Commit Graph

11520 Commits

Author SHA1 Message Date
Timo Aaltonen
5757d7a17f bump opendnssec dependency 2016-04-18 17:40:20 +03:00
Timo Aaltonen
94b55ec6bb bump certmonger, bind9, bind9-dyndb-ldap depends 2016-04-18 11:17:45 +03:00
Timo Aaltonen
61e8e82eb3 add server-dns to server Recommends to make sure upgrades work 2016-04-14 14:55:02 +03:00
Timo Aaltonen
1a0ccf6b3f changelog rewrite 2016-04-14 14:54:00 +03:00
Timo Aaltonen
5a3a2ac14b control: Bump certmonger dependency to version that has helpers in the correct place. 2016-04-06 11:07:01 +03:00
Timo Aaltonen
d9110a4278 client: Don't create /etc/pki/nssdb on postinst, it's not used anymore. 2016-04-06 11:03:17 +03:00
Timo Aaltonen
8605c7b6e2 rules: Don't enable systemd units on install. 2016-03-30 06:49:02 +03:00
Timo Aaltonen
b6186dd3ae purge-firefox-extension.diff: Clean obsolete kerberosauth.xpi 2016-03-30 06:48:18 +03:00
Timo Aaltonen
1b74568846 fix-oddjobs.diff: Fix paths and uids in oddjob configs. 2016-03-29 19:20:15 +03:00
Timo Aaltonen
2692a1592f nss.conf imports HTTPD_IPA_REWRITE_CONF, so put it back in conf-available so it's not imported twice 2016-03-29 12:23:19 +03:00
Timo Aaltonen
d981db4066 move adtrust python stuff back to freeipa-server-trust-ad 2016-03-29 10:53:19 +03:00
Timo Aaltonen
f066718caa use https for vcs urs, and cgit 2016-03-28 09:16:40 +03:00
Timo Aaltonen
d153147fa2 add test dependencies 2016-03-28 09:15:04 +03:00
Timo Aaltonen
5681ba8f6f modify ipa-httpd.conf in the upstream patch only 2016-03-28 08:15:12 +03:00
Timo Aaltonen
e45ef7acb9 don't ship /var/cache/bind/data, fix named.conf a bit. 2016-03-28 01:04:03 +03:00
Timo Aaltonen
c171947a9d drop generate-rndc-key.sh, bind generates the keyfile already 2016-03-28 00:35:43 +03:00
Timo Aaltonen
0bae0fe6a0 fix bind datadir permissions 2016-03-28 00:10:31 +03:00
Timo Aaltonen
4cf088458f split patches from platform support 2016-03-28 00:10:01 +03:00
Timo Aaltonen
142ea37393 configure apache systemd unit from the installer 2016-03-27 19:00:03 +03:00
Timo Aaltonen
f025302456 fix typo in paths.py, enable ipa-rewrite.conf by default 2016-03-27 17:30:40 +03:00
Timo Aaltonen
b2ada4a697 fix typos in fix-kdcproxy-paths.diff 2016-03-27 17:29:47 +03:00
Timo Aaltonen
deedd4e172 bump version, drop patches 2016-03-27 16:37:27 +03:00
Timo Aaltonen
7f43f19ba9 Merge branch 'experimental' into master-next 2016-03-27 16:04:15 +03:00
Petr Vobornik
43d5c02f8c Become IPA 4.3.1 2016-03-24 15:40:22 +01:00
Martin Babinsky
77e9d31c75 otptoken-add: improve the robustness of QR code printing
The python-qrcode print_ascii() method does not work in terminals with
non-UTF-8 encoding. When this is the case do not render QR code but print a
warning instead. Also print a warning when the QR code size is greater that
terminal width if the output is a tty.

https://fedorahosted.org/freeipa/ticket/5700

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2016-03-24 14:35:49 +01:00
Oleg Fayans
df816e34ec Fixed a bug with prepare_host failing upon existing ipatests folder
https://fedorahosted.org/freeipa/ticket/5748

Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-03-23 17:19:21 +01:00
Oleg Fayans
69335a985d Reverted changes in mh fixture causing some tests to fail
Some integration tests expect the members of topology to have the testfolder.
The testfolder however was created during master and client installations. In
case the client is not intalled from the very beginning of the test execution,
the test would complain about missing testfolder.

https://fedorahosted.org/freeipa/ticket/5723

Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-03-23 17:19:21 +01:00
David Kupka
e52fb36181 Look up HTTPD_USER's UID and GID during installation.
Those values differ among distributions and there is no guarantee that they're
reserved. It's better to look them up based on HTTPD_USER's name.

https://fedorahosted.org/freeipa/ticket/5712

Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-03-23 17:15:25 +01:00
Martin Basti
9a93172dec Fix stageuser-activate - managers test
https://fedorahosted.org/freeipa/ticket/5481

Reviewed-By: David Kupka <dkupka@redhat.com>
2016-03-23 16:38:26 +01:00
Timo Aaltonen
d09b8f05fd Fix kdc.conf.template to use ipaplatform.paths.
https://fedorahosted.org/freeipa/ticket/5343

