freeipa/ipaserver
Martin Babinsky a6eb87bd68 server-del: perform full master removal in managed topology
This patch implements most of the del_master_managed() functionality as a part
of `server-del` command.

`server-del` nows performs these actions:
  * check topology connectivity
  * check that at least one CA/DNS server and DNSSec masters are left
    after removal
  * cleanup all LDAP entries/attributes exposing information about the master
  * cleanup master DNS records
  * remove master and service principals
  * remove master entry from LDAP
  * check that all segments pointing to the master were removed

  `server-del` now accepts the following options:
  * `--force`: force master removal even if it doesn't exist
  * `--ignore-topology-disconnect`: ignore errors arising from disconnected
    topology before and after master removal
  * `--ignore-last-of-role`: remove master even if it is last DNS server,
    and DNSSec key master. The last CA will *not* be removed regardless of
    this option.

https://fedorahosted.org/freeipa/ticket/5588

Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-06-17 18:55:19 +02:00
..
advise ipalib, ipaserver: fix incorrect API.register calls in docstrings 2016-05-25 16:06:26 +02:00
install delegate removal of master DNS record and replica keys to separate functions 2016-06-17 18:55:19 +02:00
plugins server-del: perform full master removal in managed topology 2016-06-17 18:55:19 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc.py adtrust: support UPNs for trusted domain users 2016-06-11 17:25:50 +02:00
dns_data_management.py DNS Locations: generate NTP records 2016-06-17 18:05:03 +02:00
rpcserver.py plugable: turn Plugin attributes into properties 2016-06-03 09:00:34 +02:00
servroles.py Introduce "NTP server" role 2016-06-15 13:51:48 +02:00
topology.py ipaserver module for working with managed topology 2016-06-17 18:55:19 +02:00