IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-07-29 15:55:47 -05:00
Code Issues Packages Projects Releases Wiki Activity
14,902 Commits 11 Branches 63 Tags
10676f644b4f84d486b8b2eac19589e08d089211
Commit Graph
88 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jakub Hrozek 42bf7abb5f CLIENT: Explicitly require python-backports-ssl_match_hostname 
Without python-backports-ssl_match_hostname installed, an ipa-client
installation could have failed with:
    from backports.ssl_match_hostname import match_hostname
    ImportError: No module named ssl_match_hostname

This patch adds an explicit dependency to
python-backports-ssl_match_hostname.

https://fedorahosted.org/freeipa/ticket/4515

Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2014-09-02 16:18:13 +02:00
Jakub Hrozek c088c940e6 trusts: combine filters with AND to make sure only the intended domain matches 2013-10-24 07:53:34 +03:00
Jakub Hrozek ec08458b65 EXTDOM: Do not overwrite domain_name for INP_SID 2013-08-29 15:30:38 +02:00
Jakub Hrozek 4a5cbde4bb IPA KDB MS-PAC: remove unused variable 2013-07-23 16:25:26 +03:00
Jakub Hrozek 85b8c747bb IPA KDB MS-PAC: return ENOMEM if allocation fails 2013-07-23 16:25:20 +03:00
Jakub Hrozek 5db5d168d9 Remove unused variable 2013-07-15 15:40:43 +02:00
Jakub Hrozek d73dd4b683 Allow ipa-replica-conncheck and ipa-adtrust-install to read krb5 includedir 
https://fedorahosted.org/freeipa/ticket/3132
 2013-02-18 16:50:28 +01:00
Jakub Hrozek a35d4dcbfd Add the includedir to krb5.conf on upgrades 
https://fedorahosted.org/freeipa/ticket/3132
 2012-12-06 10:54:29 -05:00
Jakub Hrozek b64dc9362d Specify includedir in krb5.conf on new installs 
https://fedorahosted.org/freeipa/ticket/3132
 2012-12-06 10:53:22 -05:00
Jakub Hrozek daa22d4355 ipachangeconf: allow specifying non-default delimeter for options 
https://fedorahosted.org/freeipa/ticket/3132
 2012-12-06 10:53:16 -05:00
Jakub Hrozek 33fb949826 Make enabling the autofs service more robust 2012-11-14 11:02:04 +01:00
Jakub Hrozek 5e79743a0b ipa-client-automount: Add the autofs service if it doesn't exist yet 
https://fedorahosted.org/freeipa/ticket/3201
 2012-10-25 14:27:38 -04:00
Jakub Hrozek 1554c9da68 Remove wrong kpasswd sysconfig 2011-07-21 00:41:50 -04:00
Jakub Hrozek 6e7815a30e Validate NAPTR records 
https://fedorahosted.org/freeipa/ticket/840
 2011-02-22 09:08:11 -05:00
Jakub Hrozek 2e25b2ed27 Make nsslib IPv6 aware 2011-02-21 14:52:25 -05:00
Jakub Hrozek 119b8a4ccf Document --enable-dns-updates in ipa-client-install man page 
https://fedorahosted.org/freeipa/ticket/991
 2011-02-21 11:55:50 -05:00
Jakub Hrozek 18be4ebec3 Better doc for idnssoaminimum 2011-02-18 15:36:07 -05:00
Jakub Hrozek bc8d33307a Use unicode parameters in the host plugin 
https://fedorahosted.org/freeipa/ticket/977
 2011-02-18 10:31:23 -05:00
Jakub Hrozek 817dac3f04 Raise NotImplementedError for selfsigned cert-remove-hold 2011-02-17 17:34:01 -05:00
Jakub Hrozek 36070555d1 Validate and convert certificate SN 
The cert plugin only worked OK with decimal certificate serial numbers.
This patch allows specifying the serial number in hexadecimal, too. The
conversion now works such that:
 * with no explicit radix, a best-effort conversion is done using int(str,
   0) in python. If the format is ambiguous, decimal takes precedence.
 * a hexadecimal radix can be specified explicitly with the traditional
   0x prefix

https://fedorahosted.org/freeipa/ticket/958
https://fedorahosted.org/freeipa/ticket/953
 2011-02-16 22:04:44 -05:00
Jakub Hrozek a9dc175bc5 Validate MX records 
https://fedorahosted.org/freeipa/ticket/967
 2011-02-16 09:56:29 -05:00
Jakub Hrozek 57b36ae65d Note --ip-address parameter of ipa-replica-prepare in man page 
https://fedorahosted.org/freeipa/ticket/615
 2011-02-15 15:42:27 -05:00
Jakub Hrozek 04597f4e36 Remove obsolete record types from DNS 
https://fedorahosted.org/freeipa/ticket/923
 2011-02-14 14:50:57 -05:00
Jakub Hrozek 22c3a681da Fine tuning DNS options 
Add pointer to self to /etc/hosts to avoid chicken/egg problems when
restarting DNS.

