IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity
6,195 Commits 11 Branches 60 Tags 60 MiB
2b08168df4
Commit Graph

1961 Commits

Author SHA1 Message Date
Petr Vobornik
f188fcdfa7 Replace IPA.get_command_arg calls in specs with provider strings 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:28 +02:00
Petr Vobornik
e4150918f6 Replace IPA.get_command_option calls in specs with provider strings 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:27 +02:00
Petr Vobornik
60b3208cf5 Replace IPA.get_entity_param calls in specs with provider strings 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:27 +02:00
Petr Vobornik
ff81965e71 Allow metadata provider format for field metadata declaration 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:27 +02:00
Petr Vobornik
c206249bd2 Make summary conditions declarative 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:27 +02:00
Petr Vobornik
bee39848d3 Make facet and entity policies declarative 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:27 +02:00
Petr Vobornik
33b584f0a0 Fix incorrect type -> $type conversion 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:27 +02:00
Petr Vobornik
7a3f08002d Replace usage of action factories with types 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:27 +02:00
Petr Vobornik
5be709bf9d Builder and registry for actions 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:27 +02:00
Petr Vobornik
5239d3750e Change widget.build_child interface to the builder's 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:27 +02:00
Petr Vobornik
799bb24931 Builder and registry for validators 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:27 +02:00
Petr Vobornik
511452ec41 Replace formatter creation with definition in specs 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:26 +02:00
Petr Vobornik
ff8580f441 Builder: return null if no spec supplied - fix 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:26 +02:00
Petr Vobornik
9a23e5c9ec Registry and builder for formatters 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:26 +02:00
Petr Vobornik
e100ba7e2b Replace build logic in widget and field builder by new builder 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:26 +02:00
Petr Vobornik
1221fca662 Builder: allow string spec as spec property instead of type 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:26 +02:00
Petr Vobornik
49b7f4c06e Replace IPA.widget_factories and IPA_field_factories with registry 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:26 +02:00
Petr Vobornik
849ece00e3 Builder: global builder and registry 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:26 +02:00
Petr Vobornik
12e10f345b Builder: create Construct_registry by default in builder 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:26 +02:00
Petr Vobornik
621811470a Phases: warn when adding task for nonexistent phase 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:26 +02:00
Petr Vobornik
eee43395dd Builder: build type without prior registration 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:26 +02:00
Petr Vobornik
30276e6983 Builder: add set method to Singleton_registry 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:25 +02:00
Petr Vobornik
86f0b5eb64 Use entities module for entity registration, build and holding 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:25 +02:00
Petr Vobornik
a901f8b0e7 Builder: fix inner array and obj references 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:25 +02:00
Petr Vobornik
bf55d5b412 Builder: remove item from singleton registry 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:25 +02:00
Petr Vobornik
f1a83b6fdc Builder: do not break on expected errors 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:25 +02:00
Petr Vobornik
ffeafa6ec2 Replace IPA.facet_builder with facets.builder 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:25 +02:00
Petr Vobornik
f14393f427 Fix construct registry map reference 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:25 +02:00
Petr Vobornik
1d802d12a4 Builder: allow to use custom factory/ctor when using type 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:25 +02:00
Petr Vobornik
952234ef79 Report phase errors 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:25 +02:00
Petr Vobornik
9f0188684f Handle built object in spec 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:25 +02:00
Petr Vobornik
3b77c63b2a Use IPA.object() as a base factory for framework objects 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:24 +02:00
Petr Vobornik
0dc4b133fb Builder: return object when it's already built 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:24 +02:00
Petr Vobornik
9dc8e26b73 Rename factory to $factory in spec objects modifications 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:24 +02:00
Petr Vobornik
4ae3372682 Builder: fix infinite loop when using spec with circular dependency 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:24 +02:00
Petr Vobornik
dc6995ed7b Builder: fix overrides names - add $ 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:24 +02:00
Petr Vobornik
5665ed4676 Builder: return null if no spec supplied 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:24 +02:00
Petr Vobornik
6a034abf95 Rename factory to $factory in spec objects 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:24 +02:00
Petr Vobornik
44c103bab7 Basic build tests 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:24 +02:00
Petr Vobornik
d5b9c0d7d7 Spec utils 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:24 +02:00
Petr Vobornik
a432cc4d28 Rename build constructor to ctor 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:23 +02:00
Petr Vobornik
45b70425fc Replace old builder by new implementation 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:23 +02:00
Petr Vobornik
c9b5038a62 Builder: factory,ctor overrides, mass build 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:23 +02:00
Petr Vobornik
bd89d0088f Modularize details.js 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:23 +02:00
Petr Vobornik
2e0cfb1a78 Modularize group.js 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:23 +02:00
Petr Vobornik
c7cb075887 Builder: added pre_ops and post_ops 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:23 +02:00
Petr Vobornik
fcbf5cc411 Spec modification by diff object 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:23 +02:00
Petr Vobornik
abdb5455d1 Add pre and post build operations 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:23 +02:00
Petr Vobornik
03d3742376 Remove text.get usage from spec 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:23 +02:00
Petr Vobornik
58ebaedb41 Replace IPA.get_message with text.get 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:22 +02:00
Petr Vobornik
9782c80098 Remove invalid label definition from cert search facet 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:22 +02:00
Petr Vobornik
1a7bafe5db Fix facet section labels 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:22 +02:00
Petr Vobornik
d5c0945890 Replace remaining IPA.messages with text.get calls 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:22 +02:00
Petr Vobornik
8ee752c284 Use text.get in IPA.notify_success 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:22 +02:00
Petr Vobornik
ed94fdf190 Replace IPA.messages with @i18n definition for title specs 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:22 +02:00
Petr Vobornik
bc566ede32 Replace IPA.messages with @i18n definition for message specs 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:22 +02:00
Petr Vobornik
5f96e75b74 Replace IPA.messages with @i18n definition for remove_title specs 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:22 +02:00
Petr Vobornik
cebe1bc5a2 Replace IPA.messages with @i18n definition for add_title specs 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:22 +02:00
Petr Vobornik
fcff33fb51 Replace IPA.messages with @i18n definition for label specs 
Replaced by execution of
ls | grep .js | xargs sed -i -r "s/label: IPA.messages\.((.\w+)+)/label: '@i18n:\1'/"

