freeipa.git/ipaserver/install, branch review FreeIPA patches Force creation of services during replica install 2015-12-07T18:12:24+00:00 Martin Basti mbasti@redhat.com 2015-12-06T17:43:37+00:00 cac756b87d2eb521f038d0fb2ddb2a98569cf1af Missing A record should not prevent replica to be installed. Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 
Missing A record should not prevent replica to be installed.

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
replicainstall: Admin password should not conflict with replica file 2015-12-07T13:34:11+00:00 Tomas Babej tbabej@redhat.com 2015-12-07T13:32:11+00:00 dcb6626e870bcededb62d801720721d5d6c9795f The --admin-password (-w) has its use both in domain level 0 and 1. https://fedorahosted.org/freeipa/ticket/5517 Reviewed-By: Tomas Babej <tbabej@redhat.com> 
The --admin-password (-w) has its use both in domain level 0 and 1.

https://fedorahosted.org/freeipa/ticket/5517

Reviewed-By: Tomas Babej <tbabej@redhat.com>
replica promotion: automatically add the local host to ipaservers 2015-12-07T07:14:13+00:00 Jan Cholasta jcholast@redhat.com 2015-11-18T08:00:34+00:00 42544484dc1fe6797adb72b4177a0de8dc79a032 If the user is authorized to modify members of the ipaservers host group, add the local host to ipaservers automatically. https://fedorahosted.org/freeipa/ticket/5401 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Simo Sorce <ssorce@redhat.com> 
If the user is authorized to modify members of the ipaservers host group,
add the local host to ipaservers automatically.

https://fedorahosted.org/freeipa/ticket/5401

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
replica promotion: use host credentials when setting up replication 2015-12-07T07:14:13+00:00 Jan Cholasta jcholast@redhat.com 2015-11-18T07:51:34+00:00 c2af4095177d5c884a58917b7ad5b13dc782cc51 Use the local host credentials rather than the user credentials when setting up replication. The host must be a member of the ipaservers host group. The user credentials are still required for connection check. https://fedorahosted.org/freeipa/ticket/5401 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Simo Sorce <ssorce@redhat.com> 
Use the local host credentials rather than the user credentials when
setting up replication. The host must be a member of the ipaservers host
group. The user credentials are still required for connection check.

https://fedorahosted.org/freeipa/ticket/5401

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
aci: replace per-server ACIs with ipaserver-based ACIs 2015-12-07T07:13:23+00:00 Jan Cholasta jcholast@redhat.com 2015-12-01T09:44:59+00:00 7b9a97383ce4090d30e624fc8b7263d6c5f1b823 https://fedorahosted.org/freeipa/ticket/3416 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Simo Sorce <ssorce@redhat.com> 
https://fedorahosted.org/freeipa/ticket/3416

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
aci: add IPA servers host group 'ipaservers' 2015-12-07T07:13:23+00:00 Jan Cholasta jcholast@redhat.com 2015-12-01T09:42:38+00:00 a8d7ce5cf1ccd6c8a81fa5b4569afa3aa3c2882d https://fedorahosted.org/freeipa/ticket/3416 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Simo Sorce <ssorce@redhat.com> 
https://fedorahosted.org/freeipa/ticket/3416

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
replica install: improvements in the handling of CA-related IPA config entries 2015-12-04T18:37:37+00:00 Martin Babinsky mbabinsk@redhat.com 2015-12-02T11:22:45+00:00 a497288b3eafe00ab9c819dd4a51d0b421824b36 When a CA-less replica is installed, its IPA config file should be updated so that ca_host points to nearest CA master and all certificate requests are forwarded to it. A subsequent installation of CA subsystem on the replica should clear this entry from the config so that all certificate requests are handled by freshly installed local CA. https://fedorahosted.org/freeipa/ticket/5506 Reviewed-By: Martin Basti <mbasti@redhat.com> 
When a CA-less replica is installed, its IPA config file should be updated so
that ca_host points to nearest CA master and all certificate requests are
forwarded to it. A subsequent installation of CA subsystem on the replica
should clear this entry from the config so that all certificate requests are
handled by freshly installed local CA.

https://fedorahosted.org/freeipa/ticket/5506

Reviewed-By: Martin Basti <mbasti@redhat.com>
ipa-replica-install support caless install with promotion. 2015-12-03T08:32:39+00:00 David Kupka dkupka@redhat.com 2015-11-26T08:01:27+00:00 2f51f0dce2e804bc4661441f97c04dc84b84fa21 https://fedorahosted.org/freeipa/ticket/5441 Reviewed-By: Jan Cholasta <jcholast@redhat.com> 
https://fedorahosted.org/freeipa/ticket/5441

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Modify error message to install first instance of KRA 2015-12-02T16:21:32+00:00 Martin Basti mbasti@redhat.com 2015-11-30T17:18:38+00:00 bbbe411f357b7fbad533b5211a90bb0558b1abbe First instance of KRA should be installed by ipa-kra-install. https://fedorahosted.org/freeipa/ticket/5460 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 
First instance of KRA should be installed by ipa-kra-install.

https://fedorahosted.org/freeipa/ticket/5460

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
ipa-kra-install: allow to install first KRA on replica 2015-12-02T16:20:19+00:00 Martin Basti mbasti@redhat.com 2015-11-23T12:43:53+00:00 efeb7d54ba7e3145a7a0b50c4b275d208cb656e6 https://fedorahosted.org/freeipa/ticket/5460 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 
https://fedorahosted.org/freeipa/ticket/5460

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>