summaryrefslogtreecommitdiffstats
path: root/ipa-server/ipa-install/ipa-server-install
Commit message (Collapse)AuthorAgeFilesLines
...
| * Fix message about no spaces in password - spaces workKarl MacMillan2007-12-061-1/+1
| | | | | | | | fine with ssl setup shell script removed.
* | we *may* require it, it depend on the ditro in F8 cahing daemon ↵Simo Sorce2007-12-071-1/+1
|/ | | | | | configuration has been incorporated in the default bind install.
* Generate master password from Simo.Karl MacMillan2007-11-211-12/+1
|
* Initial replication setup.Karl MacMillan2007-11-211-141/+18
| | | | | | | | | | | | | | | | | | | This add replication setup through two new commands: ipa-replica-prepare and ipa-replica-install. The procedure is to run ipa-replica-prepare on an existing master. This will collect information about the realm and the current master and create a file storing all of the information. After copying that file to the new replica, ipa-replica-install is run (with -r to create a read-only replica). This version of the patch also includes fixes for the sasl mappings on the replicas. Remaining features: - ssl for replication. - automatic configuration of mesh topology for master (or a simpler way to replicate multiple masters. - tool for view / configuring current replication.
* Introduce service base class and clean up ipa-server-installKarl MacMillan2007-11-051-57/+11
| | | | | | | | | | | | 1) Add a base class for all of the instance objects. 2) Normalize usage of logging. 3) General cleanups of ipa-server-install. 4) Make better use of httpinstance. 5) Add webguiinstance. 6) Improve progress reporting during installation. Works Here (TM), but it would be nice to get someone else to test since this moves code around a bit.
* merge initial radius workJohn Dennis2007-11-031-0/+6
|
* NTP configuration for client and server.Karl MacMillan2007-11-011-2/+16
| | | | | | | | Configure ipa servers as an ntp server and clients to (by default) us the ipa server as an ntp server. Also corrected the messages about which ports should be opened.
* Fix host_name buglet in ipa-server-installMark McLoughlin2008-02-211-5/+5
| | | | | | | | | | | | This patch fixes a couple of buglets with read_ip_address(): 1) It writes host_name to /etc/hosts, but isn't currently being passed host_name 2) It doesn't return the IP address even though the caller expects it Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Handle selinux failureKarl MacMillan2007-10-241-1/+10
| | | | Ignore errors if setsebool fails and print a warning.
* Print warning about NTPKarl MacMillan2007-10-221-0/+31
| | | | | | | | | | | | After looking into setting up ntpd on the IPA servers I decided it was better just to warn admins. There are just too many valid setups for time synchronization for us to try to get this right. Additionally, just installing ntp and accepting the default config will result in a configuration that is perfectly valid for IPA. This patch checks if ntpd is running and suggests enabling it if it is not - for client and server. It also adds some suggested next steps to the server installation.
* Print traceback to the install log on unexpected error.Karl MacMillan2007-10-181-2/+8
|
* First step in enabling SSL in the IPA web serverRob Crittenden2007-10-151-1/+6
|
* Verify that the LDAP ports are available during installation.Rob Crittenden2007-10-151-0/+44
|
* Karl MacMillan wrote:Karl MacMillan2007-10-091-2/+10
| | | | | | | | | | | | | > > This largish patch makes the build and installation work on 64bit > > machines. The only catch here is that to get a 64bit build you need to > > set LIBDIR on make: > > > > make install LIBDIR=/usr/lib64 > > > > The spec file does this correctly. I couldn't find any reliable way to > > guess this that works both on real systems and in the almost entirely > > empty rpm build root (you can't, for example, check for the existence > > of /usr/lib64).
* Hi,Karl MacMillan2007-10-091-194/+241
| | | | | | | | | | | | | | | | | | | Here is another patch for the installer. It does a few things: * use socket.getfqdn() but fallback to gethostname() * streamlines the hostname prompting * fixes a bunch of spelling and grammatical errors * fixes a bug in the hostname reading/verification logic * allows "yes" and "no" as answers * modularizes and reuses code where possible * changes some of the prompts to be more like the FDS installer - some text is copied (which is easy to use IMO) * tries to make the prompts fit on smaller screens (<80 chars) Hope you agree that it is better. :) Thanks, Jon
* Fix copy/paste bugmccann@jhu.edu2007-10-031-1/+1
|
* Try to catch more error conditions during installationrcritten@redhat.com2007-10-031-21/+32
| | | | | | Modify the way we detect SELinux to use selinuxenabled instead of using a try/except. Handle SASL/GSSAPI authentication failures when getting a connection
* Patch to fix the installer crashing if selinux is disabled. Also changesmccann@jhu.edu2007-10-021-1/+57
| | | | | | | the exception to contain the complete command. Add a check to make sure installer is running as root. Add signal handler to detect a user-cancelled installation. Detect existing DS instances and prompt to remove them.