On servers set both dns_lookup_realm and dns_lookup_kdc to false so we don't
attempt to do any resolving. Leave it to true on clients.

Set rdns to false on both server and client.

https://fedorahosted.org/freeipa/ticket/931
 2011-02-14 14:45:22 -05:00
Jakub Hrozek 856d890bb3 Make sure only root can run ipa-client-install 
https://fedorahosted.org/freeipa/ticket/957
 2011-02-14 10:43:56 -05:00
Jakub Hrozek 284dd32040 Fix checking for arguments in DNS plugins 
https://fedorahosted.org/freeipa/ticket/956
 2011-02-14 10:21:27 -05:00
Jakub Hrozek b069af3bc9 Fix migration page 2011-02-11 13:28:22 -05:00
Jakub Hrozek bb56285f6b IPv6 enhancements 
* Make host-add, host-del and reverse zone creation IPv6 aware
* Make Bind listen on IPv6 interfaces, too

https://fedorahosted.org/freeipa/ticket/398
 2011-02-02 12:39:35 -05:00
Jakub Hrozek 0dce1bc9e1 Add an address for a nameserver when a new zone is created during install 
https://fedorahosted.org/freeipa/ticket/881
 2011-01-31 22:15:45 -05:00
Jakub Hrozek 18e9b7349c Fix delegation help 2011-01-28 11:44:38 -05:00
Jakub Hrozek a3a154d915 Fix filter_keys in ipa-getkeytab 
https://fedorahosted.org/freeipa/ticket/723
 2011-01-28 11:44:38 -05:00
Jakub Hrozek 92c57946e1 Fix API.txt 2011-01-28 11:44:38 -05:00
Jakub Hrozek 0a6b1c4bce Enforce that all NS records are resolvable 
Bind cannot load a zone if any of its name server records is not
resolvable.

https://fedorahosted.org/freeipa/ticket/838
 2011-01-28 11:44:38 -05:00
Jakub Hrozek 682ca8658a Add example of DNS SRV record and a simple validator 
https://fedorahosted.org/freeipa/ticket/846
 2011-01-28 11:44:38 -05:00
Jakub Hrozek a641f1f23d Delete the whole DNS record with no parameters 
Error out when deleting a nonexistent DNS record

Also fixes the DNS unit tests.

https://fedorahosted.org/freeipa/ticket/816
https://fedorahosted.org/freeipa/ticket/829
 2011-01-28 11:44:38 -05:00
Jakub Hrozek 7a75464a30 host-add should not add a PTR record with --no-reverse 
https://fedorahosted.org/freeipa/ticket/866
 2011-01-28 10:24:41 -05:00
Jakub Hrozek ab2ca8022e Fix assorted bugs found by pylint 2011-01-25 14:01:36 -05:00
Jakub Hrozek 70a9e04f04 Enforce uniqueness on (key,info) pairs in automount keys 
https://fedorahosted.org/freeipa/ticket/293
 2011-01-25 11:13:10 -05:00
Jakub Hrozek 12c67b99e0 Rename DNS2 to DNS 2011-01-14 17:26:48 -05:00
Jakub Hrozek 3711261802 Port installer and host plugin to the new DNS plugin 
* move ipa dns-resolve to the new plugin
* port the installer and the host plugin to the new interface
* remove the old plugin
 2011-01-14 17:26:48 -05:00
Jakub Hrozek f67d3cd32d Use correct option name in host plugin 2011-01-12 17:21:27 -05:00
Jakub Hrozek 404ded0e0a Fixes for the DNS plugin 
https://fedorahosted.org/freeipa/ticket/730
 2011-01-12 17:21:27 -05:00
Jakub Hrozek 9232a47877 Create the reverse zone by default 
A new option to specify reverse zone creation for unattended installs

https://fedorahosted.org/freeipa/ticket/678
 2011-01-07 05:05:54 -05:00
Jakub Hrozek 8a9fdbfb03 Do not use LDAP_DEPRECATED in plugins 
Remove the LDAP_DEPRECATED constant and do not use functions that are
marked as deprecated in recent OpenLDAP releases. Also always define
WITH_{MOZLDAP,OPENLDAP} since there are conditional header includes that
depend on that constant.

