public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8,349 Commits 9 Branches 0 Tags
14992a07fc7ea6bb5c028e5fefaf7394af00a555
Commit Graph
15 Commits
Author SHA1 Message Date
Martin Basti e151492560 DNSSEC: allow to disable/replace DNSSEC key master 
This commit allows to replace or disable DNSSEC key master

Replacing DNSSEC master requires to copy kasp.db file manually by user

ipa-dns-install:
--disable-dnssec-master  DNSSEC master will be disabled
--dnssec-master --kasp-db=FILE  This configure new DNSSEC master server,  kasp.db from old server is required for sucessful replacement
--force Skip checks

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Petr Spacek <pspacek@redhat.com>
 2015-07-07 08:37:15 +02:00
Jan Cholasta e39fe4ed31 plugable: Pass API to plugins on initialization rather than using set_api 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta fe2accf776 ipalib: Load ipaserver plugins when api.env.in_server is True 
https://fedorahosted.org/freeipa/ticket/3090
https://fedorahosted.org/freeipa/ticket/5073

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta e7ac57e139 vault: Fix ipa-kra-install 
Use state in LDAP rather than local state to check if KRA is installed.
Use correct log file names.

https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 16:17:34 +00:00
Jan Cholasta cbcd86b500 install: Initialize API early in server and replica install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 16:17:34 +00:00
Jan Cholasta 1bf383e0cf install: Handle Knob cli_name and cli_aliases values consistently 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 07:29:58 +00:00
Jan Cholasta eb959221e1 install: Migrate ipa-server-install to the install framework 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-08 15:34:11 +00:00
Jan Cholasta 08229a0c54 install: Move private_ccache from ipaserver to ipapython 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-08 15:33:36 +00:00
Jan Cholasta 4c70590c2a install: Fix external CA server install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-08 15:32:33 +00:00
Jan Cholasta 90e400e57e install: Fix CA-less server install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-08 15:32:33 +00:00
David Kupka 2acedb2d5d Move CA installation code into single module. 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2015-06-08 06:22:54 +00:00
Fraser Tweedale 8b3bc99a73 Import profiles earlier during install 
Currently, IPA certificate profile import happens at end of install.
Certificates issuance during the install process does work but uses
an un-customised caIPAserviceCert profile, resulting in incorrect
subject DNs and missing extensions.  Furthermore, the
caIPAserviceCert profile shipped with Dogtag will eventually be
removed.

Move the import of included certificate profiles to the end of the
cainstance deployment phase, prior to the issuance of DS and HTTP
certificates.

Part of: https://fedorahosted.org/freeipa/ticket/4002

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-05 19:12:46 +02:00
Fraser Tweedale b24fe0eb73 Import included profiles during install or upgrade 
Add a default service profile template as part of FreeIPA and format
and import it as part of installation or upgrade process.

Also remove the code that modifies the old (file-based)
`caIPAserviceCert' profile.

Fixes https://fedorahosted.org/freeipa/ticket/4002

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-04 08:27:33 +00:00
Martin Basti af8f44c86a Installers fix: remove temporal ccache 
Environ variable may be changed outside, so store path into global
variable.

https://fedorahosted.org/freeipa/ticket/5042

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2015-06-02 10:35:22 +00:00
Jan Cholasta 6dabe6ebb2 install: Move ipa-server-install code into a module 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-05-29 08:00:33 +00:00