IntenseWebs/freeipa
3
0 Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-10-12 16:32:01 -05:00
Code Issues Packages Projects Releases Wiki Activity
8,541 Commits 11 Branches 63 Tags
c7408f67f6cff7bd3ac14b7661472898f8e7dd73
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jan Cholasta 0914cb663e install: Fix SASL mappings not added in ipa-server-install 
Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
 2015-08-27 16:05:11 +02:00
Jan Cholasta e9a76c3d12 cert renewal: Automatically update KRA agent PEM file 
https://fedorahosted.org/freeipa/ticket/5253

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2015-08-27 15:53:42 +02:00
Jan Cholasta 43ee695195 cert renewal: Include KRA users in Dogtag LDAP update 
https://fedorahosted.org/freeipa/ticket/5253

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2015-08-27 15:53:42 +02:00
Jan Cholasta aebb72e1fb spec file: Add Requires(post) on selinux-policy 
This prevents ipa-server-upgrade failures on SELinux AVCs because of old
selinux-policy version.

https://fedorahosted.org/freeipa/ticket/5256

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2015-08-26 08:19:32 +02:00
Jan Cholasta 01dd951ddc vault: Add container information to vault command results 
https://fedorahosted.org/freeipa/ticket/5150

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-08-19 10:39:25 +02:00
Jan Cholasta 29cee7a4bc vault: Fix vault-find with criteria 
https://fedorahosted.org/freeipa/ticket/5212

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-08-19 10:28:27 +02:00
Jan Cholasta ff1e66375c install: Fix replica install with custom certificates 
https://fedorahosted.org/freeipa/ticket/5226

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-08-18 16:24:19 +02:00
Jan Cholasta d9e9e5088f vault: Fix param labels in output of vault owner commands 
https://fedorahosted.org/freeipa/ticket/5214

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-08-18 11:17:29 +02:00
Jan Cholasta d2da0d89d1 baseldap: Allow overriding member param label in LDAPModMember 
https://fedorahosted.org/freeipa/ticket/5214

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-08-18 11:17:29 +02:00
Jan Cholasta 391ccabb9f ULC: Prevent preserved users from being assigned membership 
https://fedorahosted.org/freeipa/ticket/5170

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-08-13 16:41:03 +02:00
Jan Cholasta a651be3eec install: Fix server and replica install options 
https://fedorahosted.org/freeipa/ticket/5184

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-08-12 16:42:01 +02:00
Jan Cholasta d6e701a793 spec file: Update minimum required version of krb5 
Automatically require the krb5 version used at build time.

https://fedorahosted.org/freeipa/ticket/5132

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2015-07-15 11:02:32 +00:00
Jan Cholasta ba31b41569 spec file: Move /etc/ipa/kdcproxy to the server subpackage 
The directory was in the python subpackage, but that broke client-only
build. We don't want the directory to be installed on clients anyway,
since it is part of a server-side feature.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
 2015-07-15 10:46:18 +00:00
Jan Cholasta 7c0e7f7e3c spec file: Update minimal versions of required packages 
https://fedorahosted.org/freeipa/ticket/5103

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2015-07-08 16:08:06 +02:00
Jan Cholasta 232458a222 ipalib: Fix skip_version_check option 
This reverts commit ea7f392bb9.

The option can be either set in IPA config file or specified as
'ipa -e skip_version_check=1 [COMMAND]'.

https://fedorahosted.org/freeipa/ticket/4768

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-07-08 12:36:19 +00:00
Jan Cholasta e43296ba9a replica prepare: Do not use entry after disconnecting from LDAP 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 5b39bc1003 plugable: Remove unused call method of Plugin 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 2b12bca660 plugable: Specify plugin base classes and modules using API properties 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 4b277d0477 plugable: Change is_production_mode to method of API 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 1a21fd971c plugable: Remove SetProxy, DictProxy and MagicDict 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta e9c9e3f009 ipaplatform: Do not use MagicDict for KnownServices 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta b1fc875c3a plugable: Lock API on finalization rather than on initialization 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 860088208b plugable: Do not use DictProxy for API 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta e39fe4ed31 plugable: Pass API to plugins on initialization rather than using set_api 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 2d1515323a plugable: Load plugins only from modules imported by API 
Previously all plugin modules imported from anywhere were added to the API.

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 481f8ddaa3 plugable: Specify plugins to import in API by module names 
This change removes the automatic plugins sub-package magic and allows
specifying modules in addition to packages.

