freeipa.git/ipaplatform, branch asn1c-indented

Do not restore SELinux settings that were not backed up

2014-11-19T14:47:45+00:00

https://fedorahosted.org/freeipa/ticket/4678

Reviewed-By: Petr Vobornik

Fix named working directory permissions

2014-11-18T18:49:42+00:00

Just adding dir to specfile doesnt work, because is not guarantee the
named is installed, during RPM installation.

Ticket: https://fedorahosted.org/freeipa/ticket/4716
Reviewed-By: Jan Cholasta

Remove service file even if it isn't link.

2014-11-13T12:53:23+00:00

(Link to) service file from /etc/systemd/system/ must be removed before masking
systemd service.

https://fedorahosted.org/freeipa/ticket/4658

Reviewed-By: Jan Cholasta

ipaplatform: Use the dirsrv service, not target

2014-11-13T10:49:17+00:00

IPA only uses one instance of the directory server. When an instance
is not specified to a call to service.start/stop/restart/...,
use IPA's instance.

Stopping a systemd service is synchronous (bby default), but stopping
a target is not. This will change ensures that the directory server
is actually down when stop() finishes.

https://fedorahosted.org/freeipa/ticket/4709

Reviewed-By: Jan Cholasta

Fix CA certificate backup and restore

2014-11-11T15:13:52+00:00

Backup and restore /etc/pki/ca-trust/source/ipa.p11-kit.

Create /etc/ipa/nssdb after restore if necessary.

https://fedorahosted.org/freeipa/ticket/4711

Reviewed-By: Petr Viktorin

Remove unneeded internal methods. Move code to public methods.

2014-11-11T08:18:30+00:00

Reviewed-By: Jan Cholasta

Respect UID and GID soft static allocation.

2014-11-05T14:22:51+00:00

https://fedoraproject.org/wiki/Packaging:UsersAndGroups?rd=Packaging/UsersAndGroups#Soft_static_allocation

https://fedorahosted.org/freeipa/ticket/4585

Reviewed-By: Martin Basti

Fixed KRA backend.

2014-11-04T15:33:16+00:00

The KRA backend has been simplified since most of the tasks have
been moved somewhere else. The transport certificate will be
installed on the client, and it is not needed by KRA backend. The
KRA agent's PEM certificate is now generated during installation
due to permission issue. The kra_host() for now is removed since
the current ldap_enable() cannot register the KRA service, so it
is using the kra_host environment variable.

The KRA installer has been modified to use Dogtag's CLI to create
KRA agent and setup the client authentication.

The proxy settings have been updated to include KRA's URLs.

Some constants have been renamed for clarity. The DOGTAG_AGENT_P12
has been renamed to DOGTAG_ADMIN_P12 since file actually contains
the Dogtag admin's certificate and private key and it can be used
to access both CA and KRA. The DOGTAG_AGENT_PEM has been renamed
to KRA_AGENT_PEM since it can only be used for KRA.

The Dogtag dependency has been updated to 10.2.1-0.1.

https://fedorahosted.org/freeipa/ticket/4503

Reviewed-By: Petr Viktorin

DNSSEC: platform paths and services

2014-10-21T10:23:03+00:00

Tickets:
https://fedorahosted.org/freeipa/ticket/3801
https://fedorahosted.org/freeipa/ticket/4417

Design:
https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC

Reviewed-By: Jan Cholasta 
Reviewed-By: David Kupka

Add mask, unmask methods for service

2014-10-21T10:23:03+00:00

This patch allows mask and unmask services in IPA

Reviewed-By: Jan Cholasta 
Reviewed-By: David Kupka