Commit Graph
46 Commits
Author SHA1 Message Date
Simo Sorce b3b4435d0e One line fix for ipa-server spec file 2008-12-03 11:17:51 -05:00
Simo Sorce e0e784f77f Add man page for ipa-compat-manage 2008-12-02 16:39:57 -05:00
Rich Megginson 2a2bc851bd The library name is libipa_winsync not libipa-winsync 2008-10-13 14:09:06 -04:00
Rich Megginson 6454956d51 Added the new IPA WinSync Plug-in Work done so far * added the new plugin to makefiles, spec file * added stubs for the api, including begin update, end update, and destroy callbacks * added config code to allow dynamic dse config changes and auto-discovery of realm and new user objectclass list 2008-10-13 14:09:03 -04:00
Martin Nagy 8683c23e9d Restart httpd and dirsrv services after yum upgrade.
Fixes: 441566
2008-09-17 23:06:33 +02:00
Rob Crittenden 88960f1597 Sort updates by DN length and by default process all files in the updates dir.
The updates directory is currently hardcoded to /usr/share/ipa/updates.

All of the files are read into memory and then sorted by the length of the DN.
This is so we can be sure that parent entries are added before children.

Also add a man page.
2008-09-12 20:07:48 -04:00
Rob Crittenden 1eec34393b Update files for the schema compatibility plugin and RFC4876 profiles
Also handle syntax errors a bit more gracefully and allow the updater to
work on more than one file at a time.

Adjust to new config.py and use a custom exception class for syntax errors.

Also fix a error in parsing the separate files

Include slapi-nis in Requires

Includes work provided by Martin Nagy

460055
2008-09-12 20:07:41 -04:00
Rob Crittenden ec57bc3e44 Tool for doing configuration updates over LDAP
This tool takes as input a file which contains basically an LDIF, prefixed
with a command: default, add, remove or only. These define the operations
to perform such as adding new entries, adding new sub-entries to an existing
entry, adding or modifying attributes in a record.

If an index entry is modified a task is created to re-create the index.

Schema may be added using this tool.

454031
2008-09-12 20:06:46 -04:00
Simo Sorce 57669ba432 Add script to simplify operations to fix CVE 2008 3274
Import all of change master key directly into the help fix,
allows for better control
2008-09-10 15:07:42 -04:00
Simo Sorce cee4b2cc1e Fix usage of mozldap libraries,
thanks to W. Michael Petullo <mike@flyn.org> for finding the problem.
2008-08-13 15:57:43 -04:00
Simo Sorce 9648da8f5f Fix versioning for configure.ac and ipa-python/setup.py
Fix make maintainer-clean

Also make RPM naming consistent by using a temp RELEASE file.
This one helps when testing builds using rpms.
Just 'echo X > RELEASE' to build a new rpms (X, X+1, X+2 ...)

Version 1.1.0 was released some times ago, bump up to 1.1.1
2008-08-11 18:31:05 -04:00
Rob Crittenden 9f2ee29218 Specify --mandir to configure to fix building on CentOS 5.2
456672
2008-07-28 09:53:38 -04:00
Rob Crittenden a19d27717a Move the self-signed CA serialno file to /var/lib/ipa to adhere to the FHS
455064
2008-07-25 09:05:14 -04:00
Simo Sorce 8fb4809465 Use openldap libraries by default as mozldap libs seem to break
ldap_extended_operation() somehow and ipa_kpasswd stops working
2008-05-29 09:43:28 -04:00
Simo Sorce 0695649926 Don't make the rpm %post fail just because the server has never been
configured before (and therefore there is nothing to upgrade, just let
it spit out warnings for admins that actually check whats going on.
2008-05-22 17:20:09 -04:00
Rob Crittenden 8e7561cff6 Refine our web space some more so that everything we reference is in /ipa
UI: /ipa/ui
XML-RPC: /ipa/xml
errors: /ipa/errors
config: /ipa/config

I had to hardcode that URI into the CSS pages but TurboGears handles the
rest of the translations with tg.url().

