Commit Graph

13666 Commits

Author SHA1 Message Date
Alexander Bokovoy
1a0232a693 po: update French translation
Several translated strings were splitted and old translations do not
apply directly anymore.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Alexander Bokovoy
e6574914ad po: update Basque translation timestamp
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Alexander Bokovoy
2859216b4c po: update Spanish translation
Several translated strings were splitted and old translations do not
apply directly anymore.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Alexander Bokovoy
439c488f04 po: update English (United Kingdom) translation timestamp
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Alexander Bokovoy
117893f03e po: update German translation
Several translated strings were splitted into smaller ones. The older
translation either is a duplicate of the new one or does not apply
anymore.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Alexander Bokovoy
68cc049124 po: update Czech translation timestamp
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Alexander Bokovoy
6cd244da6b po: update Catalan translation timestamp
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Alexander Bokovoy
0be22a6ae7 po: update Bengali translation timestamp
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Alexander Bokovoy
3fc932a2a8 po: update ipa.pot template
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Alexander Bokovoy
b4722f3917 Update translation infrastructure
1. Build po/ipa.pot every time we update PO files (each build)

2. Drop any rebuilt PO changes if the only difference is in the
   translation file's header in a timestamp or timestamp+bug report
   link.

3. Only apply the logic for dropping the changes if we are operating on
   a git tree checkout because there is no otherwise an easy way to
   detect the changes.

4. Hook strip-po target to the cleanup target to allow dropping unneeded
   translation changes automatically.

5. Finally, strip ipaclient/remote_plugins/* locations from the ipa.pot
   template. This saves us around 23,000 lines from the ipa.pot file and
   reduces visual clutter in the translation files.

This approach allows to avoid unneccesary commits because even when
there are no changes to translation files, po/ipa.pot header would be
updated with a new translation update timestamp.

Fixes: https://pagure.io/freeipa/issue/8159
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Alexander Bokovoy
92e36258ce Keep ipa.pot translation file in git for weblate
Weblate tool sends pull requests that update translations directly.
For this to work, we need to keep ipa.pot in the tree.

Fixes: https://pagure.io/freeipa/issue/8159
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-24 13:40:06 +01:00
Christian Heimes
e8602b1586 Add pytest OpenSSH transport with password
The pytest_multihost transport does not provide password-based
authentication for OpenSSH transport. The OpenSSH command line tool has
no API to pass in a password securely.

The patch implements a custom transport that uses sshpass hack. It is
not recommended for production but good enough for testing.

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2020-03-24 10:22:18 +02:00
Sergey Orlov
9e47799cc7 ipatests: remove test_ordering
The test_integration/test_ordering.py is a test for pytest_sourceorder
plugin which is not part of freeipa project, it is not an integration test.

The up to date version of this test is available at project repository:
https://pagure.io/python-pytest-sourceorder/blob/master/f/test_sourceorder.py

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2020-03-24 10:20:39 +02:00
Serhii Tsymbaliuk
99a62f29b2 Web UI: Upgrade Bootstrap version 3.3.7 -> 3.4.1
Ticket: https://pagure.io/freeipa/issue/8239

Signed-off-by: Serhii Tsymbaliuk <stsymbal@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2020-03-24 10:19:13 +02:00
Vit Mojzis
3aad16a75e selinux: disable ipa_custodia when installing custom policy
Since ipa_custodia got integrated into ipa policy package, the upstream policy
module needs to be disabled before ipa module installation (in order to be able
to make changes to the ipa_custodia policy definitions).
Upstream ipa module gets overridden automatically because of higher priority of
the custom module, but there is no mechanism to automatically disable
ipa_custodia.

Related: https://pagure.io/freeipa/issue/6891
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2020-03-24 10:17:14 +02:00
Rob Crittenden
4a3b7baed7 Test that ipa-healthcheck human output translates error strings
The code rather than the string was being displayed in human
output for non-SUCCESS messages. Verify that in case of an error
the right output will be present.

https://bugzilla.redhat.com/show_bug.cgi?id=1752849

Reviewed-By: Mohammad Rizwan Yusuf <myusuf@redhat.com>
Reviewed-By: Sumedh Sidhaye <ssidhaye@redhat.com>
Reviewed-By: Stanislav Levin <slev@altlinux.org>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
2020-03-21 09:36:40 +01:00
Alexander Bokovoy
452ef8cc76 Do not force any particular sphinx theme
This allows ReadTheDocs to use own theme.

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-03-21 08:10:31 +02:00
Alexander Bokovoy
34b961dc20 Override master document for ReadTheDocs
ReadTheDocs.org engine assumes master document is 'contents.rst', we use
'index.rst'. Specify the master document explicitly.

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-03-21 08:04:45 +02:00
Alexander Bokovoy
c6a379c432 Move workshop documents to doc/workshop
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-03-21 07:57:06 +02:00
Christian Heimes
9f2553c64f Add explicit syntax language to code blocks
m2r converts code blocks into ReST code blocks with syntax highlighting.
Auto-detection of the language does not work correctly, though.
Explicitly set the language for console, ini, and Python blocks.

Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-by: Alexander Bokovoy <abokovoy@redhat.com>
2020-03-21 07:42:20 +02:00
Christian Heimes
a9a225d715 Use m2r instead of recommonmark
recommonmark does not support markdown tables.

Signed-off-by: Christian Heimes <cheimes@redhat.com>
2020-03-21 07:40:34 +02:00
Christian Heimes
145afd68e5 Include workshop in sphinx build 2020-03-21 07:40:34 +02:00
Christian Heimes
c4a55522ee Fix codestyle 2020-03-21 07:40:34 +02:00
Alexander Bokovoy
acfe34e25b Add unit 11: Kerberos ticket policy
Kerberos ticket policy unit describes ways of control of Kerberos
tickets in FreeIPA with the help of ticket policies.
2020-03-21 07:40:34 +02:00
Sam Bristow
265d064bf8 Workaround networking issues with Libvirt
Vagrant 2.2 on Fedora 30 enables QEMU Session by default [1] which causes
problems with setting up the private network.

Explicitly telling Vagrant not to use the QEMU session if we're running on
Libvirt is the suggested workaround for now.

[1] https://fedoraproject.org/wiki/Changes/Vagrant_2.2_with_QEMU_Session
2020-03-21 07:40:34 +02:00
François Cami
3bd27cfe9d 8-sudorule.rst: add sudo and su-l as services for bob's HBAC rule.
Add a note about the behavior change of passwordless sudo
in sudo 1.8.23 and newer.
2020-03-21 07:40:34 +02:00
Thorsten Scherf
416d87b9bd Corrected some typos and added improvements to some setup instructions 2020-03-21 07:40:34 +02:00
Fraser Tweedale
8ff19cdb2c add resources section 2020-03-21 07:40:34 +02:00
Fraser Tweedale
a2f3088a21 typospotting 2020-03-21 07:40:34 +02:00
Fraser Tweedale
8e0d4bccce suggest ipa help topics 2020-03-21 07:40:34 +02:00
Fraser Tweedale
3a0f8a114b lots of minor tweaks and updates 2020-03-21 07:40:34 +02:00
Fraser Tweedale
0678ed5649 rename certificates module 2020-03-21 07:40:34 +02:00
Fraser Tweedale
345850eb6c Vagrantfile: set DNS configuration in network-scripts
The Vagrantfile puts the server's address in /etc/resolv.conf but
this configuration will not survive a reboot or network restart.
Add configuration to /etc/sysconfig/network-scripts/ to ensure the
correct resolver is always used.
2020-03-21 07:40:34 +02:00
Fraser Tweedale
bc1c5a84bd add more prerequisites and fix some links 2020-03-21 07:40:34 +02:00
Fraser Tweedale
66ff3675c8 add inter-module links 2020-03-21 07:40:34 +02:00
Fraser Tweedale
b6c50da059 split workshop into separate files 2020-03-21 07:40:34 +02:00
Armando Neto
33cd0bb625 Update instructions for Fedora 28 / FreeIPA 4.6.90 2020-03-21 07:40:34 +02:00
Thorsten Scherf
c14042dc32 Module added about ssh pubkey management 2020-03-21 07:40:34 +02:00
Fraser Tweedale
a097485eb1 add sudorule and selinux units to TOC 2020-03-21 07:40:34 +02:00
Fraser Tweedale
7a6b914747 add selinuxusermap unit 2020-03-21 07:40:34 +02:00
Fraser Tweedale
d14dc29400 add sudorule unit 2020-03-21 07:40:34 +02:00
Fraser Tweedale
0f7a460fea minor editoral improvements 2020-03-21 07:40:34 +02:00
Fraser Tweedale
77eea67705 Change workshop "Modules" to "Units"
Because the term "module" is used in various parts of the curriculum
in a technical context, for clarity refer to the sections of the
curriculum as "units" instead.
2020-03-21 07:40:34 +02:00
Fraser Tweedale
44b6c2bedc prep: updates for f24, box version 0.0.7 2020-03-21 07:40:34 +02:00
Fraser Tweedale
3be3ca97f6 certs: request SAN DNS name 2020-03-21 07:40:34 +02:00
Fraser Tweedale
6548929189 updates for FreeIPA 4.3 2020-03-21 07:40:34 +02:00
Ariel O. Barria
2f9c9c8757 vagrant user does not have permission to write to /etc/resolv.conf
detect through DNS autodiscovery.
2020-03-21 07:40:34 +02:00
Robert Collins
681f8ae5a4 Note sss_cache -E. 2020-03-21 07:40:34 +02:00
Fraser Tweedale
18c0ef421b typospotting 2020-03-21 07:40:34 +02:00
Thorsten Scherf
7f187146c7 Added bash-completion rpm to build instructions. 2020-03-21 07:40:34 +02:00