Rob Crittenden
80a4e94e5b
Verify current domain with user during installation
...
Use that domain when creating replicas
Resolves 432066
2008-02-15 20:47:29 -05:00
Rob Crittenden
c47248c5d8
Update of CSS from Máirín Duffy including some per-object images
2008-02-19 16:43:32 -05:00
Rob Crittenden
65960a2e58
Use the proper access methods in IPA policy subcontroller.
...
Resolves 433062
2008-02-18 17:41:58 -05:00
Rob Crittenden
f82b3b0b28
Handle input range properly and catch KeyboardInterrupt and exit gracefully
...
433496
2008-02-20 09:32:25 -05:00
Rob Crittenden
3817577525
Handle a ctrl-C gracefully while getting the new password
...
Resolves 433053
2008-02-20 09:26:34 -05:00
Rob Crittenden
346f73057f
memberOf attribute should not be replicated
...
Resolves 430017
2008-02-18 15:22:36 -05:00
Rob Crittenden
3ad8a2bd1b
Import internationalization for kid templates patch from Masato Taruishi
2008-02-19 22:45:11 -05:00
Rob Crittenden
1aa8729644
Initial SELinux policies for ipa_kpasswd and ipa_webgui
2008-02-08 11:09:06 -05:00
Rob Crittenden
eef18e5c38
Display the path to the PKCS#12 password file at the end of installation
2008-02-19 11:40:27 -05:00
Rob Crittenden
73a674ed49
Fix bug that prevented single-character fields
...
Fix bug in exception handling where we were sending the wrong thing as detail.
Basically we were catching an LDAP error, generating an IPAError from it,
catching that, then setting the detail of the 2nd exception to another IPAError
rather than the root exception. This caused anything looking at e.detail to
crap out
Resolves 432136
2008-02-11 16:32:54 -05:00
Rob Crittenden
5b1e7e3a5f
Don't create a backup of the PKCS#12 cert on replicas
...
Name the file created by ipa-replica-prepare after the FQDN of the target
Resolves 432904
2008-02-14 17:39:06 -08:00
Nathan Kinder
71c21b5293
Fix bugs in handling of circular groupings in memberOf plug-in.
...
Resolves 432140
2008-02-14 16:27:34 -08:00
Rob Crittenden
1380d9d9de
Fix incorrect form label
...
Resolves 432731
2008-02-14 16:04:53 -08:00
Rob Crittenden
0300952ec7
Use ldap_explode_dn instead of ldap_str2dn so we can use python-ldap 2.2.0
2008-02-11 09:42:47 -05:00
Rob Crittenden
5be3defccf
Gracefully handle sys.exit() in python 2.4
2008-02-11 09:41:14 -05:00
Rob Crittenden
5f86f5a5fd
Generate the multi-value entries needed when redirecting to the edit_user
...
page. This avoids a Nonetype error.
Resolves 432106
2008-02-08 17:34:23 -05:00
Rob Crittenden
1a38b6dfdf
Install principalshow.kid
2008-02-08 17:49:49 -05:00
Rob Crittenden
6e0bda98e3
Missed a place to translate the realm name into an instance name
...
Catch SystemExit exceptions otherwise a trace will be shown with python 2.4
2008-02-08 15:10:26 -05:00
Rob Crittenden
9e3963acd5
Include some missing man pages
2008-02-08 16:06:15 -05:00
Rob Crittenden
a5da8d1523
Include some missing utilities in the Makefile
2008-02-08 15:55:13 -05:00
Rob Crittenden
802483813a
Always do a chkconfig --add/--del on install/uninstall
...
This makes a from-tree installation work. We also do this in the rpm spec file.
Contributed by Pieter D.J. Krul
2008-02-08 15:17:20 -05:00
Simo Sorce
0375112200
Add switch to be able to provide a comma separate list of encryption types
...
we want to have in the keytab.
This superceedes any default enctype.
2008-02-06 19:01:22 -05:00
Rob Crittenden
7fe8e88e72
Switch 'below' to 'above' to point to the right location of the CA on the page
2008-02-07 11:32:30 -05:00
Rob Crittenden
c50ebd9657
Don't set blank values so we don't end up with empty attributes
...
Resolves 429895
2008-01-30 09:31:03 -05:00
Rob Crittenden
97d9c235dd
Set the license uniformly to GPLv2 only.
2008-02-04 15:15:52 -05:00
Rob Crittenden
217019e9de
Create /var/run/<process>.pid to play nicers with the start scripts
...
