summaryrefslogtreecommitdiffstats
path: root/ipaserver
Commit message (Expand)AuthorAgeFilesLines
* Make sure remote hosts have our keyscakeysfixSimo Sorce2017-05-032-1/+38
* Refresh Dogtag RestClient.ca_host propertyStanislav Laznicka2017-05-022-15/+20
* kerberos session: use CA cert with full cert chain for obtaining cookiePetr Vobornik2017-05-021-1/+2
* restore: restart/reload gssproxy after restorePetr Vobornik2017-04-281-0/+3
* Do not test anonymous PKINIT after install/upgradeMartin Babinsky2017-04-282-10/+0
* Upgrade: configure local/full PKINIT depending on the master statusMartin Babinsky2017-04-281-6/+9
* Use local anchor when armoring password requestsMartin Babinsky2017-04-281-1/+1
* Stop requesting anonymous keytab and purge all references of itMartin Babinsky2017-04-283-19/+0
* API for retrieval of master's PKINIT status and publishing it in LDAPMartin Babinsky2017-04-281-0/+41
* Allow for configuration of all three PKINIT variants when deploying KDCMartin Babinsky2017-04-281-52/+93
* separate function to set ipaConfigString values on service entryMartin Babinsky2017-04-282-84/+94
* Vault: Explicitly default to 3DES CBCChristian Heimes2017-04-281-2/+10
* Correct PyPI package dependenciesChristian Heimes2017-04-261-1/+4
* Update get_attr_filter in LDAPSearch to handle nsaccountlock user searchesGabe2017-04-262-1/+11
* Move the compat plugin setup at the end of installStanislav Laznicka2017-04-241-9/+0
* upgrade: adtrust update_tdo_gidnumber plugin must check if adtrust is installedFlorence Blanc-Renaud2017-04-241-0/+5
* Fix CAInstance.import_ra_cert for empty passwordsStanislav Laznicka2017-04-201-1/+1
* Fix RA cert import during DL0 replicationStanislav Laznicka2017-04-192-25/+35
* ext. CA: correctly write the cert chainStanislav Laznicka2017-04-191-2/+3
* server-install: No double Kerberos installStanislav Laznicka2017-04-191-5/+6
* cert: defer cert-find result post-processingJan Cholasta2017-04-192-37/+66
* Fix CA-less to CA-full upgradeStanislav Laznicka2017-04-123-11/+31
* replicainstall: better client install exception handlingStanislav Laznicka2017-04-121-42/+41
* Add the force-join option to replica installStanislav Laznicka2017-04-122-1/+3
* server-install: remove broken no-pkinit checkStanislav Laznicka2017-04-121-5/+0
* Fix PKCS11 helperMartin Basti2017-04-124-21/+108
* Create system users for FreeIPA services during package installationDavid Kupka2017-04-118-68/+2
* trust: always use oddjobd helper for fetching trust informationAlexander Bokovoy2017-04-111-33/+10
* ipaserver/dcerpc: unify error processingAlexander Bokovoy2017-04-111-6/+17
* Remove surplus 'the' in output of ipa-adtrust-installMartin Basti2017-04-111-1/+1
* install: request service certs after host keytab is set upJan Cholasta2017-04-073-24/+16
* dsinstance, httpinstance: consolidate certificate request codeJan Cholasta2017-04-074-99/+43
* httpinstance: avoid httpd restart during certificate requestJan Cholasta2017-04-071-3/+4
* dsinstance: reconnect ldap2 after DS is restarted by certmongerJan Cholasta2017-04-071-0/+4
* Upgrade: add gidnumber to trusted domain entryFlorence Blanc-Renaud2017-04-071-0/+56
* idrange-add: properly handle empty --dom-name optionFlorence Blanc-Renaud2017-04-051-1/+1
* Add pki_pin only when neededStanislav Laznicka2017-04-052-6/+14
* httpinstance: make sure NSS database is backed upJan Cholasta2017-04-041-1/+2
* Remove publish_ca_cert() method from NSSDatabaseStanislav Laznicka2017-04-031-3/+0
* Get correct CA cert nickname in CA-lessStanislav Laznicka2017-04-031-1/+6
* Add an option to build ipaserver wheelsChristian Heimes2017-04-032-10/+1
* Add extra_requires for additional dependenciesChristian Heimes2017-04-031-6/+8
* Conditionally import pyhbacChristian Heimes2017-04-033-90/+105
* Hide request_type doc string in cert-request helpAbhijeet Kasurde2017-03-311-1/+1
* Add --password-expiration to allow admin to force user password expirationGabe2017-03-312-1/+5
* Remove redundant option check for cert filesStanislav Laznicka2017-03-301-9/+1
* Don't allow setting pkinit-related options on DL0Stanislav Laznicka2017-03-301-0/+21
* Fix the order of cert-files checkStanislav Laznicka2017-03-301-5/+5
* Remove duplicate functionality in upgradeMartin Babinsky2017-03-301-15/+1
* Always check and create anonymous principal during KDC installMartin Babinsky2017-03-301-4/+13