* Check passwords are not emptySimo Sorce2007-09-281-3/+12
|
* Install the web guiKarl MacMillan2007-09-281-1/+7
| | | | | | | | | | | | | | | | | | | Install the turbogears web gui including an init script. This patch includes a few related changes: * create a production configuration * rename the web gui startup scrip to ipa-webgui * add an init script * chkconfig on the ipa-webgui init script * make the start script properly daemonize the app when not in a development directory. * Install everything to the correct places (/usr/sbin/ipa-webgui and /usr/share/ipa/ipagui mainly). There are some things still left to do: * Sort out the logging - the config needs to be adjusted so that logging messages end up in /var/log.
* Misc small fixesKarl MacMillan2007-09-281-1/+1
| | | | | | | * Remove the rpmbuild tree with the dist-clean target. * Move ipa-server-setupssl from /usr/sbin to /usr/share/ipa * Check in requirement change for generated freeipa-python.spec * Fix interactive hostname in ipa-server-install.
* Make apache work with selinuxKarl MacMillan2007-09-281-0/+3
| | | | | | The default configuration of the apache selinux policy doesn't allow apache to connect to the turbogears gui. This sets the correct boolean to allow that connection.
* Initial support for confiuguring a DNS Server during installation.Simo Sorce2007-09-201-23/+154
| | | | It's not perfect yet but good enough to include it.
* Better we do not fiddle with /etc/hosts, make sure to abort and let the adminSimo Sorce2007-09-131-21/+2
| | | | fix it.
* Better way to ask for the Realm name, with implicit defaultSimo Sorce2007-09-121-16/+10
|
* Add confirmation when asking un-echoed passwordsSimo Sorce2007-09-121-3/+27
|
* Avoid showing passwords.Simo Sorce2007-09-121-3/+4
| | | | Patch from William Jon McCann <mccann@jhu.edu>
* merge ipa-server/ipaserver/util.py into ipa-python/ipautil.pySimo Sorce2007-09-041-1/+1
| | | | this way freeipa-client does not depend on freeipa-server
* Add password request for admin userSimo Sorce2007-08-311-15/+46
| | | | | | | | | Set password for admin user using the Directory Mangaer account and the mozldapldappaswd binary to get and SSL connection Fix some timeout problems with deploying keytabs Fix ipa_pwd_extop to actuallt correctly detect an SSL connection Do not ask for the user to use for the directory unless 'dirsrv' is an existing user which may clash, create it silently
* Add interactive prompts to ipa-server-installSimo Sorce2007-08-201-14/+108
| | | | | | Change unattended flag to be -U Change master password flag to be -P instead of -m Improve ipa-client-install readability for user prompts
* Make ipa-kpasswd start immediatelySimo Sorce2007-08-151-1/+1
|
* General fixes.Simo Sorce2007-08-151-1/+1
| | | | Do not start ipa_kpasswd by default yet
* in F7 all directory names have changed from fedora-ds to dirsrvSimo Sorce2007-08-151-1/+1
| | | | which should also be the name used in DS 8.0, change all occurences
* Activate the passwd extop plugin and ipa-kpasswd daemonSimo Sorce2007-08-151-1/+7
|
* Start the DS and KDC on bootrcritten@redhat.com2007-08-091-1/+7
|
* - Abstracted client class to work directly or over RPCrcritten@redhat.com2007-08-061-0/+3
| | | | | | | | | | | - Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication - Update tools to use kerberos - Add User class
* Add local-dist target.Karl MacMillan2007-08-011-1/+8
| | | | Remove hard-coded config.
* Fix typo / buglets in setup scripts.Karl MacMillan2007-08-011-2/+2
| | | | Add fallback to ds_newinst.pl.
* Minor fix to adduser.Karl MacMillan2007-07-311-1/+5
| | | | Make ipa-server-install restart htppd
* Finish python library reorg.Karl MacMillan2007-07-271-5/+5
|
* More reorgnization.Karl MacMillan2007-07-271-0/+120
generated by cgit (git 2.34.1) at 2026-04-29 20:03:21 +0000