Need to start ipa_webgui as root and drop privs in order to write in /var/run
2008-02-06 11:02:05 -05:00
Rob Crittenden
ef5b4391de
Fix broken attempt to return 0 on success, 1 on failure
2008-02-06 09:05:47 -05:00
Rob Crittenden
6935d94c14
Fix two typos
2008-02-05 16:50:12 -05:00
Simo Sorce
3902a381d5
Add uniqueMember -> member mapping into /etc/ldap.conf on installation
2008-02-05 15:41:55 -05:00
Rob Crittenden
07b1aef252
Return 1 on error, 0 on success
2008-02-05 13:55:06 -05:00
Rob Crittenden
5a96618f5d
Use file to store the current CA serial number
...
No longer create a PKCS#12 file that contains the CA
No longer send the entire CA to each replica, generate the SSL certs on master
Fix number of bugs in ipa-replica-install and prepare
Produce status output during replica creation
2008-02-05 12:23:53 -05:00
Rob Crittenden
25057816a5
Remove = sign between [set|add|del]attr=attr=value to improve readability.
2008-02-04 13:52:04 -05:00
Rob Crittenden
96216539a7
Add --usage as a command-line option.
...
Resolves 431283
2008-02-01 22:22:34 -05:00
Rob Crittenden
0e3ecf6270
Marked with wrong license. IPA is GPLv2.
2008-01-31 16:49:01 -05:00
Rob Crittenden
15e2abaa25
Use orig_user_dict to get krbprincipalname when changing passwords.
...
Add an extra exception handler so we don't return a 500 on errors.
2008-01-31 17:38:21 -05:00
Rob Crittenden
1b988fff82
Ensure that the ipa_webgui error log exists and has correct permissions.
...
Resolves 431089
2008-01-31 14:21:07 -05:00
Rob Crittenden
5834ada3e9
Add option to list common attributes for use with --setattr,--addattr,--delattr
2008-01-31 11:24:52 -05:00
Rob Crittenden
64cce8f82e
Handle the --usage option by actually displaying the usage
...
Fix some missing options in --usage
Remove a few debugging statements
Resolves 430704
2008-01-31 10:52:05 -05:00
Rob Crittenden
ae5cb78ab8
Use proper string validation routine.
...
Resolves 430709
2008-01-31 10:59:38 -05:00
Rob Crittenden
00e3a81266
Use correct variable for domain when restoring a file.
...
Resolves 430724
2008-01-31 10:24:22 -05:00
Rob Crittenden
94a3a5c038
Fix discrepencies between built-in help and the man page.
...
Resolves bz 429814
2008-01-25 13:49:08 -05:00
Rob Crittenden
473eb9992e
Enable logging so we can catch startup errors either in the console or
...
the error log.
Add a foreground and debug flag
Resolves 430011
2008-01-30 11:55:33 -05:00
Rob Crittenden
d73dd8b427
Put user-modifiable files into /etc/ipa/html so they can be marked as
...
config(noreplace).
Resolves 430004
2008-01-30 09:58:15 -05:00
Rob Crittenden
aad14c5d54
Missed closing quote
2008-01-29 11:33:44 -05:00
Rob Crittenden
71e39eccd8
Remove reference to radius that wasn't used and was causing program to fail.
...
Resolves 429853
2008-01-29 10:08:58 -05:00
Rob Crittenden
946ef21426
Include some additional information when installing IPA.
...
Remove 8080 as a port that needs to be opened
bz 430088
2008-01-25 17:08:36 -05:00
Rob Crittenden
5c58015fbe
Fix misspelling of the word indices.
2008-01-25 13:29:49 -05:00
Mark McLoughlin
996a3f6698
Fix not so random random passwords
...
If you run ipa_generate_password() multiple times, one
after the other, then you get the same password each time.
This is because it uses the current time to seed the
pseudo random number generator.
The easiest solution is to just use the default method
which seeds itself from /dev/urandom if available,
and uses a fractional time value otherwise.
Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-01-22 16:42:45 +00:00
Mark McLoughlin
11266d039f
Re-factor the ipa_webgui and ipa_kpasswd instance code
...
The ipa_webgui and ipa_kpasswd instance code is identical
and I want to add another similar instance down the line,
so re-factor the code into a service.SimpleServiceInstance
class.
Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-01-22 11:58:06 +00:00
Mark McLoughlin
5fd10b5f98
Initialise DsInstance.pkcs12_info
...
DsInstance.pkcs12_info isn't currently initialised in
the constructore so, e.g. __enable_ssl() assumes that
create_instance() has initialised it.
Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-01-22 11:58:06 +00:00
