freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

History

Alexander Bokovoy acb2c3106a Before kinit, try to sync time with the NTP servers of the domain we are joining When running ipa-client-install on a system whose clock is not in sync with the master, kinit fails and enrollment is aborted. Manual checking of current time at the master and adjusting on the client-to-be is then needed. The patch tries to fetch SRV records for NTP servers of the domain we aim to join and runs ntpdate to get time synchronized. If no SRV records are found, sync with IPA server itself. If that fails, warn that time might be not in sync with KDC. https://fedorahosted.org/freeipa/ticket/1773		2011-10-06 05:16:41 -04:00
..
firefox	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
ipa-install	Before kinit, try to sync time with the NTP servers of the domain we are joining	2011-10-06 05:16:41 -04:00
ipaclient	Before kinit, try to sync time with the NTP servers of the domain we are joining	2011-10-06 05:16:41 -04:00
man	Improve ipa-join man page	2011-09-07 12:59:29 +02:00
AUTHORS	Fix build from autoconf patch import.	0001-01-01 00:00:00 +00:00
config.c	Fix issues found by Coverity.	2011-05-09 16:23:40 -04:00
configure.ac	build tweaks - use automake's foreign mode, avoid creating empty files to satisfy gnu mode - run autoreconf -f to ensure that everything matches	2010-11-29 11:39:55 -05:00
ipa-client-common.c	Change FreeIPA license to GPLv3+	2010-12-20 17:19:53 -05:00
ipa-client-common.h	include <stdint.h> for uintptr_t	2011-09-22 09:42:11 -04:00
ipa-client.spec.in	Fix versioning for configure.ac and ipa-python/setup.py	2008-08-11 18:31:05 -04:00
ipa-getkeytab.c	Fix build warnings	2011-08-26 08:24:48 -04:00
ipa-join.c	Disable reverse lookups in ipa-join and ipa-getkeytab	2011-08-25 20:38:11 -04:00
ipa-rmkeytab.c	Bad return values for ipa-rmkeytab command	2011-05-03 15:19:07 +02:00
Makefile.am	Mozldap-specific code removed	2011-01-14 17:33:11 -05:00
NEWS	Fix build from autoconf patch import.	0001-01-01 00:00:00 +00:00
README	Add a copy of the LICENSE and populate some README's	2008-01-23 10:30:18 -05:00
version.m4.in	Fix versioning for configure.ac and ipa-python/setup.py	2008-08-11 18:31:05 -04:00

README

Code to be installed on any client that wants to be in an IPA domain.

Mostly consists of a tool for Linux systems that will help configure the
client so it will work properly in a kerberized environment.

It also includes several ways to configure Firefox to do single sign-on.

The two methods on the client side are:

1. globalsetup.sh. This modifies the global Firefox installation so that
   any profiles created will be pre-configured.

2. usersetup.sh. This will update a user's existing profile.

The downside of #1 is that an rpm -V will return a failure. It will also
need to be run with every update of Firefox.

One a profile contains the proper preferences it will be unaffected by
upgrades to Firefox. 

The downside of #2 is that every user would need to run this each time they
create a new profile.

There is a third, server-side method. See ipa-server/README for details.