Reviewed-By: David Kupka <dkupka@redhat.com>
2016-03-23 13:35:29 +01:00
Timo Aaltonen
13e9af3b6f Use ODS_USER/ODS_GROUP in opendnssec_conf.template
https://fedorahosted.org/freeipa/ticket/5343

Reviewed-By: David Kupka <dkupka@redhat.com>
2016-03-23 13:31:20 +01:00
Timo Aaltonen
813dde8ef1 ipaplatform: Move remaining user/group constants to ipaplatform.constants.
Use ipaplatform.constants in every corner instead of importing other bits or calling
some platform specific things, and remove most of the remaining hardcoded uid's.

https://fedorahosted.org/freeipa/ticket/5343

Reviewed-By: David Kupka <dkupka@redhat.com>
2016-03-23 13:31:20 +01:00
Oleg Fayans
2ddae844dc rewrite a misprocessed teardown_method method as a custom decorator
teardown_method is a standard pytest method used to put any code to be executed
after each test method is executed. While treated correctly by our integration
tests, this method is misinterpreted by in-tree tests in the following way:
in-tree tests try to execute it even if all the test methods are skipped due to
test resources being not configured. This causes the tests, that otherwise would
have been skipped, to fail

https://fedorahosted.org/freeipa/ticket/5723

Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-03-23 12:46:23 +01:00
Timo Aaltonen
7a2e8bc68b split named.conf fixing to it's own patch 2016-03-23 13:34:16 +02:00
Timo Aaltonen
a78282f9ec update fix-opendnssec-conf-template.diff 2016-03-23 13:21:48 +02:00
Timo Aaltonen
35eecf1ccd ipa_restore: Import only FQDN from ipalib.constants
https://fedorahosted.org/freeipa/ticket/5619

Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-03-23 10:08:53 +01:00
Timo Aaltonen
095a88a42b upstream fixes 2016-03-23 01:06:46 +02:00
Timo Aaltonen
d378b98897 bump changelog 2016-03-23 01:06:22 +02:00
Timo Aaltonen
6859894187 update/drop patches 2016-03-23 01:00:50 +02:00
Timo Aaltonen
a3377135e8 Merge branch 'experimental' into master-next 2016-03-23 00:56:13 +02:00
Timo Aaltonen
a4fdb02043 add new paths to platform code 2016-03-23 00:51:47 +02:00
Pavel Vomacka
ffdd64732b Resize topology graph canvas according to window size
The size of svg element is calculated when the topology graph facet is load
and then every time when the window is resized. The resize event listener
is removed after the topology graph facet emits hide event.

https://fedorahosted.org/freeipa/ticket/5647

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
2016-03-22 19:02:01 +01:00
Oleg Fayans
1d5b8b8781 Added copyright info to replica promotion tests
https://fedorahosted.org/freeipa/ticket/5723

Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-03-22 13:48:45 +01:00
Christian Heimes
e3bf65f2df Move user/group constants for PKI and DS into ipaplatform
https://fedorahosted.org/freeipa/ticket/5619

Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
2016-03-22 10:42:09 +01:00
Martin Basti
0bd34fa789 SPEC: do not run upgrade when ipa server is not installed
Running upgrade when IPA is not installed produces false positive errors

https://fedorahosted.org/freeipa/ticket/5704

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2016-03-22 10:28:16 +01:00
Martin Babinsky
85d2cc0540 spec: require python-cryptography newer than 0.9
When generating keys for custodia service, the key material is stored in
python-cryptography's OpenSSL backend encoded as DER. This only works in
python-cryptography 0.9 and newer so we need to make sure this version pulled
in during RPM build and install.

https://fedorahosted.org/freeipa/ticket/5744

Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-03-21 17:53:25 +01:00
Timo Aaltonen
45f0745b5e drop old dnssec hacks 2016-03-19 00:17:28 +02:00
Thierry Bordaz
17873d19b8 DS deadlock when memberof scopes topology plugin updates
Topology plugin may merge (aka DEL) segments that would trigger
internal search for groups owning that segment. The problem
is that it is searching those groups into the full suffix and
so need the schema compat map lock.

If any other operation holding schema compat map lock need to
access the page involved in the DEL, there is a deadlock.

This fix is to prevent useless group searching if the target entry
is a segment or is in compat tree.

https://fedorahosted.org/freeipa/ticket/5637

Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-03-18 13:25:08 +01:00
Jan Cholasta
212c4cb671 daemons: remove unused erroneous _ipap11helper import
https://fedorahosted.org/freeipa/ticket/5596

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Timo Aaltonen <tjaalton@debian.org>
2016-03-18 09:40:09 +01:00
Martin Babinsky
2b1b9ad672 spec: add conflict with bind-chroot to freeipa-server-dns
https://fedorahosted.org/freeipa/ticket/5696

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2016-03-18 09:32:47 +01:00