freeipa.git/ipaserver/install, branch master_keytab FreeIPA patches WIP: store mkey in keytab 2015-12-12T06:46:26+00:00 Simo Sorce simo@redhat.com 2015-12-09T04:15:28+00:00 2fb44359d08f743ccde6de91f74a6a5cc4a8b3d2 






Fail hard if realminitialization fails
2015-12-11T20:20:52+00:00

Simo Sorce
simo@redhat.com

2015-12-11T20:20:03+00:00

0cc2a0ff7ff6208dc869fced1cd881cede1ca643

No point in proceeding the install will fail later.

Signed-off-by: Simo Sorce <simo@redhat.com>





No point in proceeding the install will fail later.

Signed-off-by: Simo Sorce <simo@redhat.com>







replica promotion: allow OTP bulk client enrollment
2015-12-09T09:16:32+00:00

Jan Cholasta
jcholast@redhat.com

2015-12-02T14:57:59+00:00

faf608556427849b33f4525b9bac2e71020bb962

https://fedorahosted.org/freeipa/ticket/5498

Reviewed-By: Martin Basti <mbasti@redhat.com>





https://fedorahosted.org/freeipa/ticket/5498

Reviewed-By: Martin Basti <mbasti@redhat.com>







Force creation of services during replica install
2015-12-07T18:12:24+00:00

Martin Basti
mbasti@redhat.com

2015-12-06T17:43:37+00:00

cac756b87d2eb521f038d0fb2ddb2a98569cf1af

Missing A record should not prevent replica to be installed.

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>





Missing A record should not prevent replica to be installed.

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>







replicainstall: Admin password should not conflict with replica file
2015-12-07T13:34:11+00:00

Tomas Babej
tbabej@redhat.com

2015-12-07T13:32:11+00:00

dcb6626e870bcededb62d801720721d5d6c9795f

The --admin-password (-w) has its use both in domain level 0 and 1.

https://fedorahosted.org/freeipa/ticket/5517

Reviewed-By: Tomas Babej <tbabej@redhat.com>





The --admin-password (-w) has its use both in domain level 0 and 1.

https://fedorahosted.org/freeipa/ticket/5517

Reviewed-By: Tomas Babej <tbabej@redhat.com>







replica promotion: automatically add the local host to ipaservers
2015-12-07T07:14:13+00:00

Jan Cholasta
jcholast@redhat.com

2015-11-18T08:00:34+00:00

42544484dc1fe6797adb72b4177a0de8dc79a032

If the user is authorized to modify members of the ipaservers host group,
add the local host to ipaservers automatically.

https://fedorahosted.org/freeipa/ticket/5401

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>





If the user is authorized to modify members of the ipaservers host group,
add the local host to ipaservers automatically.

https://fedorahosted.org/freeipa/ticket/5401

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>







replica promotion: use host credentials when setting up replication
2015-12-07T07:14:13+00:00

Jan Cholasta
jcholast@redhat.com

2015-11-18T07:51:34+00:00

c2af4095177d5c884a58917b7ad5b13dc782cc51

Use the local host credentials rather than the user credentials when
setting up replication. The host must be a member of the ipaservers host
group. The user credentials are still required for connection check.

https://fedorahosted.org/freeipa/ticket/5401

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>





Use the local host credentials rather than the user credentials when
setting up replication. The host must be a member of the ipaservers host
group. The user credentials are still required for connection check.

https://fedorahosted.org/freeipa/ticket/5401

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>







aci: replace per-server ACIs with ipaserver-based ACIs
2015-12-07T07:13:23+00:00

Jan Cholasta
jcholast@redhat.com

2015-12-01T09:44:59+00:00

7b9a97383ce4090d30e624fc8b7263d6c5f1b823

https://fedorahosted.org/freeipa/ticket/3416

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>





https://fedorahosted.org/freeipa/ticket/3416

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>







aci: add IPA servers host group 'ipaservers'
2015-12-07T07:13:23+00:00

Jan Cholasta
jcholast@redhat.com

2015-12-01T09:42:38+00:00

a8d7ce5cf1ccd6c8a81fa5b4569afa3aa3c2882d

https://fedorahosted.org/freeipa/ticket/3416

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>





https://fedorahosted.org/freeipa/ticket/3416

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>







replica install: improvements in the handling of CA-related IPA config entries
2015-12-04T18:37:37+00:00

Martin Babinsky
mbabinsk@redhat.com

2015-12-02T11:22:45+00:00

a497288b3eafe00ab9c819dd4a51d0b421824b36

When a CA-less replica is installed, its IPA config file should be updated so
that ca_host points to nearest CA master and all certificate requests are
forwarded to it. A subsequent installation of CA subsystem on the replica
should clear this entry from the config so that all certificate requests are
handled by freshly installed local CA.

https://fedorahosted.org/freeipa/ticket/5506

Reviewed-By: Martin Basti <mbasti@redhat.com>





When a CA-less replica is installed, its IPA config file should be updated so
that ca_host points to nearest CA master and all certificate requests are
forwarded to it. A subsequent installation of CA subsystem on the replica
should clear this entry from the config so that all certificate requests are
handled by freshly installed local CA.

https://fedorahosted.org/freeipa/ticket/5506

Reviewed-By: Martin Basti <mbasti@redhat.com>