freeipa.git/ipaserver/install/server, branch AD-binds FreeIPA patches Replicas cannot define their own master password. 2015-06-23T20:33:34+00:00 Simo Sorce simo@redhat.com 2015-06-23T20:33:34+00:00 8665d4c9122db296855d82d200dc8df811f57427 Seem like this slipped in during the refactoring of the install tools. Signed-off-by: Simo Sorce <simo@redhat.com> 
Seem like this slipped in during the refactoring of the install tools.

Signed-off-by: Simo Sorce <simo@redhat.com>
install: Fix ipa-replica-install not installing RA cert 2015-06-18T12:48:31+00:00 Jan Cholasta jcholast@redhat.com 2015-06-18T10:35:09+00:00 c3a3d789b5da353a6abf2722932df4f5fc05dbe5 https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: David Kupka <dkupka@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
Server Upgrade: disconnect ldap2 connection before DS restart 2015-06-15T07:54:04+00:00 Martin Basti mbasti@redhat.com 2015-06-10T11:24:48+00:00 c1d484afde34cb68cfb0d187004e107342180399 Without this patch, the invalid api.Backend.ldap2 connection was used to communicate with DS and it raises network error after DS restart. Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 
Without this patch, the invalid api.Backend.ldap2 connection
was used to communicate with DS and it raises network error
after DS restart.

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Add CA ACL plugin 2015-06-11T10:50:31+00:00 Fraser Tweedale ftweedal@redhat.com 2015-05-25T12:39:07+00:00 bc0c60688505968daf6851e3e179aab20e23af7d Implement the caacl commands, which are used to indicate which principals may be issued certificates from which (sub-)CAs, using which profiles. At this commit, and until sub-CAs are implemented, all rules refer to the top-level CA (represented as ".") and no ca-ref argument is exposed. Also, during install and upgrade add a default CA ACL that permits certificate issuance for all hosts and services using the profile 'caIPAserviceCert' on the top-level CA. Part of: https://fedorahosted.org/freeipa/ticket/57 Part of: https://fedorahosted.org/freeipa/ticket/4559 Reviewed-By: Martin Basti <mbasti@redhat.com> 
Implement the caacl commands, which are used to indicate which
principals may be issued certificates from which (sub-)CAs, using
which profiles.

At this commit, and until sub-CAs are implemented, all rules refer
to the top-level CA (represented as ".") and no ca-ref argument is
exposed.

Also, during install and upgrade add a default CA ACL that permits
certificate issuance for all hosts and services using the profile
'caIPAserviceCert' on the top-level CA.

Part of: https://fedorahosted.org/freeipa/ticket/57
Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Martin Basti <mbasti@redhat.com>
vault: Fix ipa-kra-install 2015-06-10T16:17:34+00:00 Jan Cholasta jcholast@redhat.com 2015-06-10T08:50:42+00:00 e7ac57e1390c76c3d7fdb2710808def107d21d6d Use state in LDAP rather than local state to check if KRA is installed. Use correct log file names. https://fedorahosted.org/freeipa/ticket/3872 Reviewed-By: David Kupka <dkupka@redhat.com> 
Use state in LDAP rather than local state to check if KRA is installed.
Use correct log file names.

https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka <dkupka@redhat.com>
install: Initialize API early in server and replica install 2015-06-10T16:17:34+00:00 Jan Cholasta jcholast@redhat.com 2015-06-10T08:22:30+00:00 cbcd86b5001039db468b46aefd83926a2b721eb5 https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: David Kupka <dkupka@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
install: Migrate ipa-replica-install to the install framework 2015-06-10T07:29:58+00:00 Jan Cholasta jcholast@redhat.com 2015-06-09T11:42:50+00:00 46cbe26b51f7eeeeac8f24351d165c50d415326f https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: David Kupka <dkupka@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
install: Handle Knob cli_name and cli_aliases values consistently 2015-06-10T07:29:58+00:00 Jan Cholasta jcholast@redhat.com 2015-06-09T11:33:13+00:00 1bf383e0cf424bee9dfd820b085bc148b708e834 https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: David Kupka <dkupka@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
install: Migrate ipa-server-install to the install framework 2015-06-08T15:34:11+00:00 Jan Cholasta jcholast@redhat.com 2015-06-02T12:36:14+00:00 eb959221e12ed40fbe4f67ff245e9a7639111e45 https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Martin Basti <mbasti@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
install: Move private_ccache from ipaserver to ipapython 2015-06-08T15:33:36+00:00 Jan Cholasta jcholast@redhat.com 2015-06-04T11:59:22+00:00 08229a0c5457d4e0c13d6b02a1f38f60ea787856 https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Martin Basti <mbasti@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>