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 7715d5bb04 ipalib: Move find_modules_in_dir from util to plugable 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta fe2accf776 ipalib: Load ipaserver plugins when api.env.in_server is True 
https://fedorahosted.org/freeipa/ticket/3090
https://fedorahosted.org/freeipa/ticket/5073

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta f87ba5ee08 plugable: Move plugin base class and override logic to API 
Each API object now maintains its own view of registered plugins. This change
removes the need to register plugin base classes.

This reverts commit 2db741e847.

https://fedorahosted.org/freeipa/ticket/3090
https://fedorahosted.org/freeipa/ticket/5073

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 1d60825138 User life cycle: change user-del flags to be CLI-specific 
Rename --permanently to --no-preserve.

https://fedorahosted.org/freeipa/ticket/3813

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-06-18 15:48:53 +02:00
Jan Cholasta c3a3d789b5 install: Fix ipa-replica-install not installing RA cert 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-18 14:48:31 +02:00
Jan Cholasta 69607250b9 User life cycle: provide preserved user virtual attribute 
https://fedorahosted.org/freeipa/ticket/3813

Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-06-15 16:13:22 +02:00
Jan Cholasta bae80b00a6 install: Fix logging setup in server and replica install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-12 05:46:31 +00:00
Jan Cholasta e7ac57e139 vault: Fix ipa-kra-install 
Use state in LDAP rather than local state to check if KRA is installed.
Use correct log file names.

https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 16:17:34 +00:00
Jan Cholasta cbcd86b500 install: Initialize API early in server and replica install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 16:17:34 +00:00
Jan Cholasta 81729e22d3 vault: Move vaults to cn=vaults,cn=kra 
https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 16:17:34 +00:00
Jan Cholasta 46cbe26b51 install: Migrate ipa-replica-install to the install framework 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 07:29:58 +00:00
Jan Cholasta 6f1ae05d8d install: Allow setting usage in CLI tools 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 07:29:58 +00:00
Jan Cholasta eb0251c56b install: Add support for positional arguments in CLI tools 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 07:29:58 +00:00
Jan Cholasta 1bf383e0cf install: Handle Knob cli_name and cli_aliases values consistently 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 07:29:58 +00:00
Jan Cholasta eb959221e1 install: Migrate ipa-server-install to the install framework 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-08 15:34:11 +00:00
Jan Cholasta 9e9c01fba2 install: Introduce installer framework ipapython.install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-08 15:34:11 +00:00
Jan Cholasta 08229a0c54 install: Move private_ccache from ipaserver to ipapython 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-08 15:33:36 +00:00
Jan Cholasta 4c70590c2a install: Fix external CA server install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-08 15:32:33 +00:00
Jan Cholasta 90e400e57e install: Fix CA-less server install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-08 15:32:33 +00:00
Jan Cholasta e01095dfb3 install: Fix missing variable initialization in replica install 
https://fedorahosted.org/freeipa/ticket/4468
 2015-06-08 06:24:06 +00:00
Jan Cholasta f451af9a5a install: Move ipa-server-upgrade code into a module 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-05-29 08:00:33 +00:00
Jan Cholasta 3cb42e33c0 install: Move ipa-replica-install code into a module 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-05-29 08:00:33 +00:00
Jan Cholasta 6dabe6ebb2 install: Move ipa-server-install code into a module 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-05-29 08:00:33 +00:00
Jan Cholasta 5a7b153ad2 install: Make a package out of ipaserver.install.server 
Until ipa-server-install, ipa-replica-install and ipa-server-upgrade are merged
into a single code base, keep their respective bits in separate modules in the
package.

https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-05-29 08:00:33 +00:00
Jan Cholasta 454e8691cf client-install: Fix kinits with non-default Kerberos config file 
https://fedorahosted.org/freeipa/ticket/4808

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-05-21 07:42:24 +00:00
Jan Cholasta dc668b1b6a baseldap: Fix possible crash in LDAPObject.handle_duplicate_entry 2015-05-15 14:28:52 +00:00
Jan Cholasta 37784625eb Fix stop_tracking_certificates call in ipa-restore 
CAInstance.stop_tracking_certificates() no longer has dogtag_constants
argument.