https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:21 +02:00
Petr Vobornik
12f5f4cfdd Replace IPA.messages with @i18n definition in spec objects 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:21 +02:00
Petr Vobornik
f492e61f46 Replace IPA.get_message with text.get 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:21 +02:00
Petr Vobornik
09296fc0b3 Use text.get for transforming values supplied by spec 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:21 +02:00
Petr Vobornik
e3ea5e8d50 Limit Provider reporting 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:21 +02:00
Petr Vobornik
13e34216eb Metadata and text providers 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:21 +02:00
Petr Vobornik
1b90b3b65e Add phase on exact position 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:21 +02:00
Petr Vobornik
344e15452a Replace id usage in App widget by class 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:21 +02:00
Petr Vobornik
917d834c65 Rename alternation phase to customization 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:21 +02:00
Petr Vobornik
cc92060e35 Use dojo/on instead of dojo/topic for facet-xxx events' 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:20 +02:00
Petr Vobornik
c0007704e8 Fix add/deletion of automember rule - caused by not setting facet for entity adder dialog 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:20 +02:00
Petr Vobornik
6f80b32731 Fix tab switching for nested entities 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:20 +02:00
Petr Vobornik
1adad5573b Fix in state change handling and reporting 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:20 +02:00
Petr Vobornik
0df5297d2b Fixed errors in DNS pages 
* adding, removing of dns zone permission was broken
* add/del/update of dns record value in record details facet was broken
* redirection from A/AAAA record to corresponding PTR record was broken

https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:20 +02:00
Petr Vobornik
4c290a6083 Proper removal of dns menu item when dns is not installed 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:20 +02:00
Petr Vobornik
c111ffb9f2 Menu proxy 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:20 +02:00
Petr Vobornik
6c2bfe6dc0 Fix hbactest styles 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:20 +02:00
Petr Vobornik
74b6099fb0 Web UI plugin loader 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:20 +02:00
Petr Vobornik
953f599415 Fix unit tests 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:19 +02:00
Petr Vobornik
8a0f60cf46 Add handling of runtime and shutdown phase. App-init renamed to init. 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:19 +02:00
Petr Vobornik
89635f1bc3 Fix dirty dialog behavior 
Dirty dialog was displayed twice because of double event registration in menu widget.

