IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-09-03 20:52:56 -05:00
Code Issues Packages Projects Releases Wiki Activity
510 Commits 11 Branches 63 Tags
2675f35fdf3121dd23658e4ea89e1600291d2b70
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Rob Crittenden 2675f35fdf Tie the logging module to 'PythonOption IPADebug' in /etc/httpd/conf.d/ipa.conf 2007-12-11 09:56:37 -05:00
Rob Crittenden 40ff6f21db Prompt user before downloading a keytab that this will create a new secret, 
breaking any existing keytabs for that principal.
 2007-12-06 11:56:14 -05:00
Rob Crittenden 592329af18 Use more common names for first and last name labels 2007-12-10 11:55:52 -05:00
Rob Crittenden ca8e71d938 Move the sort arrow to the left of the column title and don't overlap the text 2007-12-10 21:55:12 -05:00
Rob Crittenden f169641aae Use title case for field labels 2007-12-10 17:44:04 -05:00
Rob Crittenden 00489597d8 Rework input validation to more closely match what we require in the UI 2007-12-07 17:07:03 -05:00
Rob Crittenden 5e4a162954 Fix delegation in the UI and add a missing aci that allows writes. 
Make ipa-deldelegation more user-friendly.
 2007-12-07 16:08:12 -05:00
Rob Crittenden 0c0cc370cf Fix spelling 2007-12-10 15:01:30 -05:00
Rob Crittenden b75d735b7e Add default e-mail domain to the IPA configuration 2007-12-10 11:53:00 -05:00
Rob Crittenden c95550a164 Remove some debugging statements 2007-12-10 11:54:42 -05:00
Rob Crittenden 059e8f00ef Add principal management templates 2007-12-10 09:58:18 -05:00
Rob Crittenden 299e457698 Convert krbmaxpwdlife and krbminpwdlife from seconds into days and hours 2007-12-03 18:07:47 -05:00
Rob Crittenden 03fe2a8d6a Increase default max password lifetime from 10 to 90 days 2007-12-03 18:09:14 -05:00
Rob Crittenden 2e7f629d91 Remove unnecessary attribute left over from testing 2007-11-26 20:34:59 -05:00
Rob Crittenden 50c383aeed Update text to reflect new CSS code (sidebar now on right) 2007-11-06 10:22:47 -05:00
Rob Crittenden b3fa02225a Add back in some CSS that was removed in the big UI update. 
This adds back required field colors and colored error and warning msgs.
 2007-12-05 16:15:52 -05:00
rcritten@redhat.com c32a960cae Compatibility changes to work on RHEL 5 with python 2.4 2007-11-30 15:53:02 -05:00
Rob Crittenden 99c676702b The uid_hidden field needs to be retained until after validation succeeds 
otherwise if it ever fails, uid_hidden will be lost which can cause uid
to not be set which cascades into lots of other errors.
 2007-12-06 17:00:38 -05:00
Rob Crittenden 04cccd4426 Improve the error message when an entry is not found. 
We used to return the entire argument string ala:

('dc=freeipa,dc=org', 2, 'uid=foo', ['*'])

