Commit Graph

8763 Commits

Author SHA1 Message Date
Timo Aaltonen
6f5dc453f8 releasing package freeipa version 4.0.4-2 debian/4.0.4-2 2014-10-31 11:57:47 +02:00
Timo Aaltonen
d0ad846c3b fix -qrcode dep version 2014-10-31 11:31:05 +02:00
Timo Aaltonen
2093b2e159 control: Bump server dependency on -mod-nss to 1.0.10-2 which doesn't enable the module by default. 2014-10-31 11:18:06 +02:00
Timo Aaltonen
2382166101 freeipa-server.postinst: Enable mod_authz_user and mod_deflate too, but since they should be part of the default apache2 install, don't disable them on uninstall like the other modules. (Closes: #767425) 2014-10-31 08:12:06 +02:00
Timo Aaltonen
eafdec6dfe control: Add python-qrcode, python-selinux, python-yubico to freeipa-server dependencies. (Closes: #767427) 2014-10-31 07:53:35 +02:00
Timo Aaltonen
0cc1e70d09 releasing package freeipa version 4.0.4-1 debian/4.0.4-1 2014-10-28 12:07:21 +02:00
Timo Aaltonen
732a7fffcb add patch descriptions, fix a typo 2014-10-25 02:07:43 +03:00
Timo Aaltonen
a2bdd48dd4 clean up changelog entries that have little meaning by now 2014-10-25 01:58:25 +03:00
Timo Aaltonen
f23f3aadce bump 389-ds-base dep so that saslpath fix is there 2014-10-25 01:54:28 +03:00
Timo Aaltonen
1d498a0c76 silence some lintian warnings 2014-10-25 01:48:02 +03:00
Timo Aaltonen
5ab6406b56 fix insecure postinst 2014-10-25 01:45:56 +03:00
Timo Aaltonen
733ccfa673 put Dojos BSD license in copyright 2014-10-25 00:47:11 +03:00
Timo Aaltonen
7e9a20ef95 add missing dirsrv entries to paths.py 2014-10-24 23:41:10 +03:00
Timo Aaltonen
43b35df040 use embedded copies of jquery.js/dojo.js, because they work and perform better 2014-10-24 21:06:25 +03:00
Timo Aaltonen
85cb1471ec drop tmpfiles.d from *.install 2014-10-24 14:19:10 +03:00
Timo Aaltonen
91802453a4 update copyright 2014-10-24 14:04:57 +03:00
Timo Aaltonen
5df6548acb enable/disable mod_nss, fix systemd path, disable trying domainname.service 2014-10-24 01:37:00 +03:00
Timo Aaltonen
4f64560541 update copyright 2014-10-24 01:35:22 +03:00
Timo Aaltonen
521f721270 use debian/*.tmpfile instead of creating tmpfile.d stuff in rules 2014-10-23 23:50:29 +03:00
Timo Aaltonen
e81582a15a bump the version 2014-10-23 23:49:35 +03:00
Timo Aaltonen
e003db0fb2 Merge branch 'upstream' 2014-10-23 23:11:22 +03:00
Timo Aaltonen
cce8014286 add fix-pykerberos-api.diff 2014-10-23 23:10:12 +03:00
Timo Aaltonen
dabcd89a78 some fixes to the apache config 2014-10-23 23:09:18 +03:00
Timo Aaltonen
ae3f800834 restarting apache fails, so do a stop/start instead during ipa-server-install 2014-10-23 22:57:25 +03:00
Petr Vobornik
c55f1530c8 Become IPA 4.0.4 2014-10-23 16:13:08 +02:00
Jan Cholasta
3cb982bc01 Do not check if port 8443 is available in step 2 of external CA install
The port is never available in step 2 of external CA install, as Dogtag is
already running.

https://fedorahosted.org/freeipa/ticket/4660

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
Reviewed-By: David Kupka <dkupka@redhat.com>
2014-10-22 14:19:07 +02:00
Petr Vobornik
4ac55bf52f build: increase java stack size for all arches
Gradually new arches which need a bigger stack size for web ui build appear. It's safer to increase the stack size for every architecture and avoid possible future issues.

