IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-09-03 20:52:56 -05:00
Code Issues Packages Projects Releases Wiki Activity
2,226 Commits 11 Branches 63 Tags
be82f941d038bda2430eedaad73102684557dada
Commit Graph
44 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Nagy b519b87ea4 Add forgotten chunks from commit 4e5a68397a 
I accidentally pushed the older patch that didn't contain bits for
ipa-replica-install.
 2009-09-08 22:48:34 +02:00
Martin Nagy 205a41205b Add A and PTR records of ourselves during installation 
If the DNS zones already exist but don't contain our own records, add
them. This patch introduces the ipalib.api into the installers. For now,
the code is still little messy. Later patches will abandon the way we
create zones now and use ipalib.api exclusively.
 2009-09-02 22:04:25 +02:00
Martin Nagy b07d1b54f9 Remove old --setup-bind option 
Since we are changing the behaviour of the --setup-dns option
substantially, we might as well remove the old --setup-bind option.
 2009-09-02 22:04:25 +02:00
Martin Nagy fbda06269d Setup bind only after restarting kdc and dirsrv 
BIND starting before we apply LDAP updates and restart kdc and directory
server causes trouble. We resolve this for now by postponing BIND setup
to the end of installation. Another reason is that we will be using
xml-rpc during the setup in the future.
 2009-09-02 22:04:25 +02:00
Martin Nagy 4e5a68397a Use DNS forwarders in /etc/named.conf 
This patch adds options --forwarder and --no-forwarders. At least one of
them must be used if you are doing a setup with DNS server. They are
also mutually exclusive. The --forwarder option can be used more than
once to specify more servers. If the installer runs in interactive mode,
it will prompt the user if none of these option was given at the command
line.
 2009-09-02 19:09:28 +02:00
Martin Nagy de53d0a26e Make --setup-dns work on replica installation 
The ipa-replica-install script will setup the DNS if user specifies the
--setup-dns option. It will only add the zone into LDAP if the
cn=dns,$SUFFIX container doesn't exist. For now, however, we do not add
the records.
 2009-07-22 18:02:22 +02:00
Martin Nagy a09d2c3498 Add a reverse zone with server's PTR record 
Also, small cosmetic change in dns.ldif.
 2009-07-22 18:02:22 +02:00
Martin Nagy 296ffe6c61 Add --setup-dns option. It will replace --setup-bind 2009-07-22 18:02:22 +02:00
Martin Nagy 017f236d6a Use uppercase boolean values in dns.ldif 
The newest 389 server implements syntax checking and causes problems if
the boolean attribute is set to "True". The correct value should be
"TRUE".
 2009-07-15 07:34:28 +02:00
Martin Nagy 5149803873 Configure BIND LDAP driver to use SASL authentication 
We use /etc/named.keytab generated by ipa-server-install to authenticate
against the LDAP server. Also tidy up /etc/named.conf since we're there.
 2009-07-10 09:55:29 -04:00
Martin Nagy 8345e8e1f1 Use root.$HOST.$DOMAIN. instead of root.$DOMAIN. 2009-06-02 12:32:06 +02:00
Martin Nagy 1bc786e379 Use LDAP instead of flat file for zone storage 2009-06-02 12:32:01 +02:00
Martin Nagy 1893a802c7 Change DNS LDAP attributes 
Removes two unneeded attributes and adds one attribute for specifying
DNS update policy. Additionally, use different namespace for them: 5.x
for attribute types and 6.x for object classes.
 2009-06-02 12:30:59 +02:00
Martin Nagy d1b3f39258 Move the __ldap_mod function to the Service class 
We were duplicating it for KrbInstance and DsInstance. Since we will
also need it for BindInstance as well, it will be better if it is in the
Service class instead.