This adds a regex to try to print anything after = in the filter.
Not perfect but better.
 2007-12-06 16:48:26 -05:00
Rob Crittenden 2a2d866552 Make uid an editable field in the Edit UI so we can do RDN changes 
Fix group RDN changes
Remove a copy/paste error in the group UI update that caused 2 updates
Fix variable name so groups don't get user objectclasses
Remove color CSS for field backgrounds as they override disabled field display
 2007-12-06 15:36:42 -05:00
Rob Crittenden 6ea3d9610e Utilize user and group objectclass lists in cn=ipaconfig 
Change the syntax on user and group objectclasses in cn=ipaconfig
 2007-12-06 00:30:26 -05:00
Rob Crittenden 8ff9f63d80 Require that the default users group exists 
Fix some copy-paste errors from the password policy update
 2007-11-30 13:27:33 -05:00
Rob Crittenden bac556557d Don't allow the admins or editors groups to be removed. 
Don't allow the default group for users to be removed.
 2007-11-30 12:49:08 -05:00
Rob Crittenden 72595ab1a5 delete_group() takes a DN, not a CN. Also do slightly better error reporting. 2007-11-30 12:04:16 -05:00
Rob Crittenden 5025e990e9 Remove optional arguments from the XML-RPC interface 2007-11-29 16:48:32 -05:00
Rob Crittenden 74d0fba899 Change the password expiration message to be more precise. 2007-11-29 16:43:38 -05:00
Rob Crittenden ab67029d94 Add utility to lock user accounts. Remove lock capability from ipa-deluser 
Fix bootstrap.ldif to add new Class of Service entries properly
Include some man pages that weren't being installed
 2007-11-26 22:28:53 -05:00
Rob Crittenden 0b1650e7ad Add ipa-python to maintainer-clean and clean up .pyc files 2007-11-28 12:33:14 -05:00
Rob Crittenden 86d80f12ca Add some javascript so we can put focus on the first field of the page. 2007-12-06 17:49:56 -05:00
Rob Crittenden 7e2f44df45 Add 'Edit Policy' button at top of page. 2007-12-06 17:46:09 -05:00
Rob Crittenden 849803d37a Always show the edit link on your own record 2007-12-06 17:07:40 -05:00
Rob Crittenden eb141b02ff Move dn removal to the XML-RPC side and remove empty attributes 2007-12-05 17:26:39 -05:00
Rob Crittenden 62b8091a83 Notify the user when the search results have been truncated 2007-12-05 15:25:05 -05:00
Rob Crittenden 15b7dc6ff9 Add UI for service principal creation and keytab retrieval 2007-12-05 15:17:11 -05:00
Rob Crittenden 2fbe5cbf49 Phase 1 of allowing admins to set the default object classes for users & groups 
This adds the UI and does error checking of the selected object classes but
it doesn't actually use the values yet.

It also generalizes some functions for doing multi-valued fields.
 2007-12-04 13:18:37 -05:00
Rob Crittenden 69765f52ce Groups may be iterated over so should be an empty list, not None 2007-12-05 15:12:24 -05:00
Rob Crittenden 010fb65bfd define Self-Service as editting your own record. 
This has the side-effect of removing the realm from Loggin in as. This
can be changed by using user_name instead of display_name in master.kid.
 2007-11-02 17:41:24 -04:00
Rob Crittenden 9d24003528 Distinguish between active and inactive users on the Find People page. 2007-11-02 11:42:38 -04:00
Rob Crittenden c54826653f 'make all' needs to depend on autogen.sh but we don't want to re-run it 
on every iteration. This lets the top-level 'make install' work properly.
 2007-11-02 11:34:02 -04:00
Rob Crittenden dc01ea0fe6 groups come back as a list where the first element is the number of 
groups returned. Skip that element.
 2007-11-02 11:35:50 -04:00
Rob Crittenden 6a0ca23577 Update the UI look and feel 2007-11-01 16:15:32 -04:00
Rob Crittenden 10917161a7 Use proper method of retrieving attributes 2007-11-01 13:21:13 -04:00
Rob Crittenden a51dd58278 TurboGears log files and log rotation 
The error log is rotated weekly on Sunday. 4 backups are saved.

The access log is not stored since it would be a duplicate of the
Apache logs. It can be enabled if desired.

Had to move the call to daemonize() in ipa-webgui so that the
fork is done before TurboGears is initialized. Otherwise the log
files end up getting closed.
 2007-11-01 11:55:53 -04:00
Rob Crittenden d9f809746b Completely remove an attribute 2007-10-31 17:11:55 -04:00
Rob Crittenden d3d89f754b Use same tzinfo as the time parser to avoid TypeError from being thrown 2007-11-21 00:27:50 -05:00
Rob Crittenden bf743087d2 Fix indentation error that occured in merge 2007-11-21 00:29:03 -05:00
Rob Crittenden f42f1f44c8 Enable group inactivation by using the Class of Service plugin. 
This adds 2 new groups: activated and inactivated.

If you, or a group you are a member of, is in inactivated then you are too.

If you, or a group you are a member of, is in the activated group, then you
are too.

In a fight between activated and inactivated, activated wins.

The DNs for doing this matching is case and white space sensitive.

The goal is to never have to actually set nsAccountLock in a user directly
but move them between these groups.

