freeipa.git/ipaserver/install/server, branch kdc-fixes

Modernize number literals

2015-07-31T13:22:19+00:00

Use Python-3 compatible syntax, without breaking compatibility with py 2.7

- Octals literals start with 0o to prevent confusion
- The "L" at the end of large int literals is not required as they use
  long on Python 2 automatically.
- Using 'int' instead of 'long' for small numbers is OK in all cases except
  strict type checking checking, e.g. type(0).

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Jan Cholasta

Fix DNS records installation for replicas

2015-07-14T10:50:36+00:00

Ticket: https:/fedorahosted.org/freeipa/ticket/5116

Signed-off-by: Simo Sorce 
Reviewed-By: Martin Basti

Start dirsrv for kdcproxy upgrade

2015-07-14T10:37:43+00:00

The kdcproxy upgrade step in ipa-server-upgrade needs a running dirsrv
instance. Under some circumstances the dirsrv isn't running. The patch
rearranges some upgrade steps and starts DS before enable_kdcproxy().

https://fedorahosted.org/freeipa/ticket/5113

Reviewed-By: Martin Basti

ipa-adtrust-install: add IPA master host principal to adtrust agents

2015-07-07T23:56:52+00:00

Fixes https://fedorahosted.org/freeipa/ticket/4951

Reviewed-By: Tomas Babej

DNSSEC: allow to disable/replace DNSSEC key master

2015-07-07T06:37:15+00:00

This commit allows to replace or disable DNSSEC key master

Replacing DNSSEC master requires to copy kasp.db file manually by user

ipa-dns-install:
--disable-dnssec-master  DNSSEC master will be disabled
--dnssec-master --kasp-db=FILE  This configure new DNSSEC master server,  kasp.db from old server is required for sucessful replacement
--force Skip checks

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Petr Spacek

plugable: Pass API to plugins on initialization rather than using set_api

2015-07-01T13:05:30+00:00

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky

ipalib: Load ipaserver plugins when api.env.in_server is True

2015-07-01T13:05:30+00:00

https://fedorahosted.org/freeipa/ticket/3090
https://fedorahosted.org/freeipa/ticket/5073

Reviewed-By: Martin Babinsky

Migrate CA profiles after enabling LDAPProfileSubsystem

2015-07-01T10:28:12+00:00

After enabling LDAPProfileSubsystem in Dogtag, migrate the
file-based profiles into the LDAP database.

Reviewed-By: Martin Basti

Upgrade CA schema during upgrade

2015-07-01T10:28:12+00:00

New schema (for LDAP-based profiles) was introduced in Dogtag, but
Dogtag does not yet have a reliable method for upgrading its schema.
Use FreeIPA's schema update machinery to add the new attributeTypes
and objectClasses defined by Dogtag.

Also update the pki dependencies to 10.2.5, which provides the
schema update file.

Reviewed-By: Martin Basti

Sanitize CA replica install

2015-06-30T11:41:00+00:00

Check if cafile exist first.

https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Tomas Babej