Pavel Zuna
7d0bd4b895
Rename errors2.py to errors.py. Modify all affected files.
2009-04-23 10:29:14 -04:00
Pavel Zuna
5fa7c76f72
Fix filter generator in ldapapi. Shouldn't produce invalid filters anymore.
2009-04-23 10:23:28 -04:00
Pavel Zuna
32ad0ab011
Throw AlreadyGroupMember instead of EmptyModlist when trying to re-add member to a group.
2009-04-22 15:18:51 -04:00
Pavel Zuna
9943b80841
Change ldap2.__handle_errors into the global _handle_errors function.
2009-04-22 15:17:32 -04:00
Pavel Zuna
58c10898c7
Make it possible to construct partial match filters using make_filter_* methods. Add missing _sasl_auth variable.
2009-04-22 15:17:28 -04:00
Rob Crittenden
cf8ed7b77a
Convert the RA plugin to use nsslib and remove the configure methods
2009-04-20 14:01:24 -04:00
Rob Crittenden
9182c10b03
Issue DS and Apache server certs during CA installation.
...
Notes:
- will create a CA instance (pki-ca) if it doesn't exist
- maintains support for a self-signed CA
- A signing cert is still not created so Firefox autoconfig still won't work
2009-04-20 14:01:00 -04:00
Rob Crittenden
fdf03cb07b
Remove unwanted white space
2009-04-20 13:59:41 -04:00
Rob Crittenden
64fa3dd4c3
Finish work replacing the errors module with errors2
...
Once this is committed we can start the process of renaming errors2 as errors.
I thought that combinig this into one commit would be more difficult to
review.
2009-04-20 13:58:26 -04:00
Rob Crittenden
ab73041174
Renaming the backend ldap plugin to ldapapi.py to prevent module import issues
2009-04-06 13:52:32 -04:00
Pavel Zuna
82bc30d17e
Use full OID for LDAP SYNTAX identification. Don't convert Booleans and Integers into respective python types as their ranges might not match. Rename module-scope functions.
2009-04-06 11:23:25 -04:00
root
dc3547cd7b
Add new LDAP backend plugin.
2009-04-03 14:08:13 -04:00
Rob Crittenden
484eff1016
Implement an installer for the Dogtag certificate system.
...
The CA is currently not automatically installed. You have to pass in the
--ca flag to install it.
What works:
- installation
- unistallation
- cert/ra plugins can issue and retrieve server certs
What doesn't work:
- self-signed CA is still created and issues Apache and DS certs
- dogtag and python-nss not in rpm requires
- requires that CS be in the "pre" install state from pkicreate
2009-04-03 14:06:09 -04:00
Jason Gerard DeRose
a6294ba041
Renamed remaining plugins still using f_* b_* convention
2009-04-01 10:34:57 -04:00
Rob Crittenden
fcfcc76524
Translate variables on all lines and sort files to be updated
...
Only the dn and the first line of any entry that was spread across
multiple lines were getting passed through the template engine.
If we are given a directory to process, sort the files in that directory
so the order can be predicted. Some updates rely on others.
2009-03-25 11:02:59 -04:00
Rob Crittenden
7d19cee7fc
DNA is now configured using an update file
2009-03-25 11:02:55 -04:00
Rob Crittenden
cf09aab18b
Allow a search using only the exact search filter
2009-03-25 11:02:52 -04:00
Rob Crittenden
233a4cb5fd
Raise a more specific error when a user lacks the proper permissions.
...
The info part of the message will contain details on what permission
failed on what attribute.
2009-03-25 11:02:44 -04:00
Rob Crittenden
be0cac932a
Update objectclasses for groups, by default not posix groups.
...
This change depends on DS bugs 487574 and 487725. Groups cannot be
promoted properly without these fixed. It will fail with an
Object Class violation because gidNumber isn't set.
2009-02-27 23:18:19 -05:00
Rob Crittenden
3fdf9abfce
Enforce netgroup uniqueness, allow netgroups to be members of netgroups
...