We need to decide where in the CLI this will happen. Right it is split
between ipa-deluser and ipa-usermod. To inactivate groups for now just
add the group to inactivate or active.
 2007-11-20 22:45:29 -05:00
Rob Crittenden 1967aafa39 Implement the password policy UI and finish IPA policy UI 
This includes a default password policy
Custom fields are now read from LDAP. The format is a list of
  dicts with keys: label, field, required.
The LDAP-based configuration now specifies:
    ipaUserSearchFields: uid,givenName,sn,telephoneNumber,ou,title
    ipaGroupSearchFields: cn,description
    ipaSearchTimeLimit: 2
    ipaSearchRecordsLimit: 0
    ipaCustomFields:
    ipaHomesRootDir: /home
    ipaDefaultLoginShell: /bin/sh
    ipaDefaultPrimaryGroup: ipausers
    ipaMaxUsernameLength: 8
    ipaPwdExpAdvNotify: 4
This could use some optimization.
 2007-11-16 12:59:32 -05:00
Rob Crittenden 0a3ed69746 Completely remove attributes when delattr argument in ipa-groupmod 2007-11-15 14:44:09 -05:00
Rob Crittenden b01c468e8c Completely remove attributes when delattr argument 2007-11-15 14:39:54 -05:00
Rob Crittenden 49aa82e932 Use same labels as UI for ipa-finduser and ipa-findgroup 
Add -a option to ipa-findgroup to print all attributes
 2007-11-15 14:20:50 -05:00
Rob Crittenden 3e24df161b Replace references to Person and People with User and Users 2007-11-15 13:13:35 -05:00
Rob Crittenden 949b4a0bf7 Check for existance of of the target file in update_file. It used to silently 
fail if the file it was to update didn't exist.
 2007-11-15 11:09:17 -05:00
Rob Crittenden 6f268a185c Broke invididual Requires and BuildRequires onto separate lines and 
reordered them
Added python-tgexpandingformwidget as a dependency
Require at least fedora-ds-base 1.1
 2007-11-15 10:57:26 -05:00
Rob Crittenden bfcc044db2 If unable to connect to the XML-RPC server print a more useful error msg. 2007-11-15 10:27:59 -05:00
Rob Crittenden abdd344073 Remove reference to a bogus system and make the error message more generic 2007-11-14 14:11:29 -05:00
Rob Crittenden 02e5a6599b Forgot to include FQDN in the substitition list 2007-11-13 17:51:29 -05:00
Rob Crittenden cb0476f223 Make the group cn an editable field though protected by default. 
Fix some issues with the multi-value to single-value reversion.
 2007-11-14 23:33:49 -05:00
Rob Crittenden 83dd42797e Include multi-value fields on the Add Person page 
Remove multi-valued cn from groups
 2007-11-14 17:50:46 -05:00
Rob Crittenden 3e715a04cf Add an editors group. This is used to generally grant access for users 
to edit other users (the Edit link won't appear otherwise). Additional
delegation is need to grant permission to individual attributes.
Update the failed login page to indicate that it is a permission issue.
Don't allow access to policy at all for non-admins.
By default users can only edit themselves.
 2007-11-14 10:49:03 -05:00
Rob Crittenden bd78fe0687 Add more fields to the IPA Policy form 2007-11-13 15:36:52 -05:00
Rob Crittenden 83dd26c6e3 Remove non-existent files from Makefile targets 2007-11-13 17:24:00 -05:00
Rob Crittenden eecbaf91e2 Use the dna plugin to automatically assign uid 
Set gid to the group "ipausers"
Add the user to this default group
 2007-11-13 15:03:20 -05:00
Rob Crittenden 79544637d6 The e-mail field should not be required. 2007-11-13 15:49:06 -05:00
Rob Crittenden 5011f64243 Restrict access to some parts of the UI to those in the admins group 2007-11-13 11:15:07 -05:00
Rob Crittenden cd489f0a73 Allow a user or group to change an attribute in its RDN 
Add secretary to the list of indexes otherwise RDN changing could be slow
Port --addattr, --setattr and --delattr from usermod to groupmod
 2007-11-12 23:11:55 -05:00
Rob Crittenden 99b84bfd01 Handle ldap.UNWILLING_TO_PERFORM more gracefully 2007-11-09 16:34:52 -05:00
Rob Crittenden f7358533d0 Add the capability to completely delete a user from the database. The 
default remains to inactivate them.
 2007-11-09 15:45:11 -05:00
Rob Crittenden d9194cdd09 Don't continue if a kerberos credentials cache is not available 
forked-model detection was incorrect.
Both of these return an error instead of raising one
 2007-11-09 14:55:41 -05:00
