freeipa.git/ipaserver/install/server, branch master_keytab

replica promotion: allow OTP bulk client enrollment

2015-12-09T09:16:32+00:00

https://fedorahosted.org/freeipa/ticket/5498

Reviewed-By: Martin Basti

Force creation of services during replica install

2015-12-07T18:12:24+00:00

Missing A record should not prevent replica to be installed.

Reviewed-By: Martin Babinsky

replicainstall: Admin password should not conflict with replica file

2015-12-07T13:34:11+00:00

The --admin-password (-w) has its use both in domain level 0 and 1.

https://fedorahosted.org/freeipa/ticket/5517

Reviewed-By: Tomas Babej

replica promotion: automatically add the local host to ipaservers

2015-12-07T07:14:13+00:00

If the user is authorized to modify members of the ipaservers host group,
add the local host to ipaservers automatically.

https://fedorahosted.org/freeipa/ticket/5401

Reviewed-By: Martin Basti 
Reviewed-By: Simo Sorce

replica promotion: use host credentials when setting up replication

2015-12-07T07:14:13+00:00

Use the local host credentials rather than the user credentials when
setting up replication. The host must be a member of the ipaservers host
group. The user credentials are still required for connection check.

https://fedorahosted.org/freeipa/ticket/5401

Reviewed-By: Martin Basti 
Reviewed-By: Simo Sorce

replica install: improvements in the handling of CA-related IPA config entries

2015-12-04T18:37:37+00:00

When a CA-less replica is installed, its IPA config file should be updated so
that ca_host points to nearest CA master and all certificate requests are
forwarded to it. A subsequent installation of CA subsystem on the replica
should clear this entry from the config so that all certificate requests are
handled by freshly installed local CA.

https://fedorahosted.org/freeipa/ticket/5506

Reviewed-By: Martin Basti

ipa-replica-install support caless install with promotion.

2015-12-03T08:32:39+00:00

https://fedorahosted.org/freeipa/ticket/5441

Reviewed-By: Jan Cholasta

implement domain level 1 specific topology checks into IPA server uninstaller

2015-12-02T13:10:19+00:00

When uninstalling domain level 1 master its removal from topology is checked
on remote masters. The uninstaller also checks whether the uninstallation
disconnects the topology and if yes aborts the procedure. The
'--ignore-disconnected-topology' options skips this check.

https://fedorahosted.org/freeipa/ticket/5377
https://fedorahosted.org/freeipa/ticket/5409

Reviewed-By: Jan Cholasta 
Reviewed-By: Martin Basti

replicainstall: Add possiblity to install client in one command

2015-12-01T15:33:13+00:00

https://fedorahosted.org/freeipa/ticket/5310

Reviewed-By: Jan Cholasta

Remove global variable dns_forwarders from ipaserver.install.dns

2015-12-01T09:19:25+00:00

Reviewed-By: Jan Cholasta