Commit Graph

182 Commits

Author SHA1 Message Date
Simo Sorce
1e3276cec1 Make sure recent ldapmodify tool (as in F9) do not complain by splitting the
operation into 2 modify operations
2008-04-25 14:18:39 -04:00
Rob Crittenden
2427e7c130 Don't allow a replica to prepare a replica for itself.
442756
2008-04-23 15:36:13 -04:00
Rob Crittenden
27691b9e1c Use the same kpasswd.keytab on all replicas.
If we generate a new keytab for each replica then effectively password
changes can only occur on the last replica created.

439905
2008-04-09 16:57:41 -04:00
Simo Sorce
dc861888ad Add _ntp SRV record 2008-04-07 15:27:42 -04:00
Rob Crittenden
a761093a30 Create /etc/ipa/ipa.conf earlier in the installation process.
Because the ipa.config() object raises an error if there is no configuration
file and auto-detection fails, ipa_webgui may fail to start at install time.

440475
2008-04-03 15:49:07 -04:00
Rob Crittenden
98f8a31320 No need to use a regular expression to find the replication host
430015
2008-03-31 18:27:42 -04:00
Simo Sorce
af50f341ad Call client uninstall from server uninstall so that uninstall reverses also
client bits.
2008-03-31 17:35:45 -04:00
Rob Crittenden
767acbee06 Put replica info file into /var/lib/ipa instead of the current directory
439120
2008-03-28 15:56:07 -04:00
Simo Sorce
aac086582a Move sysrestore to ipa-python so it can be used by client scripts too.
Change backup format so files are all in a single directory (no dir
hierarchies) and use an index file so we can save also ownership and
permission info for the restore (and eventually other data later on).
2008-03-27 19:01:38 -04:00
Rob Crittenden
382ff1d29e Put the replica hostname back together properly
439057
2008-03-27 10:20:15 -04:00
Rob Crittenden
fd92652ace Make the memberof task a public function.
This is used when a new replica is created as well as whenever a replica
is re-initialized from another master.

In order for this to work when not creating an instance the __init__
function needs to be able to determine the suffix and the dm_password
is needed.

I've also added the time to the RDN of the member task to ensure
uniqueness.

438222
2008-03-27 09:33:01 -04:00
Simo Sorce
402187c838 Make Install and Uninstall have different log files 2008-03-24 12:22:34 -04:00
Rob Crittenden
79db4c3aa2 Fix file permissions on ca.crt when it is installed.
438220
2008-03-26 12:11:58 -04:00
Rob Crittenden
6464c40424 Start ntpd after FDS so that the ntp user can be found.
Start httpd after ipa_webgui becuse otherwise mod_proxy may not like it if it
can't connect to the UI listening port

438090
2008-03-24 11:02:49 -04:00
Rob Crittenden
5547ed320a Remove ACI that was causing RDN changes to fail
Fix for session code so RDN change can succeed

433523
2008-03-10 10:04:15 -04:00
Rob Crittenden
092b1b694c Add ability to initialize a replication agreement
Add ability to force a synch to occur
Clean up a lot of unused code in ipaldap.py. This lets us do a simple bind
  without being root (it used to try to read dse.ldif)

436237
2008-03-07 10:56:03 -05:00
Rob Crittenden
03d7125eac Verify that the hostname is correct in /etc/hosts
Don't ignore exceptions when getting the hostname from the user

433515
2008-03-06 13:17:28 -05:00
Rob Crittenden
f948904b5c KDC is Key Distribution Center, not Kerberos Domain Controller
435949
2008-03-04 14:47:47 -05:00
Rob Crittenden
b3c8780c1d Fix build breakage. 2008-03-03 22:30:10 -05:00
Rob Crittenden
b49942fe96 Close all fds when running another program. This fixes the SELinux AVCs.
Put installation log files into /var/log.

430024
2008-03-03 16:14:48 -05:00
Rob Crittenden
cc3b9cddef Add small script to start/stop all of the services that IPA requires in the
proper order.