Rob Crittenden b7506a5ea6 Fix editing groups when cn is a single-valued field 
Fix some error messages that were printing the entire detail message
 2007-11-09 14:01:28 -05:00
Rob Crittenden 705d68ddcb Require uniqueness in the name/comment field of delegations 
Fix error reporting in the UI to include the detailed message
Sort delegations by name when displaying them
Update the name field from "Name" to "Delegation Name"
 2007-11-09 13:58:36 -05:00
Rob Crittenden 6f03dde1ab Underline columns on sort results page so users will know it is a link 
Restore the CSS to display the up/down arrow on sort columns
 2007-11-12 15:14:35 -05:00
Rob Crittenden 547e6e920e Redirect to the FQDN otherwise kerberos auth may fail 2007-11-12 14:47:48 -05:00
Rob Crittenden e1ca8c235c Initial support for policy editing 
More work is needed as the values are currently hardcoded and not saved
 2007-11-12 14:19:05 -05:00
Rob Crittenden e9dfbfa773 Enable multi-value field support for some attributes on the edit pages 
Better error reporting in the GUI
Include a document describing how multi-valued fields work
 2007-11-08 22:12:42 -05:00
Rob Crittenden 303d5ebad9 Have the GUI use memberOf() instead of looping through the member DNs 
Fix a bug in the local transport version of memberOf()
 2007-10-31 10:08:16 -04:00
Rob Crittenden 1d6e88565c Add memberOf API call to the XML-RPC interface 
Make find-groups use memberOf to have a prettier dispaly of members
 2007-10-30 15:07:02 -04:00
Rob Crittenden 402274af4b Allow adding, setting, deleting arbitrary attributes 2007-10-31 09:32:25 -04:00
Rob Crittenden ed387e2ebb Add inetUser to the admin user so memberOf will work 2007-10-30 14:42:19 -04:00
Rob Crittenden 3c8cfd94bd Create LDAP indeces on installation for fields the web GUI searches against 2007-10-30 13:41:41 -04:00
Rob Crittenden c116f8d739 Install the delegation tools 2007-10-29 14:16:44 -04:00
Rob Crittenden 6f5b692b5c Fix minor spelling issue 2007-10-29 14:15:21 -04:00
Rob Crittenden e40c583b12 Create configuration for MIT Windows kerberos client and install into 
http://hostname/config so users can point their MIT client at the IPA
server and automatically fetch the configuration.
 2007-10-29 12:00:48 -04:00
Rob Crittenden 28641544e7 Set the user password when adding a user 2007-10-26 12:35:32 -04:00
Rob Crittenden f5cc36507b Add dependency on python-krbV 2007-10-24 15:39:05 -04:00
Rob Crittenden 0d80589bcb Command-line delegation tools with man pages 2007-10-24 13:10:23 -04:00
Rob Crittenden 04636b8ae7 Add an LDAP attribute -> label mapping function to XML-RPC layer 
Move some ACI functions around in preparation for cli delegation
 2007-10-22 17:06:52 -04:00
Rob Crittenden a47f893957 update_user and update_group need to be defined differently in order 
to be available to the XML-RPC interface
 2007-10-22 10:09:39 -04:00
Rob Crittenden f018c2123c Require mod_nss-1.0.7-2 or higher. This version fixes an issue when 
using mod_nss with mod_proxy.
 2007-10-19 11:41:59 -04:00
Rob Crittenden ba0adcffb1 Require SSL for the XML-RPC interface 2007-10-19 10:14:30 -04:00
Rob Crittenden 6b0587726a Actually return a value to the shell 2007-10-19 09:59:07 -04:00
Rob Crittenden 53166669e7 Make distclean work again 2007-10-19 09:53:27 -04:00
Rob Crittenden d28b759e00 Fix build issues related to the autotools conversion 2007-10-18 22:03:54 -04:00
Rob Crittenden 3eba5d3b8d Add httpinstance.py 2007-10-18 16:20:00 -04:00
Rob Crittenden bc52446074 Fix build issues by combining patches submitted by Michael Gregg and 
Karl MacMillan
Remove #!/usr/bin/python from many files to quiet rpmlint
 2007-10-17 11:28:37 -04:00
Rob Crittenden 91ab2d3893 Add unique exit status to the ipa-find* tools when nothing is found 2007-10-16 12:19:43 -04:00
Rob Crittenden ed8f506b0f First step in enabling SSL in the IPA web server 2007-10-15 15:42:12 -04:00
Rob Crittenden a4143789da Add option -a to print all attributes 
Make sure we don't print out binary data
Remvoe any trailing white space when printing to avoid extra newlines
 2007-10-11 10:00:01 -04:00
Rob Crittenden 0a935d5be3 First draft of man pages for the admin tools 2007-10-11 10:49:32 -04:00
Rob Crittenden dac58ee693 Enabled memberof plugin 2007-10-16 10:17:39 -04:00