freeipa.git/ipaplatform, branch AD-binds

Use 389-ds centralized scripts.

2015-06-11T11:16:06+00:00

Directory server is deprecating use of tools in instance specific paths. Instead
tools in bin/sbin path should be used.

https://fedorahosted.org/freeipa/ticket/4051

Reviewed-By: Martin Basti

vault: Fix ipa-kra-install

2015-06-10T16:17:34+00:00

Use state in LDAP rather than local state to check if KRA is installed.
Use correct log file names.

https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka

vault: Move vaults to cn=vaults,cn=kra

2015-06-10T16:17:34+00:00

https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka

Fix: use DS socket check only for upgrade

2015-05-26T11:30:15+00:00

To detect if DS server is running, use the slapd socket for upgrade, and the LDAP port
for installation.

Without enabled LDAPi socket checking doesnt work.

https://fedorahosted.org/freeipa/ticket/4904

Reviewed-By: Fraser Tweedale

Server Upgrade: wait until DS is ready

2015-05-22T13:51:05+00:00

During server upgrade we should wait until DS is ready after restart, otherwise
connection error is raised.

Instead of 389 port, the DS socket is checked.

https://fedorahosted.org/freeipa/ticket/4904

Reviewed-By: Fraser Tweedale

explicitly destroy httpd service ccache file during httpinstance removal

2015-05-19T12:59:18+00:00

during IPA server uninstall, the httpd service ccache is not removed from
runtime directory. This file then causes server-side client install to fail
when performing subsequent installation without rebooting/recreating runtime
directories.

This patch ensures that the old httpd ccache is explicitly destroyed during
uninstallation.

https://fedorahosted.org/freeipa/ticket/4973

Reviewed-By: David Kupka

Dont use the proxy to check CA status

2015-05-15T10:22:28+00:00

Checking status of the CA via proxy cause issues when httpd instance is
down.

To check status of CA we do not need proxy.

https://fedorahosted.org/freeipa/ticket/4994

Reviewed-By: Jan Cholasta

Server Upgrade: Verify version and platform

2015-05-04T11:16:26+00:00

Verify version and platform before upgrade or ipactl start|restart

Upgrade:
* do not allow upgrade on different platforms
* do not allow upgrade data with higher version than build has

Start:
* do not start services if platform mismatch
* do not start services if upgrade is needed
* do not start services if data with higher version than build has

New ipactl options:
--skip-version-check: do not validate IPA version
--ignore-service-failures (was --force): ignore if a service start fail
      and continue with starting other services
--force: combine --skip-version-check and --ignore-service-failures

https://fedorahosted.org/freeipa/ticket/4904

Reviewed-By: Jan Cholasta 
Reviewed-By: David Kupka

DNSSEC CI tests

2015-04-14T17:29:36+00:00

Tests:
* install master, replica, then instal DNSSEC on master
  * test if zone is signed (added on master)
  * test if zone is signed (added on replica)

* install master with DNSSEC, then install replica
  * test if root zone is signed
  * add zone, verify signatures using our root zone

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Milan Kubik

show the exception message thrown by dogtag._parse_ca_status during install

2015-03-26T13:46:56+00:00

https://fedorahosted.org/freeipa/ticket/4885

Reviewed-By: Martin Basti 
Reviewed-By: Fraser Tweedale