- Nov 21, 2018
-
-
Thomas Woerner authored
The api command to get the server config is failing with more recent freeipa versions. Therefore another way to gather the server config using api.Backend.rpcclient.forward has been added in case the first version fails. The new code is from freeipa commit 8af6accfa5734a7e9a7c92fcf38d5440482413d4 (https://github.com/freeipa/freeipa/commit/8af6accf)
-
- Jul 23, 2018
-
-
Thomas Woerner authored
This is a partly pick of the changes done by pyguy for pull request #28. The unrelated changed on inventory files have been removed and the change to the README has been adapted to use the "Supported Distributions" section. The original commits by pyguy in https://github.com/pyguy/ansible-freeipa are: commit 1ed1fa845eafd69432b1fd1fc8e5329e4991e84a Author: pyguy <hr.josheghani@gmail.com> Date: Mon Jun 25 17:17:31 2018 +0430 Ubuntu Support added commit 9a4a7c84e4af20af27e814aba4fc2c6b8b35ec0f Author: pyguy <hr.josheghani@gmail.com> Date: Sun Jun 24 10:58:07 2018 +0430 Ubuntu support added
-
- Jul 19, 2018
-
-
Thomas Woerner authored
There is a pull request and also a proposal for ansible be able to limit the number of concurrent executions for a single task: - https://github.com/ansible/proposals/issues/129 - https://github.com/ansible/ansible/pull/42528 The keyword is currently named max_concurrent, but might be renamed later on. If the keyword is present, but not supported by ansible, it will be simply ignored. Therefore there is no issue right now with adding in here early.
-
Thomas Woerner authored
The ipaclient role is now used instead of ipa-client-install.
-
Thomas Woerner authored
-
Thomas Woerner authored
This is needed to use ipaclient in ipareplica for client deployment.
-
Thomas Woerner authored
This is done in IPAChangeConf.changeConf and IPAChangeConf.newConf
-
Thomas Woerner authored
Set default_domain if not ipadiscovery.dnsok or not ipadiscovery.kdc like it is done in ipa-client-install.
-
Thomas Woerner authored
These roles will most likely not work in the common case. Therefore the roles have been renamed. The ipa-krpb5 role is used by ipcalient, but the ipa-sssd role is currently not used.
-
- Jul 17, 2018
-
-
Thomas Woerner authored
custodiainstance.import_dm_password does not support master_host_name post 4.6.90 anymore. A new inspect call has been added to verify if the arg is supported or not.
-
- Jul 09, 2018
-
-
Thomas Woerner authored
-
Thomas Woerner authored
custodia needs to be used here with newer IPA versions (introduced with 4.6.4). With this master_host_name does is not supplied to custodia.import_dm_password as an arguemtn anymore.
-
Thomas Woerner authored
The use of IPA versions to determine if get_custodia_instance should be used was not optimal as the patch that introduced this has been back-ported to the EL-7 package with verion 4.5.4. As get_custodia_instance was not available before we can simply check if get_custodia_instance exists in custodiainstance.
-
Thomas Woerner authored
Tee message for a domain and realm name mismatch should be a warning and not a fail in the ipaserver test. It is also a warning in the normal installer.
-
Thomas Woerner authored
The use of IPA versions to determine if get_custodia_instance should be used was not optimal as the patch that introduced this has been back-ported to the EL-7 package with verion 4.5.4. As get_custodia_instance was not available before we can simply check if get_custodia_instance exists in custodiainstance.
-
Thomas Woerner authored
-
Thomas Woerner authored
-
Thomas Woerner authored
Lowered Version for Setup CA | Tested on CentOS 7.5
-
Thomas Woerner authored
CentOS 7 Compatibility
-
- Jul 07, 2018
-
-
Siva Paramasivam authored
-
Siva Paramasivam authored
-
Siva Paramasivam authored
Lowered version check to be compatible with CentOS 7.5 Added missing attributes to setup_kra to be compatible with latest python2-ipaserver librarty on CentOS 7.5 (python2-ipaserver-4.5.4-10.el7.centos.3.noarch)
-
- Jul 05, 2018
-
-
dihmandrake authored
Signed-off-by:
dihmandrake <jasper.bernhardt@live.de>
-
- Jun 28, 2018
-
-
Thomas Woerner authored
-
Thomas Woerner authored
The paths.GETENT compat check was using "KDESTROY" instead of "GETENT".
-
Thomas Woerner authored
-
Thomas Woerner authored
-
Thomas Woerner authored
ipadiscovery.py - fix typo of timconf to timeconf
-
- Jun 27, 2018
-
-
Ian Tewksbury authored
-
- Jun 25, 2018
-
-
Thomas Woerner authored
-
Thomas Woerner authored
A new Fedora-27 ditribution specific file has been added. Additionally ipareplica_packages_adtrust has been updated in all files to contain [free]ipa-server-trust-ad.
-
Thomas Woerner authored
A new Fedora-27 ditribution specific file has been added. Additionally ipaserver_packages_adtrust has been updated in all files to contain [free]ipa-server-trust-ad.
-
Thomas Woerner authored
The new section contains RHEL/CentOS 7.4+ and Fedora26+ for now.
-
- Jun 21, 2018
-
-
Thomas Woerner authored
With IPA 4.7 bigger changes have been introduced Changes: - Use of timeconf and chrony instead of ntpconf and ntpd. - custodia instance needed for ca and kra - Use of create_ipa_conf with changed setting in setup_http for install_http, reverted back afterwards.
-
Thomas Woerner authored
Affected files: - ipareplica/library/ipaserver_enable_ipa.py - ipareplica/library/ipaserver_master_password.py - ipareplica/library/ipaserver_setup_ntp.py
-
Thomas Woerner authored
The _pkinit_pkcs12_info var seems not to be needed for now. Will be removed in a following cleanup.
-
Thomas Woerner authored
The python3 bindings should be required and not the python2 bindings as a default.
-
Thomas Woerner authored
Affected files: - ipaserver/library/ipaserver_enable_ipa.py - ipaserver/library/ipaserver_master_password.py
-
Thomas Woerner authored
With IPA 4.7 bigger changes have been introduced Changes: - Use of timeconf and chrony instead of ntpconf and ntpd. - New IPAChangeConf (not used in ipaserver modules) - New check_ldap_conf form ipaclient.install.client - custodia instance needed for ca and kra - no_ntp defaults to yes for client installation part - A new option ntp_pool has been introduced (set to None).
-
Thomas Woerner authored
The python3 bindings should be required and not the python2 bindings as a default.
-