435026
2008-02-28 11:37:06 -05:00
Simo Sorce
d7ad62cd7e Make sure all entries are generated by us according to IPA
default tree. This patch make sure that the DS setup script
does not add unwanted entries.
2008-02-28 13:35:10 -05:00
Nathan Kinder
2c559fce85 Fixed the way we call ipa-client-install from ipa-replica-install.
434980
2008-02-28 15:24:10 -08:00
Simo Sorce
d2fd2270cd We do not require the Master password anymore, fix code and error message 2008-02-25 17:18:18 -05:00
Simo Sorce
e50f0fdbee Fix unattended install 2008-02-25 17:16:18 -05:00
Rob Crittenden
231913f3c2 Make sure KrbPrincipalName is unique server-wide
Fix the build. Somehow this file didn't get committed.
2008-02-21 23:22:31 -05:00
Simo Sorce
144a728182 Make sure KrbPrincipalName is unique server-wide 2008-02-21 22:31:16 -05:00
Rob Crittenden
87d9c037e4 Add some additional error handling
433347
2008-02-20 16:31:32 -05:00
Simo Sorce
ae0eaa0120 Let users write their own password, should fix 433707 2008-02-21 09:51:47 -05:00
Simo Sorce
0ae42b28de Start ntpd first unless we do not want it.
Make sure we do sync the clock leaping to the current correct time.
This avoids problems with bad dates on certificates, etc..
2008-02-20 11:03:46 -05:00
Simo Sorce
46cb6e9bdd Run ipa-client-install after server install bits 2008-02-20 10:16:19 -05:00
Rob Crittenden
da24953f9a Warn if a user tries to install a replica on the wrong target machine
432691
2008-02-19 10:46:22 -05:00
Rob Crittenden
e31d33619d Add some error handling for LDAP connection issues
Verify the DM password earlier in the process

433368
2008-02-19 10:20:13 -05:00
Rob Crittenden
80a4e94e5b Verify current domain with user during installation
Use that domain when creating replicas

Resolves 432066
2008-02-15 20:47:29 -05:00
Rob Crittenden
eef18e5c38 Display the path to the PKCS#12 password file at the end of installation 2008-02-19 11:40:27 -05:00
Rob Crittenden
5b1e7e3a5f Don't create a backup of the PKCS#12 cert on replicas
Name the file created by ipa-replica-prepare after the FQDN of the target

Resolves 432904
2008-02-14 17:39:06 -08:00
Rob Crittenden
5be3defccf Gracefully handle sys.exit() in python 2.4 2008-02-11 09:41:14 -05:00
Rob Crittenden
6e0bda98e3 Missed a place to translate the realm name into an instance name
Catch SystemExit exceptions otherwise a trace will be shown with python 2.4
2008-02-08 15:10:26 -05:00
Rob Crittenden
97d9c235dd Set the license uniformly to GPLv2 only. 2008-02-04 15:15:52 -05:00
Rob Crittenden
ef5b4391de Fix broken attempt to return 0 on success, 1 on failure 2008-02-06 09:05:47 -05:00
Rob Crittenden
07b1aef252 Return 1 on error, 0 on success 2008-02-05 13:55:06 -05:00
Rob Crittenden
5a96618f5d Use file to store the current CA serial number
No longer create a PKCS#12 file that contains the CA
No longer send the entire CA to each replica, generate the SSL certs on master
Fix number of bugs in ipa-replica-install and prepare
Produce status output during replica creation
2008-02-05 12:23:53 -05:00
Rob Crittenden
aad14c5d54 Missed closing quote 2008-01-29 11:33:44 -05:00
Rob Crittenden
71e39eccd8 Remove reference to radius that wasn't used and was causing program to fail.
Resolves 429853
2008-01-29 10:08:58 -05:00
Rob Crittenden
946ef21426 Include some additional information when installing IPA.
Remove 8080 as a port that needs to be opened
bz 430088
2008-01-25 17:08:36 -05:00
Rob Crittenden
5c58015fbe Fix misspelling of the word indices. 2008-01-25 13:29:49 -05:00
Mark McLoughlin
11266d039f Re-factor the ipa_webgui and ipa_kpasswd instance code
The ipa_webgui and ipa_kpasswd instance code is identical
and I want to add another similar instance down the line,
so re-factor the code into a service.SimpleServiceInstance
class.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-01-22 11:58:06 +00:00
Mark McLoughlin
ee7c818bde Remove questions from ipaserver.dsinstance
Let's assume that all ipaserver.dsinstance could be used
somewhere where asking questions on stdout/stdin is not
approriate and re-factor the code to be suitable in
those situations too.

i.e. make check_existing_installation() return a list of
server IDs and make check_ports() return an (unsecure,
secure) tuple indication which ports are in use.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-01-22 08:03:06 +00:00
Rob Crittenden
00e20c2003 Use Fedora package names for PyKerberos (python-kerberos) and pyasn1
(python-pyasn1) for the specfile Requires.
2008-01-24 13:44:38 -05:00
Rob Crittenden
042fb11fa1 Fix issues reported by rpmlint.
- Removing shebangs (#!) from a bunch of python libraries
- Don't use a variable name in init scripts for the lock file
- Keep the init script name consistent with the binary name, so renamed
  ipa-kpasswd.init to ipa_kpasswd.init
- Add status option to the init scripts
- Move most python scripts out of /usr/share/ipa and into the python
  site-packages directories (ipaserver and ipaclient)
- Remove unnecessary sys.path.append("/usr/share/ipa")
- Fix the license string in the spec files
- Rename ipa-webgui to ipa_webgui everywhere
- Fix a couple of issues reported by pychecker in ipa-python
2008-01-18 16:20:36 -05:00