https://fedorahosted.org/freeipa/ticket/4775

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-05-07 08:29:40 +00:00
Jan Cholasta b48cfe05e9 ldap: Remove IPASimpleLDAPObject 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta e2b0981d60 ldap: Use SimpleLDAPObject instead of IPASimpleLDAPObject in LDAPClient 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta db88498c95 ldap: Move schema handling from IPASimpleLDAPObject to LDAPClient 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta cbb112dd57 ldap: Use LDAPClient instead of IPASimpleLDAPObject in LDAPEntry 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 955885d8d9 ldap: Move value encoding from IPASimpleLDAPObject to LDAPClient 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 964e7e906a makeaci: Use LDAPClient instead of IPASimpleLDAPObject 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 8dca1cbd53 cainstance: Use LDAPClient instead of IPASimpleLDAPObject 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta e1f7bcfbea ldap: Use LDAPClient instead of IPASimpleLDAPObject in ldap2.modify_password 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 32505157ea ldap: Use LDAPClient bind and unbind methods in ldap2 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 232e04d861 ldap: Use LDAPClient bind and unbind methods in IPAdmin 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta c904dea06a ldap: Add bind and unbind methods to LDAPClient 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 8f263df245 ldap: Use LDAPClient connection management in ldap2 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 45d9b82f40 ldap: Use LDAPClient connection management in IPAdmin 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 02e1ebe07c ldap: Add connection management to LDAPClient 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta a849bca53f ldap: Remove unused IPAdmin methods 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta b106450dbf ldap: Drop python-ldap tuple compatibility 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta fa50068607 upload_cacrt: Fix empty cACertificate in cn=CAcert 
https://fedorahosted.org/freeipa/ticket/4565

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-03-19 14:38:34 +00:00
Jan Cholasta 572d68b539 client: Fix ca_is_enabled calls 
The command was added in API version 2.107. Old IPA servers may crash with
NetworkError on ca_is_enabled, handle this case gracefully.

https://fedorahosted.org/freeipa/ticket/4565

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-03-19 14:38:34 +00:00
Jan Cholasta 95a628cfb9 client-install: Do not crash on invalid CA certificate in LDAP 
When CA certificates in LDAP are corrupted, use the otherwise acquired CA
certificates from before.

https://fedorahosted.org/freeipa/ticket/4565

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-03-19 14:38:34 +00:00
Jan Cholasta 39e474e14e certstore: Make certificate retrieval more robust 
https://fedorahosted.org/freeipa/ticket/4565

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-03-19 14:38:34 +00:00
Jan Cholasta 8713c5a695 replica-install: Use different API instance for the remote server 
Reviewed-By: Tomas Babej <tbabej@redhat.com>
 2015-03-05 11:01:36 +01:00
Jan Cholasta d7ef7e1ca0 ldap2: Use self API instance instead of ipalib.api 
Reviewed-By: Tomas Babej <tbabej@redhat.com>
 2015-03-05 11:01:36 +01:00
Jan Cholasta 2625efa727 advise: Add separate API object for ipa-advise 
Reviewed-By: Tomas Babej <tbabej@redhat.com>
 2015-03-05 11:01:36 +01:00
Jan Cholasta dae6a18813 ipalib: Move plugin package setup to ipalib-specific API subclass 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Tomas Babej <tbabej@redhat.com>
 2015-03-05 11:01:36 +01:00
Jan Cholasta 2db741e847 ipalib: Allow multiple API instances 
Merged the Registrar class into the Registry class. Plugins are now
registered globally instead of in ipalib.api and are instantiated per-API
instance. Different set of plugin base classes can be used in each API
instance.

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Tomas Babej <tbabej@redhat.com>
 2015-03-05 11:01:36 +01:00
Jan Cholasta c438d9be91 Bump 389-ds-base and pki-ca dependencies for POODLE fixes 
https://fedorahosted.org/freeipa/ticket/4653

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2015-02-10 15:36:31 +00:00
Jan Cholasta deb70d5b13 Do not crash when replica is unreachable in ipa-restore 
https://fedorahosted.org/freeipa/ticket/4857

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2015-01-27 16:44:02 +01:00
Jan Cholasta c90286cbbc Create correct log directories during full restore in ipa-restore 
https://fedorahosted.org/freeipa/ticket/4865

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2015-01-27 07:41:58 +00:00
Jan Cholasta fe4b3190e9 Revert "Make all ipatokenTOTP attributes mandatory" 
This prevents schema replication conflicts which cause replication failures
with older versions of IPA. Details in
https://bugzilla.redhat.com/show_bug.cgi?id=1176995#c7

This reverts commit adcd373931.

https://fedorahosted.org/freeipa/ticket/4833

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2015-01-21 09:20:15 +01:00
Jan Cholasta 4994cd1d8d Put LDIF files to their original location in ipa-restore 
This prevents SELinux failures during online data restore.

https://fedorahosted.org/freeipa/ticket/4822

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2015-01-21 08:27:44 +01:00
Jan Cholasta 82ab0eabf8 Do not assume certmonger is running in httpinstance 
https://fedorahosted.org/freeipa/ticket/4835

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-01-20 15:35:18 +01:00
Jan Cholasta 10fe918acd Fix validation of ipa-restore options 
Fix restore mode checks. Do some of the existing checks earlier to make them
effective. Check if --instance and --backend exist both in the filesystem and
in the backup.