https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:19 +02:00
Petr Vobornik
b06d008f31 Raise only one "set" event on facet.state.set 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:19 +02:00
Petr Vobornik
a8b48a8f42 Don't expect key for singleton objects (dnsconfig, config, realmdomains) 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:19 +02:00
Petr Vobornik
41324cf619 Fix needs_update on object change 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:19 +02:00
Petr Vobornik
3fbdb43d62 Remove old navigation code in certificates 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:19 +02:00
Petr Vobornik
e4f2218f18 Certificates, Realm domains added to navigation 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:19 +02:00
Petr Vobornik
7b512abbf1 DNS menu fixed 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:19 +02:00
Petr Vobornik
3e392bbfc6 get_primary_key function usages removed 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:19 +02:00
Petr Vobornik
166102a910 Removed entity.get_primary from association facet 
Also removed facet usage from entity adder dialog.

https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:18 +02:00
Petr Vobornik
bf8bae5080 Removed incorrect success message when adding of external member failed 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:18 +02:00
Petr Vobornik
ea2e4eecac Fix facet needs_update behavior 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:18 +02:00
Petr Vobornik
46cec2abd8 Fix selection of menu in automember 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:18 +02:00
Petr Vobornik
34201ea0ab Rename path array from hash to path in hash generation 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:18 +02:00
Petr Vobornik
9657c757f6 Add menu memory 
Parent items remember last selected child.

https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:18 +02:00
Petr Vobornik
364e0ec5af File dependencies added to Web UI Makefile 
WebUI was not rebuilt while rebuilding RPMS.

https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:18 +02:00
Petr Vobornik
8751b1a3db Set pkeys to add,remove dialog 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:18 +02:00
Petr Vobornik
99fc3d597a Remove IPA.current_entity usage 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:18 +02:00
Petr Vobornik
a3e0e671a1 Fix nested facet search 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:17 +02:00
Petr Vobornik
31d7486b88 Remove IPA.nav usage, obsolete entity.get_primary_key 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:17 +02:00
Petr Vobornik
7edf044a44 Removed old navigation code 
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:17 +02:00
Petr Vobornik
693dc56062 Menu and application controller refactoring 
https://fedorahosted.org/freeipa/ticket/3235
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:17 +02:00
Petr Vobornik
a4d9e19c79 Config.js 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:17 +02:00
Petr Vobornik
87a1b58237 Phases - application lifecycle 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:17 +02:00
Petr Vobornik
33904d8651 i18n - internationalized text provider 
https://fedorahosted.org/freeipa/ticket/3235
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:17 +02:00
Petr Vobornik
ded1bb3642 Basic implementation of registers 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:17 +02:00
Petr Vobornik
a31fe2739c Update of Dojo build 
https://fedorahosted.org/freeipa/ticket/3235
https://fedorahosted.org/freeipa/ticket/3236
 2013-05-06 16:22:17 +02:00
Petr Vobornik
f0c1c629d3 jsl update 
https://fedorahosted.org/freeipa/ticket/3235
 2013-05-06 16:22:16 +02:00
Martin Kosek
77e4f445cc Update pki proxy configuration 
Replicas with Dogtag pki-ca 10.0.2 CA require access to additional
Dogtag REST API calls. Update pki proxy configuration to allow that.

https://fedorahosted.org/freeipa/ticket/3601
 2013-05-06 13:33:52 +02:00
Tomas Babej
66b1d435c3 Handle connection timeout in ipa-replica-manage 
When connecting to replica, ipa-replica-manage could fail with
unknown error due to connection time out. This patch properly
handles the situation

Fixed in conjunction with https://fedorahosted.org/freeipa/ticket/3524
 2013-05-02 10:55:54 -04:00
Tomas Babej
6839483d29 Enforce host existence only where needed in ipa-replica-manage 
In ipa-replica-manage commands, we enforce that hostnames we work
with are resolvable. However, this caused errors while deleting
or disconnecting a ipa / winsync replica, if that replica was down
and authoritative server for itself.

Also adds an --no-lookup flag to disable host existence checks.

https://fedorahosted.org/freeipa/ticket/3524
 2013-05-02 10:53:15 -04:00
Petr Vobornik
80c4228fe2 Fix: Certificate status is not visible in Service and Host page 
https://fedorahosted.org/freeipa/ticket/3593
 2013-04-30 17:30:15 +02:00
Ana Krivokapic
dfcdd9c403 Always stop dirsrv in 'ipactl stop' 
Ensure that 'ipactl stop' stops the dirsrv instance, even when no other
services are running.

https://fedorahosted.org/freeipa/ticket/3574
 2013-04-29 09:38:30 -04:00
Petr Viktorin
d4a0fa34af Fix syntax errors in schema files 
- add missing closing parenthesis in idnsRecord declaration
- remove extra dollar sign from ipaSudoRule declaration
- handle missing/extraneous X-ORIGIN lines in 10-selinuxusermap.update

This does not use the schema updater because the syntax needs to be
fixed in the files themselves, otherwise 389 1.3.2+ will fail
to start.
Older DS versions transparently fix the syntax errors.