 2009-06-02 12:30:59 +02:00
Martin Nagy 18e74643a6 Add comments in config.py and fix Environment.get() 2008-10-20 19:54:30 +02:00
Martin Nagy 3a80297b04 Reworking Environment, moved it to config.py 2008-10-17 23:11:51 +02:00
Martin Nagy ff88652a40 Convert string values to boolean when generating environment 2008-10-14 21:22:44 +02:00
Martin Nagy 83fa46a706 ipa-pwpolicy: correctly compare minlife and maxlife Fixes: 463849 2008-10-08 16:44:51 +02:00
Martin Nagy 574ca532b5 Fix a typo in ipa-modgroup causing it to fail Fixes: 463567 2008-10-08 16:44:51 +02:00
Martin Nagy 732785b997 Add tests for config.py 2008-10-08 00:07:44 +02:00
Martin Nagy 4a1c4a3fe3 Implement argument parsing for the CLI 2008-10-08 00:07:44 +02:00
Martin Nagy 4a68c719f0 Implement config file reading 2008-10-08 00:07:44 +02:00
Martin Nagy 149429f305 Environment is now subclassed from object, rather then dict. Added tests for Environment and config.py 2008-10-02 17:22:41 -06:00
Martin Nagy afdc721038 Add support for environment variables, change tests accordingly 2008-09-29 17:45:14 -06:00
Martin Nagy 9b8f7b1eac ipa-change-master-key: Really exit when not run as root Also fix this for ipa-fix-CVE-2008-3274 2008-09-24 20:09:35 +02:00
Martin Nagy a62b85a233 Fix architecture detection in ldapupdate 2008-09-19 17:25:05 +02:00
Martin Nagy 8683c23e9d Restart httpd and dirsrv services after yum upgrade. 
Fixes: 441566
 2008-09-17 23:06:33 +02:00
Martin Nagy 1913996584 Don't try to discover servers if we specified them on command line. 2008-09-17 23:06:23 +02:00
Martin Nagy 1634e09973 Add standard override options to ipa-replica-prepare 
Fixes: 462489
 2008-09-17 23:06:18 +02:00
Martin Nagy b5ee09c097 Fix spelling. 2008-09-12 00:03:50 +02:00
Martin Nagy f33c57e6f8 Fix the -G option of ipa-adduser. Don't add the user if one of the groups doesn't exist. Fixes: 459801 2008-09-11 23:39:28 +02:00
Martin Nagy fa019e932d Ignore GSS exception when iterating through server list. Fixes: 459864 2008-09-11 23:38:41 +02:00
Martin Nagy a9e8a72059 Try servers from ipa.conf even if we specified them on the command line. 2008-09-11 23:34:01 +02:00
Martin Nagy 7206a6d43c More strict input checks in ipa-pwpolicy and return non-zero when unsuccessful. Fixes: 461213, 461325, 461332, 461543 2008-09-11 23:34:01 +02:00
Martin Nagy 885103c321 Rework config.py and change cli tools. Maintain order of IPA servers from command line, config and DNS. Parse options before detecting IPA configuration. Don't ignore rest of the options if one is missing in ipa.conf. Drop the --usage options, we will rely on --help. Fixes: 458869, 459070, 458980, 459234 2008-09-11 23:34:01 +02:00
Martin Nagy 828c9b9cdd Delete old mercurial files. 2008-08-15 08:54:37 +02:00
Martin Nagy fbc74a0cb4 Fix few syntax errors. 2008-08-06 19:17:13 +02:00
Martin Nagy f7ca405716 Wrap up the raw_input() to user_input() for convenience and uniformity. 2008-07-23 10:05:06 -04:00
Martin Nagy b95c05f5c6 Fix attribute parsing so that you can add a DN or an attribute with a '=' character in it. Fixes #454630 2008-07-09 16:54:19 -04:00
Martin Nagy 6cce2f45e8 Fix some small issues that caused compiler warnings, like uninitialized or unused variables or missing krb5 prototypes. 2008-06-30 14:17:10 -04:00
Martin Nagy 1069324eba Only ask the user to install bind. 2008-05-22 11:40:31 -04:00
Martin Nagy 2f69e7e18d Change file mode of log files to 600. 
446869
 2008-05-20 22:43:03 -04:00
Martin Nagy 2d608a8354 Don't ask the user again if he wants to replace bind configuration files if he specified --setup-bind. 
430090
 2008-05-14 16:25:10 -04:00
Martin Nagy 28f312664e Fix typo, /etc/resolve.conf -> /etc/resolv.conf. 
444660
 2008-05-14 16:25:06 -04:00