

2016-11-22T16:44:27+00:00

Py3: classes with __eq__ must provide __hash__ function or set __hash__
to None.
Comparison function like __eq__ must signal unsupported types by
returning NotImplemented. Python turns this in a proper TypeError.
Make the version member read-only and cache _bytes represention.

https://fedorahosted.org/freeipa/ticket/6473

Signed-off-by: Christian Heimes 
Reviewed-By: Martin Basti

client: remove hard dependency on pam_krb5

2016-09-19T06:01:26+00:00

If ipa-client-install is executed with --no-sssd, check if pam_krb5 is
available before proceeding with the install.

https://fedorahosted.org/freeipa/ticket/5557

Reviewed-By: Stanislav Laznicka

install: Call hostnamectl set-hostname only if --hostname option is used

2016-08-10T08:48:05+00:00

This commit also splits hostname backup and configuration into two separate
functions. This allows us to backup hostname without setting it at the
same time.

https://fedorahosted.org/freeipa/ticket/6071

Reviewed-By: Jan Cholasta

RedHatCAService should wait for local Dogtag instance

2016-08-03T17:20:42+00:00

RedHatCAService.wait_until_running() uses dogtag.ca_status() to make a
HTTP(s) request to Dogtag in order to check if /ca/admin/ca/getStatus
returns OK. The ca_status() function defaults to api.env.ca_host as
host.

On a replica without CA ca_host is a remote host (e.g. master's
FQDN). ipa-ca-install waits for master:8080 instead of replica:8080,
which might be blocked by a firewall.

https://fedorahosted.org/freeipa/ticket/6016

Reviewed-By: Petr Spacek 
Reviewed-By: Martin Basti

Do not log error when removing a non-existing file

2016-07-01T07:01:21+00:00

When the uninstaller tries to remove /etc/systemd/system/httpd.d/ipa.conf and
the file does not exist, only log to debug instead of error.

https://fedorahosted.org/freeipa/ticket/6012

Reviewed-By: Martin Basti