The existing ldap-updater directive for ipaSudoRule is fixed
(ldap-updater runs after upgradeconfig).

https://fedorahosted.org/freeipa/ticket/3578
 2013-04-26 11:15:16 -04:00
Petr Viktorin
e9863e3fe3 Fix syntax of the dc attributeType 
dc syntax is changed from Directory String to IA5 String to conform
to RFC 2247.

Part of the work for https://fedorahosted.org/freeipa/ticket/3578
 2013-04-26 11:13:52 -04:00
Martin Kosek
5af2e1779a Add userClass attribute for hosts 
This new freeform host attribute will allow provisioning systems
to add custom tags for host objects which can be later used for
in automember rules or for additional local interpretation.

Design page: http://www.freeipa.org/page/V3/Integration_with_a_provisioning_systems
Ticket: https://fedorahosted.org/freeipa/ticket/3583
 2013-04-26 10:20:17 -04:00
Tomas Babej
e10d934230 Make gecos field editable in Web UI 
This patch exposes user entry gecos field in Web UI.

https://fedorahosted.org/freeipa/ticket/3569
 2013-04-25 17:27:10 +02:00
Ana Krivokapic
4cff518517 Add missing permissions to Host Administrators privilege 
The 'Host Administrators' privilege was missing two permissions
('Retrieve Certificates from the CA' and 'Revoke Certificate'), causing
the inability to remove a host with a certificate.

https://fedorahosted.org/freeipa/ticket/3585
 2013-04-24 14:35:22 -04:00
Ana Krivokapic
6d2176322c Do not display an interactive mode message in unattended mode 
https://fedorahosted.org/freeipa/ticket/3576
 2013-04-24 13:33:49 -04:00
Tomas Babej
fe3ba33d26 Update only selected attributes for winsync agreement 
Trying to insert nsDS5ReplicatedAttributeListTotal and
nsds5ReplicaStripAttrs to winsync agreements caused upgrade errors.
With this patch, these attributes are skipped for winsync agreements.

Made find_ipa_replication_agreements() in replication.py more
corresponding to find_replication_agreements. It returns list of
entries instead of unicode strings now.

https://fedorahosted.org/freeipa/ticket/3522
 2013-04-16 10:05:43 -04:00
Petr Viktorin
e736e75ce9 Drop --selfsign server functionality 
Design: http://freeipa.org/page/V3/Drop_selfsign_functionality
Ticket: https://fedorahosted.org/freeipa/ticket/3494
 2013-04-15 16:56:12 -04:00
Petr Viktorin
006ab23c6d Remove obsolete self-sign references from man pages, docstrings, comments 
Part of the work for https://fedorahosted.org/freeipa/ticket/3494
 2013-04-15 16:56:06 -04:00
Petr Viktorin
4e3c1051d0 Uninstall selfsign CA on upgrade 
This will convert a master with a selfsign CA to a CA-less one in
ipa-upgradeconfig.
The relevant files are left in place and can be used to manage certs
manually.

Part of the work for: https://fedorahosted.org/freeipa/ticket/3494
 2013-04-15 16:55:27 -04:00
Jan Cholasta
fe00788bb4 Delete DNS records in ipa-ca on ipa-csreplica-manage del. 
https://fedorahosted.org/freeipa/ticket/3547
 2013-04-15 21:12:41 +02:00
Jan Cholasta
f684c6d6f8 Use A/AAAA records instead of CNAME records in ipa-ca. 
https://fedorahosted.org/freeipa/ticket/3547
 2013-04-15 21:12:36 +02:00
Petr Viktorin
ddeb1cea55 Update translations from Transifex 2013-04-15 18:46:27 +02:00
Tomas Babej
75f0801324 Add nfs:NONE to default PAC types only when needed 
We need to add nfs:NONE as a default PAC type only if there's no
other default PAC type for nfs. Adds a update plugin which
determines whether default PAC type for nfs is set and adds
nfs:NONE PAC type accordingly.

