freeipa.git/ipaplatform, branch custodia

topology: manage ca replication agreements

2015-10-15T12:24:33+00:00

Configure IPA so that topology plugin will manage also CA replication
agreements.

upgrades if CA is congigured:
- ipaca suffix is added to cn=topology,cn=ipa,cn=etc,$SUFFIX
- ipaReplTopoManagedSuffix: o=ipaca is added to master entry
- binddngroup is added to o=ipaca replica entry

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Implement replica promotion functionality

2015-10-15T12:24:33+00:00

This patch implements a new flag --promote for the ipa-replica-install command
that allows an administrative user to 'promote' an already joined client to
become a full ipa server.

The only credentials used are that of an administrator. This code relies on
ipa-custodia being available on the peer master as well as a number of other
patches to allow a computer account to request certificates for its services.

Therefore this feature is marked to work only with domain level 1 and above
servers.

Ticket: https://fedorahosted.org/freeipa/ticket/2888

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Add ipa-custodia service

2015-10-15T12:24:33+00:00

Add a customized Custodia daemon and enable it after installation.
Generates server keys and loads them in LDAP autonomously on install
or update.
Provides client code classes too.

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Use six.moves.urllib instead of urllib/urllib2/urlparse

2015-10-07T08:27:20+00:00

In Python 3, these modules are reorganized.

Reviewed-By: David Kupka 
Reviewed-By: Jan Cholasta 
Reviewed-By: Martin Basti

paths: Add GENERATE_RNDC_KEY.

2015-10-05T15:45:51+00:00

Reviewed-By: Martin Basti

ipatests: configure Network Manager not to manage resolv.conf

2015-10-02T12:01:50+00:00

For the duration of the test, makes resolv.conf unmanaged.
If NetworkManager is not running, nothing is changed.

https://fedorahosted.org/freeipa/ticket/5331

Reviewed-By: Martin Basti

do not overwrite files with local users/groups when restoring authconfig

2015-10-02T10:45:26+00:00

the patch fixes regression in ipa-restore caused by overwriting /etc/passwd,
/etc/shadow and fiends during restore of authconfig configuration files. These
files are now excluded from authconfig backup dir.

https://fedorahosted.org/freeipa/ticket/5328

Reviewed-By: David Kupka

install: fix kdcproxy user home directory

2015-09-23T14:29:49+00:00

https://fedorahosted.org/freeipa/ticket/5314

Reviewed-By: Martin Babinsky

platform: add option to create home directory when adding user

2015-09-23T14:29:49+00:00

https://fedorahosted.org/freeipa/ticket/5314

Reviewed-By: Martin Babinsky

ipa-backup: Add mechanism to store empty directory structure

2015-09-22T11:17:25+00:00

Certain subcomponents of IPA, such as Dogtag, cannot function if
non-critical directories (such as log directories) have not been
stored in the backup.

This patch implements storage of selected empty directories,
while preserving attributes and SELinux context.

https://fedorahosted.org/freeipa/ticket/5297

Reviewed-By: Martin Basti