freeipa.git/ipaplatform, branch mindatefix

Do not log error when removing a non-existing file

2016-07-01T07:01:21+00:00

When the uninstaller tries to remove /etc/systemd/system/httpd.d/ipa.conf and
the file does not exist, only log to debug instead of error.

https://fedorahosted.org/freeipa/ticket/6012

Reviewed-By: Martin Basti

Do not allow installation in FIPS mode

2016-06-29T14:17:27+00:00

https://fedorahosted.org/freeipa/ticket/5761

Reviewed-By: Martin Basti 
Reviewed-By: Rob Crittenden

Fixes CA always being presented as running

2016-06-15T16:11:28+00:00

Even after manually stopping the pki-tomcatd service instance the
service's is_running() method would still return True.

https://fedorahosted.org/freeipa/ticket/5898

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta

Add custodia store for lightweight CA key replication

2016-06-09T07:04:27+00:00

Due to limitations in Dogtag's use of NSSDB, importing private keys
must be done by the Dogtag Java process itself.  This requires a
PKIArchiveOptions format (signing key wrapped with host CA key) -
PKCS #12 cannot be used because that would require decrypting the
key in Dogtag's memory, albeit temporarily.

Add a new custodia store that executes a 'pki' command to acquire
the wrapped key.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta

Added krb5.conf.d/ to included dirs in krb5.conf

2016-06-05T07:47:13+00:00

The include of /etc/krb5.conf.d/ is required for crypto-policies to work properly

https://fedorahosted.org/freeipa/ticket/5912

Reviewed-By: Martin Basti 
Reviewed-By: Alexander Bokovoy

ipaplatform.redhat: Use bytestrings when calling rpm.so for version comparison

2016-05-30T14:44:08+00:00

Part of the work for: https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Martin Basti

Tasks: raise NotImplementedError for not implemented methods

2016-04-26T12:01:42+00:00

Is safer to raise error than trying to find what is wrong with method
that is not correctly overriden

The new method set_hostname has been added which should be overriden on other
platforms.

https://fedorahosted.org/freeipa/ticket/5794

Reviewed-By: David Kupka

Log errors from backup_and_replace hostname to logger

2016-04-26T12:01:42+00:00

Without logging errors to logger  is hard to debug issue from logfile.

https://fedorahosted.org/freeipa/ticket/5794

Reviewed-By: David Kupka

Remove deprecated hostname restoration from Fedora18

2016-04-26T12:01:42+00:00

This is not needed on new Fedora, because restore will not be effective.

https://fedorahosted.org/freeipa/ticket/5794

Reviewed-By: David Kupka

Always set hostname

2016-04-26T12:01:42+00:00

This prevents cases when hostname on system is set inconsistently
(transient and static hostname differs) and may cause IPA errors.

This commit ensures that all hostnames are set properly.

https://fedorahosted.org/freeipa/ticket/5794

Reviewed-By: David Kupka