IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-09-03 20:52:56 -05:00
Code Issues Packages Projects Releases Wiki Activity
2,666 Commits 11 Branches 63 Tags
02479babb9cd5fdd0673175fde22e40f3a1b10b4
Commit Graph
64 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Nagy e29be7ac3e named.conf: Add trailing dot to the fake_mname 
Yet another trailing dot issue, but this one was kept hidden because
only the latest bind-dyndb-ldap package uses the fake_mname option.
 2010-05-06 10:27:21 -04:00
Martin Nagy 9dc7cf9338 Some more changes for DNS forwarders prompt 2010-04-23 17:21:53 -04:00
Martin Nagy 04182bf68f Add forgotten trailing dots in DNS records 
583023
 2010-04-23 17:19:41 -04:00
Martin Nagy 6e9cc2640b Connect to the ldap during the uninstallation 
We need to ask the user for a password and connect to the ldap so the
bind uninstallation procedure can remove old records. This is of course
only helpful if one has more than one IPA server configured.
 2010-04-23 17:19:36 -04:00
Martin Nagy 1a9d49730d Delete old SRV records during uninstallation 2010-04-23 17:19:32 -04:00
Martin Nagy 1340875165 Accept unicode for sysrestore 2010-04-23 17:19:28 -04:00
Martin Nagy f52c671ca1 Make the DNS forwarders interactive input less confusing 
Fixes #558984
 2010-02-16 13:44:38 -05:00
Martin Nagy a292e9901b Fix a crash and memory leak in get_config_entry() 2010-02-16 10:42:45 -05:00
Martin Nagy 8fd41d0434 Add A and PTR records during ipa-replica-prepare 
Fixes #528996
 2010-02-09 16:30:25 -05:00
Martin Nagy 206d2d48fa Get rid of ipapython.config in ipa-replica-prepare 
Also get rid of functions get_host_name(), get_realm_name() and
get_domain_name(). They used the old ipapython.config. Instead, use the
variables from api.env. We also change them to bootstrap() and
finalize() correctly.

Additionally, we add the dns_container_exists() function that will be
used in ipa-replica-prepare (next patch).
 2010-02-09 16:30:06 -05:00
Martin Nagy b05f94fb4c Add ipa-dns-install script 
Unfortunately, for now there is no --uninstall option.
 2010-02-09 15:45:35 -05:00
Martin Nagy d6ca88f331 Set BIND to use ldapi and use fake mname 
The fake_mname for now doesn't exists but is a feature that will be
added in the near future. Since any unknown arguments to bind-dyndb-ldap
are ignored, we are safe to use it now.
 2010-01-21 17:37:42 -05:00
Martin Nagy d53df67c95 Move some functions from ipa-server-install into installutils 
We will need these functions in the new upcoming ipa-dns-install
command.
 2010-01-21 17:37:24 -05:00
Martin Nagy 5f5eb2fe13 Allow a custom file mode when setting up debugging 
This will be handy in the future if we will want to install or uninstall
only single IPA components and want to append to the installation logs.
This will be used by the upcoming ipa-dns-install script.
 2010-01-21 17:37:21 -05:00
Martin Nagy 7aa78ee060 Only add an NTP SRV record if we really are setting up NTP 
The sample bind zone file that is generated if we don't use --setup-dns
is also changed.

Fixes #500238
 2010-01-21 17:09:21 -05:00
Martin Nagy 686203c074 Use the dns plug-in for addition of records during installation 
Fixes #528943
 2010-01-21 17:09:18 -05:00
Martin Nagy f8ec022ed0 Move api finalization in ipa-server-install after writing default.conf 
We will need to have ipalib correctly configured before we start
installing DNS entries with api.Command.dns.
 2010-01-21 17:09:15 -05:00
Martin Nagy 0d1962962f Add idnsUpdatePolicy into the dns plug-in 
The idnsUpdatePolicy takes a list of BIND dynamic update policies, each
of which must be terminated by ";". Also fix a minor error in the
documentation string.