Log backup type and restore mode before performing restore.

Update ipa-restore man page.

https://fedorahosted.org/freeipa/ticket/4797

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2015-01-14 09:10:06 +01:00
Jan Cholasta b9ae769048 Make certificate renewal process synchronized 
Synchronization is achieved using a global renewal lock.

https://fedorahosted.org/freeipa/ticket/4803

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-01-13 18:34:59 +00:00
Jan Cholasta 6a1304324f Restart dogtag when its server certificate is renewed 
https://fedorahosted.org/freeipa/ticket/4803

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-01-13 18:34:59 +00:00
Jan Cholasta 5bf1c9a6f7 Do not crash on unknown services in installutils.stopped_service 
https://fedorahosted.org/freeipa/ticket/4835

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-01-13 17:54:12 +00:00
Jan Cholasta a63df8f309 Fix CA certificate renewal syslog alert 
https://fedorahosted.org/freeipa/ticket/4820

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-01-13 17:48:26 +00:00
Jan Cholasta 05e6adecb5 Remove RUV from LDIF files before using them in ipa-restore 
https://fedorahosted.org/freeipa/ticket/4822

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-01-13 16:58:34 +00:00
Jan Cholasta abcbe271d5 Fix ipa-restore on systems without IPA installed 
https://fedorahosted.org/freeipa/ticket/4824

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-01-13 16:28:20 +00:00
Jan Cholasta 8f9c5988e2 Refer the user to freeipa.org when something goes wrong in ipa-cacert-manage 
https://fedorahosted.org/freeipa/ticket/4781

Reviewed-By: Martin Kosek <mkosek@redhat.com>
Reviewed-By: Martin Basti <mbasti@redhat.com>
 2014-12-10 17:08:49 +00:00
Jan Cholasta f7f3c83748 Check subject name encoding in ipa-cacert-manage renew 
https://fedorahosted.org/freeipa/ticket/4781

Reviewed-By: David Kupka <dkupka@redhat.com>
 2014-12-10 17:07:05 +00:00
Jan Cholasta 7b0149f32b Improve validation of --instance and --backend options in ipa-restore 
https://fedorahosted.org/freeipa/ticket/4744

Reviewed-By: David Kupka <dkupka@redhat.com>
 2014-12-09 13:46:29 +00:00
Jan Cholasta 1f6fff2b5a Do not renew the IPA CA cert by serial number in dogtag-ipa-ca-renew-agent 
Always use the full CSR when renewing the IPA CA certificate with Dogtag. The
IPA CA certificate may be issued by an external CA, in which case renewal by
serial number does not make sense and will fail if the IPA CA was initially
installed as a subordinate of an external CA.

https://fedorahosted.org/freeipa/ticket/4784

Reviewed-By: David Kupka <dkupka@redhat.com>
 2014-12-09 13:16:49 +01:00
Jan Cholasta 423c3e8f34 Fix automatic CA cert renewal endless loop in dogtag-ipa-ca-renew-agent 
Reset profile name after requesting the CA cert from Dogtag to prevent the
automatic renewal request from being restarted in subsequent calls.

https://fedorahosted.org/freeipa/ticket/4765

Reviewed-By: David Kupka <dkupka@redhat.com>
 2014-12-09 13:06:47 +01:00
Jan Cholasta bef1d18878 Add TLS 1.2 to the protocol list in mod_nss config 
https://fedorahosted.org/freeipa/ticket/4653

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-11-25 12:44:13 +01:00
Jan Cholasta d55936756d Fix memory leak in GetKeytabControl asn1 code 
https://fedorahosted.org/freeipa/ticket/4713

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2014-11-25 08:23:24 +00:00
Jan Cholasta 66a42e67f3 Fix unchecked return value in krb5 common utils 
https://fedorahosted.org/freeipa/ticket/4713

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2014-11-25 08:23:24 +00:00
Jan Cholasta 47a08f3498 Fix unchecked return value in ipa-join 
https://fedorahosted.org/freeipa/ticket/4713

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2014-11-25 08:23:24 +00:00