freeipa.git/ipaserver, branch custodia

Allow to install the KRA on a promoted server

2015-10-20T17:22:58+00:00

Signed-off-by: Simo Sorce

Allow ipa-ca-install to use the new promotion code

2015-10-20T17:22:54+00:00

This makes it possible to install a CA after-the-fact on a server
that has been promoted (and has no replica file available).

Signed-off-by: Simo Sorce

Add option to specify LDIF file that contains DS configuration changes

2015-10-15T16:37:52+00:00

This allows to user modify configuration changes of the directory server
instance during installation of DS

https://fedorahosted.org/freeipa/ticket/4949

Also fixes:
https://fedorahosted.org/freeipa/ticket/4048
https://fedorahosted.org/freeipa/ticket/1930

Reviewed-By: Martin Babinsky

Add method to read changes from LDIF

2015-10-15T16:37:52+00:00

modifications_from_ldif will read LDIF file and changes in LDIF will
be cached until parse() is called. After calling parse() method changes
will be applied into destination LDIF.

Only changetype modify is supported, the default operation is add.

https://fedorahosted.org/freeipa/ticket/4949

Also fixes:
https://fedorahosted.org/freeipa/ticket/4048
https://fedorahosted.org/freeipa/ticket/1930

Reviewed-By: Martin Babinsky

Make offline LDIF modify more robust

2015-10-15T16:37:52+00:00

* move code to installutils
* add replace_value method
* use lists instead of single values for add_value, remove_value methods

https://fedorahosted.org/freeipa/ticket/4949

Also fixes:
https://fedorahosted.org/freeipa/ticket/4048
https://fedorahosted.org/freeipa/ticket/1930

Reviewed-By: Martin Babinsky

Remove unused kra option

2015-10-15T12:26:15+00:00

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Add low level helper to get domain level

2015-10-15T12:24:33+00:00

This can be used only locally on an existing master (uses ldapi).
Useful to check the domain_level in scripts before the api is
initialized and/or credentials are available.

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Make checks for existing credentials reusable

2015-10-15T12:24:33+00:00

move the in installutils so they can be reused by multiple scripts

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Allow to setup the CA when promoting a replica

2015-10-15T12:24:33+00:00

This patch makes --setup-ca work to set upa clone CA while creating
a new replica. The standalone ipa-ca-install script is not converted
yet though.

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

handle multiple managed suffixes

2015-10-15T12:24:33+00:00

    trigger topology updaet if suffix entry is added
    trigger topology update if managedSuffix is modified in host entry

Reviewed-by: Simo Sorce 
Reviewed-By: Jan Cholasta