 2009-12-02 13:07:13 +01:00
Martin Nagy d147eafb07 Ask the user before overwriting /etc/named.conf 2009-12-02 13:07:07 +01:00
Martin Nagy 377907e221 Remove unnecessary "error: " prefixes 
The parser.error() method prepends the "error: " prefix itself. Adding
it to the error string is not necessary and doesn't look good.
 2009-12-02 13:07:00 +01:00
Martin Nagy b519b87ea4 Add forgotten chunks from commit 4e5a68397a 
I accidentally pushed the older patch that didn't contain bits for
ipa-replica-install.
 2009-09-08 22:48:34 +02:00
Martin Nagy 205a41205b Add A and PTR records of ourselves during installation 
If the DNS zones already exist but don't contain our own records, add
them. This patch introduces the ipalib.api into the installers. For now,
the code is still little messy. Later patches will abandon the way we
create zones now and use ipalib.api exclusively.
 2009-09-02 22:04:25 +02:00
Martin Nagy b07d1b54f9 Remove old --setup-bind option 
Since we are changing the behaviour of the --setup-dns option
substantially, we might as well remove the old --setup-bind option.
 2009-09-02 22:04:25 +02:00
Martin Nagy fbda06269d Setup bind only after restarting kdc and dirsrv 
BIND starting before we apply LDAP updates and restart kdc and directory
server causes trouble. We resolve this for now by postponing BIND setup
to the end of installation. Another reason is that we will be using
xml-rpc during the setup in the future.
 2009-09-02 22:04:25 +02:00
Martin Nagy 4e5a68397a Use DNS forwarders in /etc/named.conf 
This patch adds options --forwarder and --no-forwarders. At least one of
them must be used if you are doing a setup with DNS server. They are
also mutually exclusive. The --forwarder option can be used more than
once to specify more servers. If the installer runs in interactive mode,
it will prompt the user if none of these option was given at the command
line.
 2009-09-02 19:09:28 +02:00
Martin Nagy de53d0a26e Make --setup-dns work on replica installation 
The ipa-replica-install script will setup the DNS if user specifies the
--setup-dns option. It will only add the zone into LDAP if the
cn=dns,$SUFFIX container doesn't exist. For now, however, we do not add
the records.
 2009-07-22 18:02:22 +02:00
Martin Nagy a09d2c3498 Add a reverse zone with server's PTR record 
Also, small cosmetic change in dns.ldif.
 2009-07-22 18:02:22 +02:00
Martin Nagy 296ffe6c61 Add --setup-dns option. It will replace --setup-bind 2009-07-22 18:02:22 +02:00
Martin Nagy 017f236d6a Use uppercase boolean values in dns.ldif 
The newest 389 server implements syntax checking and causes problems if
the boolean attribute is set to "True". The correct value should be
"TRUE".
 2009-07-15 07:34:28 +02:00
Martin Nagy 5149803873 Configure BIND LDAP driver to use SASL authentication 
We use /etc/named.keytab generated by ipa-server-install to authenticate
against the LDAP server. Also tidy up /etc/named.conf since we're there.
 2009-07-10 09:55:29 -04:00
Martin Nagy 8345e8e1f1 Use root.$HOST.$DOMAIN. instead of root.$DOMAIN. 2009-06-02 12:32:06 +02:00
Martin Nagy 1bc786e379 Use LDAP instead of flat file for zone storage 2009-06-02 12:32:01 +02:00
Martin Nagy 1893a802c7 Change DNS LDAP attributes 
Removes two unneeded attributes and adds one attribute for specifying
DNS update policy. Additionally, use different namespace for them: 5.x
for attribute types and 6.x for object classes.
 2009-06-02 12:30:59 +02:00
Martin Nagy d1b3f39258 Move the __ldap_mod function to the Service class 
We were duplicating it for KrbInstance and DsInstance. Since we will
also need it for BindInstance as well, it will be better if it is in the
Service class instead.