Added a version to ipa.conf and ipa-rewrite.conf so we can update them
in the future if needed with ipa-upgradeconfig

440443
2008-05-07 09:41:32 -04:00
Rob Crittenden def28f3d5b Become version 1.0.0 2008-04-16 14:29:17 -07:00
Rob Crittenden f88f9f3cc0 Add (post) to Requires: ipa-server-spec 2008-04-07 23:45:00 -04:00
Rob Crittenden 039581d1ed Some SELinux policy changes provided by Dan Walsh.
440651
2008-04-07 23:38:51 -04:00
Simo Sorce 1083207dca Make sure we have ipa-client installed as now ipa-server-install calls
ipa-client-install
2008-04-02 12:36:25 -04:00
Simo Sorce c260d63245 Move ipa_kpasswd credential cache in its own directory 2008-04-01 17:33:53 -04:00
Simo Sorce aac086582a Move sysrestore to ipa-python so it can be used by client scripts too.
Change backup format so files are all in a single directory (no dir
hierarchies) and use an index file so we can save also ownership and
permission info for the restore (and eventually other data later on).
2008-03-27 19:01:38 -04:00
Rob Crittenden 5f72955bca Add some missing man pages
436501
2008-03-17 18:04:49 -04:00
Rob Crittenden cc3b9cddef Add small script to start/stop all of the services that IPA requires in the
proper order.

435026
2008-02-28 11:37:06 -05:00
Rob Crittenden 49148dc34a Redirect users when they don't use the FQDN on both SSL and non-SSL ports
We update the mod_nss configuration (nss.conf) during installation to include
ipa-rewrite.conf to handle the SSL side.

433054
2008-02-21 16:25:09 -05:00
Rob Crittenden 84d1e08d76 Become freeipa-0.99.0 2008-02-21 16:11:42 -05:00
Rob Crittenden 3ad8a2bd1b Import internationalization for kid templates patch from Masato Taruishi 2008-02-19 22:45:11 -05:00
Rob Crittenden 1aa8729644 Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 11:09:06 -05:00
Rob Crittenden 0e3ecf6270 Marked with wrong license. IPA is GPLv2. 2008-01-31 16:49:01 -05:00
Rob Crittenden 1b988fff82 Ensure that the ipa_webgui error log exists and has correct permissions.
Resolves 431089
2008-01-31 14:21:07 -05:00
Rob Crittenden d73dd8b427 Put user-modifiable files into /etc/ipa/html so they can be marked as
config(noreplace).
Resolves 430004
2008-01-30 09:58:15 -05:00
Rob Crittenden 6bf366fc9a Missed one replacement of pyasn1 -> python-pyasn1 2008-01-24 14:54:41 -05:00
Rob Crittenden 00e20c2003 Use Fedora package names for PyKerberos (python-kerberos) and pyasn1
(python-pyasn1) for the specfile Requires.
2008-01-24 13:44:38 -05:00
Rob Crittenden 3302dc7446 Enable server-side sessions. It is currently using files for sessions. 2008-01-23 09:45:46 -05:00
Rob Crittenden 042fb11fa1 Fix issues reported by rpmlint.
- Removing shebangs (#!) from a bunch of python libraries
- Don't use a variable name in init scripts for the lock file
- Keep the init script name consistent with the binary name, so renamed
  ipa-kpasswd.init to ipa_kpasswd.init
- Add status option to the init scripts
- Move most python scripts out of /usr/share/ipa and into the python
  site-packages directories (ipaserver and ipaclient)
- Remove unnecessary sys.path.append("/usr/share/ipa")
- Fix the license string in the spec files
- Rename ipa-webgui to ipa_webgui everywhere
- Fix a couple of issues reported by pychecker in ipa-python
2008-01-18 16:20:36 -05:00
Rob Crittenden c7f3c746cc Backup system state in ipa-server-install
This patch adds a sysrestore module which allows ipa-server-install
code to backup any system state so that it can be restored again
with e.g. ipa-server-install --uninstall.

The idea is that any files ipa-server-install modifies gets backed
up to /var/cache/ipa/sysrestore/ while any "meta" state, like
whether a service is enabled with chkconfig, is saved to
/var/cache/ipa/sysrestore.state.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-01-14 12:43:26 -05:00
Karl MacMillan 19bdd1f166 - Enable ssl for replication.
- Add replication management script that allows listing
  adding, and deleting replicas.
-
Karl MacMillan 84c758153f Remove ipa-keytab-util since it is superceded by the DS plugin. -
Karl MacMillan c761409490 Update versions for release. -
Karl MacMillan 913201a919 Fix spec file to grab certinstall. -
Karl MacMillan cf595511ff Move radius server components into a separate package. -
Simo Sorce 87bc5c4d63 Handle add/removing and stopping restarting daemons in update/remove 2007-12-12 13:58:55 -05:00
Karl MacMillan f07cd5a5ad Update build requires for libcap. -
Karl MacMillan a174d6d6e6 Fix mode on ipa-keytab-util. -
Karl MacMillan 61258a645c Add ipa-keytab-util to spec. -
Karl MacMillan 9038bf71dd Move packages to ipa from freeipa. -