https://fedorahosted.org/freeipa/ticket/3555
 2013-04-15 14:46:21 +02:00
Petr Viktorin
b36380fff8 ipa-server-install: correct help text for --external_{cert,ca}_file 
The options take PEM certificates, not PKCS#10.
This corrects both the --help output and the man page.

https://fedorahosted.org/freeipa/ticket/3523
 2013-04-15 13:32:58 +02:00
Ana Krivokapic
39982f6696 Remove HBAC source hosts from web UI 
https://fedorahosted.org/freeipa/ticket/3528
 2013-04-12 14:07:55 -04:00
Rob Crittenden
8377f4e92f Apply LDAP update files in blocks of 10, as originally designed. 
In order to have control over the order that updates are applied
a numbering system was created for the update files. These values
were not actually used.

The updates were sorted by DN length and in most cases this was
adequate for proper function. The exception was with roles where
in some cases a role was added as a member of a permission before
the role itself was added so the memberOf value was never created.

Now updates are computed and applied in blocks of 10.

https://fedorahosted.org/freeipa/ticket/3377
 2013-04-12 10:16:01 -04:00
Rob Crittenden
c8694cb19f Full system backup and restore 
This will allow one to backup and restore the IPA files and data. This
does not cover individual entry restoration.

http://freeipa.org/page/V3/Backup_and_Restore

https://fedorahosted.org/freeipa/ticket/3128
 2013-04-12 09:59:17 -04:00
Petr Viktorin
74abb432fb Remove 'cn' attribute from idnsRecord and idnsZone objectClasses 
A commonName attribute has no meaning in DNS records.

https://fedorahosted.org/freeipa/ticket/3514
 2013-04-10 13:56:11 +02:00
Petr Vobornik
53dc8b3ec9 Fix regression in group type selection in group adder dialog 
Refactoring of radio widget (04325fbb4c) caused that value is no longer supplied to value_change handler.
 2013-04-10 09:28:15 +02:00
Petr Vobornik
617114aac4 Don't show trusts pages when trust is not configured 
When trust is not configured trust-config page is raising an error. Trusts search page won't find anything either -> no use for the pages -> hiding.

https://fedorahosted.org/freeipa/ticket/3333
 2013-04-10 09:28:04 +02:00
Petr Vobornik
7e088a8378 Global trust config page 
https://fedorahosted.org/freeipa/ticket/3333
 2013-04-10 09:24:46 +02:00
Jan Cholasta
3f053437c9 Do actually stop pki_cad in stop_pkicad instead of starting it. 
https://fedorahosted.org/freeipa/ticket/3554
 2013-04-09 16:22:23 +02:00
Petr Vobornik
3393c577f9 Run permission target switch action only for visible widgets 
Permission details page was incorrectly evaluated as dirty (update button enabled) right after load when permission type={subtree,filter} and some attrs are set.

Can be reproduced by opening 'Modify Automount maps' permission.

The culprit is that attrs widget is populated and dirty-checked even targets where it doesn't belong.

Fixed by running target_mapping action only for visible targets.

https://fedorahosted.org/freeipa/ticket/3527
 2013-04-05 10:44:44 +02:00
Petr Vobornik
5af3b146a3 Add ipakrbokasdelegate option to service and host Web UI pages 
https://fedorahosted.org/freeipa/ticket/3329
 2013-04-04 12:53:59 +02:00
Martin Kosek
81be28d6bd Change CNAME and DNAME attributes to single valued 
These DNS attributeTypes are of a singleton type, update LDAP schema
to reflect it.

https://fedorahosted.org/freeipa/ticket/3440
https://fedorahosted.org/freeipa/ticket/3450
 2013-04-02 17:11:46 +02:00
Tomas Babej
ff01a08ffc Properly handle ipa-replica-install when its zone is not managed by IPA 
The ipa-replica-install script tries to add replica's A and PTR
records to the master DNS, if master does manage DNS. However,
master need not manage replica's zone. Properly handle this use
case.

https://fedorahosted.org/freeipa/ticket/3496
 2013-04-02 09:44:48 -04:00
Petr Vobornik
40b4faa6d7 Web UI: Disable cert functionality if a CA is not available 
Part of the work for: https://fedorahosted.org/freeipa/ticket/3363
 2013-04-02 15:32:05 +02:00
Petr Viktorin
1bc892c02d Load the CA cert into server NSS databases 
The CA cert was not loaded, so if it was missing from the PKCS#12 file,
installation would fail.
Pass the cert filename to the server installers and include it in
the NSS DB.