 2009-06-02 12:30:59 +02:00
Martin Nagy 18e74643a6 Add comments in config.py and fix Environment.get() 2008-10-20 19:54:30 +02:00
Martin Nagy 3a80297b04 Reworking Environment, moved it to config.py 2008-10-17 23:11:51 +02:00
Martin Nagy ff88652a40 Convert string values to boolean when generating environment 2008-10-14 21:22:44 +02:00
Martin Nagy 83fa46a706 ipa-pwpolicy: correctly compare minlife and maxlife Fixes: 463849 2008-10-08 16:44:51 +02:00
Martin Nagy 574ca532b5 Fix a typo in ipa-modgroup causing it to fail Fixes: 463567 2008-10-08 16:44:51 +02:00
Martin Nagy 732785b997 Add tests for config.py 2008-10-08 00:07:44 +02:00
Martin Nagy 4a1c4a3fe3 Implement argument parsing for the CLI 2008-10-08 00:07:44 +02:00
Martin Nagy 4a68c719f0 Implement config file reading 2008-10-08 00:07:44 +02:00
Martin Nagy 149429f305 Environment is now subclassed from object, rather then dict. Added tests for Environment and config.py 2008-10-02 17:22:41 -06:00
Martin Nagy afdc721038 Add support for environment variables, change tests accordingly 2008-09-29 17:45:14 -06:00
Martin Nagy 9b8f7b1eac ipa-change-master-key: Really exit when not run as root Also fix this for ipa-fix-CVE-2008-3274 2008-09-24 20:09:35 +02:00
Martin Nagy a62b85a233 Fix architecture detection in ldapupdate 2008-09-19 17:25:05 +02:00
Martin Nagy 8683c23e9d Restart httpd and dirsrv services after yum upgrade. 
Fixes: 441566
 2008-09-17 23:06:33 +02:00
Martin Nagy 1913996584 Don't try to discover servers if we specified them on command line. 2008-09-17 23:06:23 +02:00
Martin Nagy 1634e09973 Add standard override options to ipa-replica-prepare 
Fixes: 462489
 2008-09-17 23:06:18 +02:00
Martin Nagy b5ee09c097 Fix spelling. 2008-09-12 00:03:50 +02:00
Martin Nagy f33c57e6f8 Fix the -G option of ipa-adduser. Don't add the user if one of the groups doesn't exist. Fixes: 459801 2008-09-11 23:39:28 +02:00
Martin Nagy fa019e932d Ignore GSS exception when iterating through server list. Fixes: 459864 2008-09-11 23:38:41 +02:00
Martin Nagy a9e8a72059 Try servers from ipa.conf even if we specified them on the command line. 2008-09-11 23:34:01 +02:00
Martin Nagy 7206a6d43c More strict input checks in ipa-pwpolicy and return non-zero when unsuccessful. Fixes: 461213, 461325, 461332, 461543 2008-09-11 23:34:01 +02:00
Martin Nagy 885103c321 Rework config.py and change cli tools. Maintain order of IPA servers from command line, config and DNS. Parse options before detecting IPA configuration. Don't ignore rest of the options if one is missing in ipa.conf. Drop the --usage options, we will rely on --help. Fixes: 458869, 459070, 458980, 459234 2008-09-11 23:34:01 +02:00
Martin Nagy 828c9b9cdd Delete old mercurial files. 2008-08-15 08:54:37 +02:00
Martin Nagy fbc74a0cb4 Fix few syntax errors. 2008-08-06 19:17:13 +02:00
Martin Nagy f7ca405716 Wrap up the raw_input() to user_input() for convenience and uniformity. 2008-07-23 10:05:06 -04:00
Martin Nagy b95c05f5c6 Fix attribute parsing so that you can add a DN or an attribute with a '=' character in it. Fixes #454630 2008-07-09 16:54:19 -04:00
Martin Nagy 6cce2f45e8 Fix some small issues that caused compiler warnings, like uninitialized or unused variables or missing krb5 prototypes. 2008-06-30 14:17:10 -04:00
Martin Nagy 1069324eba Only ask the user to install bind. 2008-05-22 11:40:31 -04:00
Martin Nagy 2f69e7e18d Change file mode of log files to 600. 
446869
 2008-05-20 22:43:03 -04:00
Martin Nagy 2d608a8354 Don't ask the user again if he wants to replace bind configuration files if he specified --setup-bind. 
430090
 2008-05-14 16:25:10 -04:00
Martin Nagy 28f312664e Fix typo, /etc/resolve.conf -> /etc/resolv.conf. 
444660
 2008-05-14 16:25:06 -04:00