Reason: build fail on armv7hl
Reviewed-By: Martin Kosek <mkosek@redhat.com>
2014-10-22 13:55:28 +02:00
Alexander Bokovoy
c44bdeb771 Default to use TLSv1.0 and TLSv1.1 on the IPA server side
We only will be changing the setting on the install.
For modifying existing configurations please follow instructions
at https://access.redhat.com/solutions/1232413

Reviewed-By: Martin Kosek <mkosek@redhat.com>
2014-10-21 15:54:02 +02:00
Timo Aaltonen
888f8a68a9 server depends on fonts-font-awesome 2014-10-21 16:50:22 +03:00
Timo Aaltonen
94539bab7b drop diff to ipa.conf.tmpfiles 2014-10-21 11:45:57 +03:00
Timo Aaltonen
e1637da3e2 bump the version 2014-10-21 11:45:17 +03:00
Timo Aaltonen
3424653b60 create nssdb on client install, revert back to old-style db's 2014-10-21 11:43:18 +03:00
Timo Aaltonen
001eb01c0a Merge branch 'upstream' into master-n 2014-10-21 09:53:32 +03:00
Timo Aaltonen
a80e971bab a bunch of changes
* update platform code
* refresh patches
* bump dependencies
* create /run/ipa, /run/ipa_memcached on postinst so installer
  works OOTB
* split tmpfiles.d conf for client and server
* clean up cruft on purge
* add new files to install
* rename ipa-memcached to ipa_memcached to match upstream
* link customizable web files to /etc/ipa/html
* fix apache module enabling and disabling in postinst/prerm
* fix apache ipa.conf paths
* don't bother installing any apache configs, installer creates and
  removes them
2014-10-21 09:32:11 +03:00
Nathaniel McCallum
3ba4b4354c Configure IPA OTP Last Token plugin on upgrade
Reviewed-By: Martin Kosek <mkosek@redhat.com>
2014-10-20 10:20:51 +02:00
Petr Vobornik
5c9aec3605 dns: fix privileges' memberof during dns install
Permissions with member attrs pointing to privileges are created before the privileges.

Run memberof plugin task to fix other ends of the relationships.

https://fedorahosted.org/freeipa/ticket/4637

Reviewed-By: Martin Kosek <mkosek@redhat.com>
2014-10-17 14:09:10 +02:00
Martin Kosek
889bf4ac7a Remove changetype attribute from update plugin
The attribute addition had no effect, but it should not be there.
2014-10-17 12:02:25 +02:00
David Kupka
40f9678289 Fix typo causing certmonger is provided with wrong path to ipa-submit.
Using strip() instead split() caused that only first character of path was specified.
Also using shlex for more robust parsing.

https://fedorahosted.org/freeipa/ticket/4624

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2014-10-16 09:51:17 +02:00
Timo Aaltonen
2480ff9cdb fix apache2 related lintian issues 2014-10-15 15:26:24 +03:00
Timo Aaltonen
b03cf5ab09 update python-freeipa.install 2014-10-15 15:07:48 +03:00
Timo Aaltonen
f391edfb5e fix a typo 2014-10-15 15:02:46 +03:00
Timo Aaltonen
bca9b6a49f drop old plaform code 2014-10-15 14:51:22 +03:00
Timo Aaltonen
00c5bde2c2 update patches 2014-10-15 14:49:38 +03:00
Timo Aaltonen
2563ff5929 fix gentarball target 2014-10-15 14:10:16 +03:00
Timo Aaltonen
75d8442fc9 bump version 2014-10-15 14:09:23 +03:00
Timo Aaltonen
15d060d6dc Merge branch 'upstream' 2014-10-15 14:04:18 +03:00
David Kupka
320ea12373 Stop dogtag when updating its configuration in ipa-upgradeconfig.
Modifying CS.cfg when dogtag is running may (and does) result in corrupting
this file.

https://fedorahosted.org/freeipa/ticket/4569

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2014-10-15 09:13:12 +02:00
Timo Aaltonen
5cd2f03482 we don't have a similar systemwide ca-store as fedora 2014-10-14 15:19:20 +03:00
Timo Aaltonen
b1ed26d239 install the tmpfile conf too 2014-10-14 14:34:45 +03:00
Timo Aaltonen
2ceee8fbc8 fix check for bind9-dyndb-ldap 2014-10-14 13:48:37 +03:00