freeipa.git/ipaserver/install, branch kdc-fixes

Modernize number literals

2015-07-31T13:22:19+00:00

Use Python-3 compatible syntax, without breaking compatibility with py 2.7

- Octals literals start with 0o to prevent confusion
- The "L" at the end of large int literals is not required as they use
  long on Python 2 automatically.
- Using 'int' instead of 'long' for small numbers is OK in all cases except
  strict type checking checking, e.g. type(0).

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Jan Cholasta

replication: Fix incorrect exception invocation

2015-07-24T09:27:22+00:00

Reviewed-By: Tomas Babej

DNS: check if DNS package is installed

2015-07-21T15:30:10+00:00

Instead of separate checking of DNS required packages, we need just
check if IPA DNS package is installed.

https://fedorahosted.org/freeipa/ticket/4058

Reviewed-By: Martin Babinsky 
Reviewed-By: Petr Spacek 
Reviewed-By: Tomas Babej

Allow value 'no' for replica-certify-all attr in abort-clean-ruv subcommand

2015-07-17T14:47:18+00:00

--force option set replica-certify-all to 'no' during abort-clean-ruv
subcommand

https://fedorahosted.org/freeipa/ticket/4988

Reviewed-By: Petr Vobornik

ipa-ca-install: print more specific errors when CA is already installed

2015-07-16T13:33:43+00:00

This patch implements a more thorough checking for already installed CAs
during standalone CA installation using ipa-ca-install. The installer now
differentiates between CA that is already installed locally and CA installed
on one or more masters in topology and prints an appropriate error message.

https://fedorahosted.org/freeipa/ticket/4492

Reviewed-By: Martin Basti

selinux: enable httpd_run_ipa to allow communicating with oddjobd services

2015-07-16T10:42:43+00:00

A new SELinux policy allows communication between IPA framework running
under Apache with oddjobd-based services via DBus.

This communication is crucial for one-way trust support and also is required
for any out of band tools which may be executed by IPA framework.

Details of out of band communication and SELinux policy can be found in a bug
https://bugzilla.redhat.com/show_bug.cgi?id=1238165

Reviewed-By: Tomas Babej

Fix DNS records installation for replicas

2015-07-14T10:50:36+00:00

Ticket: https:/fedorahosted.org/freeipa/ticket/5116

Signed-off-by: Simo Sorce 
Reviewed-By: Martin Basti

Start dirsrv for kdcproxy upgrade

2015-07-14T10:37:43+00:00

The kdcproxy upgrade step in ipa-server-upgrade needs a running dirsrv
instance. Under some circumstances the dirsrv isn't running. The patch
rearranges some upgrade steps and starts DS before enable_kdcproxy().

https://fedorahosted.org/freeipa/ticket/5113

Reviewed-By: Martin Basti

Revert "Hide topology and domainlevel features"

2015-07-10T13:26:50+00:00

This reverts commit 62e8002bc43ddd890c3db35a123cb7daf35e3121.

Hiding of the topology and domainlevel features was necessary
for the 4.2 branch only.

Reviewed-By: Simo Sorce

upgrade: Enable and start oddjobd if adtrust is available

2015-07-08T15:14:56+00:00

If ipa-adtrust-install has already been run on the system,
enable and start the oddjobd service.

Reviewed-By: Alexander Bokovoy