https://fedorahosted.org/freeipa/ticket/576
 2011-01-07 05:00:44 -05:00
Jakub Hrozek 5747568e5d Ask for reverse zone creation only when --setup-bind is specified 2010-12-22 11:37:12 -05:00
Jakub Hrozek ad25fc07a0 Do not require DNS record, just warn if one is missing 2010-12-21 17:54:19 -05:00
Jakub Hrozek 7493d781df Change FreeIPA license to GPLv3+ 
The changes include:
 * Change license blobs in source files to mention GPLv3+ not GPLv2 only
 * Add GPLv3+ license text
 * Package COPYING not LICENSE as the license blobs (even the old ones)
   mention COPYING specifically, it is also more common, I think

 https://fedorahosted.org/freeipa/ticket/239
 2010-12-20 17:19:53 -05:00
Jakub Hrozek ffc6031ad7 Allow RDN changes from CLI 
https://fedorahosted.org/freeipa/ticket/397
 2010-12-20 11:27:46 -05:00
Jakub Hrozek bf778a74a3 Clarify ipa-replica-install error message 2010-12-20 11:27:42 -05:00
Jakub Hrozek 1317cf4966 Check the number of fields when importing automount maps 
https://fedorahosted.org/freeipa/ticket/359
 2010-12-20 11:27:38 -05:00
Jakub Hrozek ee4d2739f1 Make the IPA installer IPv6 friendly 
Notable changes include:
 * parse AAAA records in dnsclient
 * also ask for AAAA records when verifying FQDN
 * do not use functions that are not IPv6 aware - notably socket.gethostbyname()
   The complete list of functions was taken from http://www.akkadia.org/drepper/userapi-ipv6.html
   section "Interface Checklist"
 2010-12-20 11:27:34 -05:00
Jakub Hrozek d7d77a749c import NSPRError in host.py 2010-12-20 10:46:37 -05:00
Jakub Hrozek 409e4062f4 Allow renaming of object that have a parent 
Allow renaming of object that have a parent
 2010-12-20 10:44:10 -05:00
Jakub Hrozek 7aed107973 Make pkey always iterable when deleting 2010-12-20 10:42:33 -05:00
Jakub Hrozek 0e6962f710 Fix delegation.ldif typo 2010-12-20 10:41:25 -05:00
Jakub Hrozek 9e5fdcb3a4 Fix kwargs usage in automount plugin 
https://fedorahosted.org/freeipa/ticket/580
 2010-12-07 17:17:23 -05:00
Jakub Hrozek 4c75495b3d Do not migrate krbPrincipalKey 
https://fedorahosted.org/freeipa/ticket/455
 2010-12-07 10:37:26 -05:00
Jakub Hrozek 1c3aa1f2c8 Make the migration plugin more configurable 
This patch adds new options to the migration plugin:
 * the option to fine-tune the objectclass of users or groups being imported
 * the option to select the LDAP schema (RFC2307 or RFC2307bis)

Also makes the logic that decides whether an entry is a nested group or user
(for RFC2307bis) smarter by looking at the DNS. Does not hardcode primary keys
for migrated entries.

https://fedorahosted.org/freeipa/ticket/429
 2010-12-07 10:37:17 -05:00
Jakub Hrozek 88188cbb20 Do not create reverse zone by default 
Prompt for creation of reverse zone, with the default for unattended
installations being False.

https://fedorahosted.org/freeipa/ticket/418
 2010-12-02 16:46:02 -05:00
Jakub Hrozek 55479e4512 Normalize and convert default params, too 
https://fedorahosted.org/freeipa/ticket/555
 2010-12-02 16:06:13 -05:00
Jakub Hrozek df28017eaf Init smods to prevent crash if encode_keys fails 2010-11-29 17:21:17 -05:00
Jakub Hrozek 960fc66447 ipa-client code cleanup 
Fixes errors about implicit function declaration and moves duplicated
gettext code into a common module. Also silences some warnings.

Signed-off-by: Simo Sorce <ssorce@redhat.com>
 2010-11-22 16:01:35 -05:00
Jakub Hrozek 7086c9e863 Silence compilation warnings in SLAPI plugins 
Signed-off-by: Simo Sorce <ssorce@redhat.com>
 2010-11-22 16:01:35 -05:00
Jakub Hrozek 110397f059 Don't use deprecated ldap_bind_s 
ldap_bind_s is marked as deprecated in new libldap releases.