Part of the work for: https://fedorahosted.org/freeipa/ticket/3363
 2013-04-02 15:28:50 +02:00
Petr Viktorin
03a2c66eda Support installing with custom SSL certs, without a CA 
Design: http://freeipa.org/page/V3/CA-less_install
https://fedorahosted.org/freeipa/ticket/3363
 2013-04-02 15:28:50 +02:00
Petr Viktorin
34aa490141 ipa-server-install: Remove the --selfsign option 
Instead, certificates in pkcs12 files can be given to set up
IPA with no CA at all.
Use a flag, setup_ca, to signal if a CA is being installed.

Design: http://freeipa.org/page/V3/Drop_selfsign
Part of the work for: https://fedorahosted.org/freeipa/ticket/3494
 2013-04-02 15:28:50 +02:00
Petr Viktorin
9c215b61ac ipa-server-install: Make temporary pin files available for the whole installation 
We pass names of files with pkcs12 pins to installers which may continue to
use the files after the initial call to create_instance, at which point
the installer has already removed them.
Also, some of the files were not properly removed on failure.

Use ipautil.write_tmp_file for the pin files, which returns a
NamedTemporaryFile object that removes the underlying file when it is
garbage-collected.
Create the files at start of installation. This will allow checking
the pkcs#12 files before the system is modified.
 2013-04-02 15:28:50 +02:00
Petr Vobornik
661f41e197 Added Web UI support for service PAC type option: NONE 
ipakrbauthzdata accepts [null, 'NONE', 'MS-PAC, 'PAD']

New nesting feature of radios/checkboxes was used to handle mutual exclusivity between
 ['MS-PAC', 'PAD'], 'NONE' and ''.

https://fedorahosted.org/freeipa/ticket/3404
 2013-03-29 17:12:25 +01:00
Petr Vobornik
04325fbb4c Nestable checkbox/radio widget 
New component: option_widget_base. It's not a regular widget but it share some of its characteristics. It should extend regular widget or it can be nested in itself alone.

checkbox_widget, checkboxes_widget, radio_widget were modified to use it.

Built as a prerequisite for:
https://fedorahosted.org/freeipa/ticket/3404
 2013-03-29 17:12:20 +01:00
Jan Cholasta
5f26d2c6db Add Kerberos ticket flags management to service and host plugins. 
https://fedorahosted.org/freeipa/ticket/3329
 2013-03-29 16:34:46 +01:00
Martin Kosek
d27878ce9d Update mod_wsgi socket directory 
Fedora 19 splitted /var/run and /run directories. Update mod_wsgi
configuration so that it generates its sockets in the right one.
 2013-03-29 08:59:50 +01:00
Martin Kosek
48ba165576 Put pid-file to named.conf 
Fedora 19 has splitted /var/run and /run directories while in Fedora
18 it used to be a symlink. Thus, named may expect its PID file to be
in other direct than it really is and fail to start.

Add pid-file configuration option to named.conf both for new
installations and for upgraded machines.
 2013-03-29 08:59:45 +01:00
Ana Krivokapic
dae163aa37 Add mkhomedir option to ipa-server-install and ipa-replica-install 
Add the option to create home directories for users on their
first login to ipa-server-install and ipa-replica-install.

https://fedorahosted.org/freeipa/ticket/3515
 2013-03-28 08:45:37 +01:00
Ana Krivokapic
c2034805d3 Use default NETBIOS name in unattended ipa-adtrust-install 
Unattended ipa-adtrust-install used to fail if --netbios option
was not provided. This patches fixes this, so that instead of
failing the default NETBIOS name is used.

https://fedorahosted.org/freeipa/ticket/3497
 2013-03-22 15:05:59 +01:00
Martin Kosek
b5b040e68f Configure ipa_dns DS plugin on install and upgrade 
The plugin is configured unconditionally (i.e. does not check if
IPA was configured with DNS) as the plugin is needed on all
replicas to prevent objectclass violations due to missing SOA
serial in idnsZone objectclass. The violation could happen if just
one replica configured DNS and added a new zone.

https://fedorahosted.org/freeipa/ticket/3347
 2013-03-22 14:31:22 +01:00