When adding an entry, convert a constraint violation of "already exists"
into a DuplicateEntry exception so the user gets a useful response
2009-02-27 12:57:21 -05:00
Jason Gerard DeRose
7e23ee7cc6
Removed 'Assert False' that was mistakingly left in cert.py; small cleanup in cert.py and ra.py imports
2009-02-17 16:03:10 -05:00
Jason Gerard DeRose
4ab133c3cb
Implemented more elegant way for entire plugin module to be conditionally skipped; updated cert.py and ra.py modules to use this
2009-02-17 16:03:10 -05:00
Jason Gerard DeRose
e0fe732318
Added env.enable_ra variable and change cert.py and ra.py plugin modules to register plugins conditionally
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
0e6e11d2e3
Cleaned up ra.revoke_certificate() and ra.take_certificate_off_hold(); added more tests in integration.py
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
80df8f6e15
Some cleanup in ra.request_certificate()
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
1518772d75
More work on ra.check_request_status() and ra.get_certificate()
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
97c04c491b
Continued cleanup cert/ra plugins
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
d7a1e61da3
Fixed a few problems in ra.py backend plugin
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
a8c3f054d4
Started cleanup work on ra plugin; fixed problem in api.bootstrap() when process does not have permision to open log file
2009-02-17 16:03:08 -05:00
Jason Gerard DeRose
ad901da259
Renamed b_ra.py plugin module to ra.py
2009-02-17 16:03:08 -05:00
Rob Crittenden
2df3ef411d
Fix AttributeError on python 2.4 when referencing _ldap.dn
2009-02-13 14:12:34 -05:00
Jakub Hrozek
c9311da3fd
Install policy schema
2009-02-13 13:04:49 -05:00
Rob Crittenden
00029a0b38
Remove references to detail. This was used by the v1 exception system
2009-02-11 17:13:54 -05:00
Rob Crittenden
55ba300c7c
Incorporate new schema for IPAv2
...
Loading this via LDIF is a temporary measure until we can load it online.
This requires removing the dNSRecord declarations from 05rfc2247.ldif
so a replacement copy is included for now.
Also add the netgroups container.
2009-02-11 17:13:41 -05:00
Jakub Hrozek
ee87a281b5
Add make_xxx_dn routines for policy
2009-02-10 14:10:35 -05:00
Jakub Hrozek
9fe026b47d
Fix the default search scope
2009-02-10 14:10:12 -05:00
Rob Crittenden
262ff2d731
Rename ipa-python directory to ipapython so it is a real python library
...
We used to install it as ipa, now installing it as ipapython. The rpm
is still ipa-python.
2009-02-09 14:35:15 -05:00
Jakub Hrozek
58ae191a5a
Allow specifying search scope in {ldap,servercore}.search
2009-02-09 13:13:18 -05:00
Rob Crittenden
412104e34c
Remove more unused files and functions, replace ipaerror with new error classes
2009-02-06 15:25:34 -05:00
Rob Crittenden
31866db922
Consolidate all update files into one location
2009-02-06 15:25:27 -05:00
Rob Crittenden
6b34f07720
Remove some duplicated code that was moved to ipaserver and use it Remove some unused files
2009-02-06 15:04:42 -05:00
Jason Gerard DeRose
c5707c235b
Remove depreciated mod_python_xmlrpc.py and test_client files from ipaserver/
2009-02-06 10:14:28 -05:00
Rob Crittenden
2d7e0de5ea
Get merged tree into an installalble state.
...
I have only tested the all, rpms and *clean targets directly.
install may work but the rpm moves a lot of things around for us.
The Apache configuration file isn't in its final state but it works
with the new mod_python configuration.
2009-02-03 15:29:20 -05:00
Jason Gerard DeRose
3274577cd6
Finished small tweaks to get new ipaserver.xmlrpc() mod_python handler working
2009-02-03 15:29:05 -05:00
Jason Gerard DeRose
c2b0c80140
Started work on a much simplified mod_python server
2009-02-03 15:29:05 -05:00
Jason Gerard DeRose
0211c76cd0
Fixed some of the test_xmlrpc unit tests
2009-02-03 15:29:05 -05:00
Rob Crittenden
5717c9d668
Applied Rob's errors patch
2009-02-03 15:29:04 -05:00
Jason Gerard DeRose
48a278047d
Mostly got the test_xmlrpc/ tests working again
2009-02-03 15:29:04 -05:00
Jason Gerard DeRose
83045f0ac8
Removed depreciated ipaserver/context.py module (now use ipalib.request)
2009-02-03 15:29:04 -05:00
Jason Gerard DeRose
a0aebd46a1
Got new ldap connection working using Connectible.connect()
2009-02-03 15:29:04 -05:00
Pavel Zuna
Rob Crittenden
root
Jason Gerard DeRose
Jakub Hrozek