Signed-off-by: Simo Sorce <ssorce@redhat.com>
 2010-11-22 16:01:35 -05:00
Jakub Hrozek 3b7a86024b Use internal implementation of internal Kerberos functions 
Don't use KRB5_PRIVATE.

The patch implements and uses the following krb5 functions that are
otherwise private in recent MIT Kerberos releases:
 * krb5_principal2salt_norealm
 * krb5_free_ktypes

Signed-off-by: Simo Sorce <ssorce@redhat.com>
 2010-11-22 16:01:35 -05:00
Jakub Hrozek ce75d1c6d6 Stricter compilation flags 
Use a little stricter compilation flags, in particular -Wall and treat
implicit function declarations as errors.

Signed-off-by: Simo Sorce <ssorce@redhat.com>
 2010-11-22 16:01:35 -05:00
Jakub Hrozek 5da451876e Common include file for SLAPI plugin logging 
Consolidate the common logging macros into common/util.h and use them
in SLAPI plugins instead of calling slapi_log_error() directly.

https://fedorahosted.org/freeipa/ticket/408

Signed-off-by: Simo Sorce <ssorce@redhat.com>
 2010-11-22 16:01:35 -05:00
Jakub Hrozek 57e1edd052 Use sys.exit to quit scripts 
Instead of print and return, use sys.exit() to quit scripts with an
error message and a non zero return code.

https://fedorahosted.org/freeipa/ticket/425
 2010-11-22 09:51:07 -05:00
Jakub Hrozek 3682a1c385 Improve the documentation of setattr/addattr 
https://fedorahosted.org/freeipa/ticket/245
 2010-11-19 13:54:27 -05:00
Jakub Hrozek d9dd838014 Log interactive options in install scripts 2010-11-19 13:53:09 -05:00
Jakub Hrozek 6a9846f3f3 Set CACERTDIR during install to work around openldap bug 
Even though ldap.conf(5) claims that LDAPTLS_CACERT takes precedence over
LDAPTLS_CACERTDIR, this seems to be broken in F14. This patch works around
the issue by setting both into the environment.

https://fedorahosted.org/freeipa/ticket/467
 2010-11-11 08:53:15 -05:00
Jakub Hrozek e1888f82c4 Remove some more mod_python references 2010-11-10 17:38:17 -05:00
Jakub Hrozek 594adb9877 Log script options to logfile 
Uses a new subclass IPAOptionParser in scripts instead of OptionParser
from the standard python library. IPAOptionParser uses its own IPAOption
class to store options, which adds a new 'sensitive' attribute.

https://fedorahosted.org/freeipa/ticket/393
 2010-11-09 13:28:10 -05:00
Jakub Hrozek 2205620664 Rewrite the migration page using WSGI 2010-11-09 13:25:17 -05:00
Jakub Hrozek a874d5f8e5 Clarify the description of --raw and -all 
https://fedorahosted.org/freeipa/ticket/244
 2010-11-08 15:23:03 -05:00
Jakub Hrozek 228b0ea656 Remove extra --prompt-all from ipa(1) man page 
http://fedorahosted.org/freeipa/ticket/328
 2010-10-29 14:45:50 -04:00
Jakub Hrozek 6dae08868f Add missing buildrequires 2009-02-23 15:41:06 -05:00
Jakub Hrozek c9311da3fd Install policy schema 2009-02-13 13:04:49 -05:00
Jakub Hrozek d1386758fa Add tests for the application frontend plugin 2009-02-10 14:11:21 -05:00
Jakub Hrozek 079f89d461 Add application frontend plugin 2009-02-10 14:10:54 -05:00
Jakub Hrozek 328f8d0bf8 Add policy-related container constants 2009-02-10 14:10:45 -05:00
Jakub Hrozek ee87a281b5 Add make_xxx_dn routines for policy 2009-02-10 14:10:35 -05:00
Jakub Hrozek 9fe026b47d Fix the default search scope 2009-02-10 14:10:12 -05:00
Jakub Hrozek 58ae191a5a Allow specifying search scope in {ldap,servercore}.search 2009-02-09 13:13:18 -05:00
Jakub Hrozek 1d1a44bd70 Fix typo in b_ra: elf.ca_port -> self.ca_port 2009-01-12 19:32:59 +01:00
Jakub Hrozek 360f95341a Fix show_api command 2008-12-17 17:21:25 -07:00
Jakub Hrozek f0bbe1b5a0 Add body for the NameSpaceError exception 2008-12-17 17:17:02 -07:00
Jakub Hrozek 67b688c7b2 Jakub Hrozek's patch to make textui.get_tty_width() actually work 2008-12-16 19:00:39 -07:00