Martin Basti
e151492560
DNSSEC: allow to disable/replace DNSSEC key master
...
This commit allows to replace or disable DNSSEC key master
Replacing DNSSEC master requires to copy kasp.db file manually by user
ipa-dns-install:
--disable-dnssec-master DNSSEC master will be disabled
--dnssec-master --kasp-db=FILE This configure new DNSSEC master server, kasp.db from old server is required for sucessful replacement
--force Skip checks
https://fedorahosted.org/freeipa/ticket/4657
Reviewed-By: Petr Spacek <pspacek@redhat.com >
2015-07-07 08:37:15 +02:00
Martin Basti
b2f0a018b6
Sanitize CA replica install
...
Check if cafile exist first.
https://fedorahosted.org/freeipa/ticket/4468
Reviewed-By: Tomas Babej <tbabej@redhat.com >
2015-06-30 13:41:00 +02:00
Petr Vobornik
dcb6916a3b
fix force-sync, re-initialize of replica and a check for replication agreement existence
...
in other words limit usage of `agreement_dn` method only for manipulation
and search of agreements which are not managed by topology plugin.
For other cases is safer to search for the agreement.
https://fedorahosted.org/freeipa/ticket/5066
Reviewed-By: David Kupka <dkupka@redhat.com >
2015-06-29 17:09:54 +02:00
Simo Sorce
49d708f00f
Replicas cannot define their own master password.
...
Seem like this slipped in during the refactoring of the install tools.
https://fedorahosted.org/freeipa/ticket/4468
Signed-off-by: Simo Sorce <simo@redhat.com >
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
2015-06-24 05:24:58 +00:00
Jan Cholasta
c3a3d789b5
install: Fix ipa-replica-install not installing RA cert
...
https://fedorahosted.org/freeipa/ticket/4468
Reviewed-By: David Kupka <dkupka@redhat.com >
2015-06-18 14:48:31 +02:00
Jan Cholasta
e7ac57e139
vault: Fix ipa-kra-install
...
Use state in LDAP rather than local state to check if KRA is installed.
Use correct log file names.
https://fedorahosted.org/freeipa/ticket/3872
Reviewed-By: David Kupka <dkupka@redhat.com >
2015-06-10 16:17:34 +00:00
Jan Cholasta
cbcd86b500
install: Initialize API early in server and replica install
...
https://fedorahosted.org/freeipa/ticket/4468
Reviewed-By: David Kupka <dkupka@redhat.com >
2015-06-10 16:17:34 +00:00
Jan Cholasta
46cbe26b51
install: Migrate ipa-replica-install to the install framework
...
https://fedorahosted.org/freeipa/ticket/4468
Reviewed-By: David Kupka <dkupka@redhat.com >
2015-06-10 07:29:58 +00:00
Jan Cholasta
eb959221e1
install: Migrate ipa-server-install to the install framework
...
https://fedorahosted.org/freeipa/ticket/4468
Reviewed-By: Martin Basti <mbasti@redhat.com >
2015-06-08 15:34:11 +00:00
Jan Cholasta
e01095dfb3
install: Fix missing variable initialization in replica install
...
https://fedorahosted.org/freeipa/ticket/4468
2015-06-08 06:24:06 +00:00
David Kupka
2acedb2d5d
Move CA installation code into single module.
...
https://fedorahosted.org/freeipa/ticket/4468
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
2015-06-08 06:22:54 +00:00
Jan Cholasta
3cb42e33c0
install: Move ipa-replica-install code into a module
...
https://fedorahosted.org/freeipa/ticket/4468
Reviewed-By: Martin Basti <mbasti@redhat.com >
2015-05-29 08:00:33 +00:00