Commit Graph

386 Commits

Author SHA1 Message Date
John Dennis
3fb9a81339 checkpoint bug fixing and cleanup of command line radius tools 2007-11-27 21:29:50 -05:00
John Dennis
5d1ca46ea7 do a better job of handling attribute deletion 2007-11-27 16:16:10 -05:00
John Dennis
82654731ab checkpoint work to add attribute deletion 2007-11-27 07:57:49 -05:00
John Dennis
78b5987101 add parse_items(), read_items_file()
move read_pairs_file() to ipautil
2007-11-26 23:11:49 -05:00
John Dennis
c5a43a0168 add ItemCompleter class 2007-11-26 20:59:53 -05:00
John Dennis
09238510ff add command line utilites for radius profiles 2007-11-26 19:30:33 -05:00
John Dennis
4f33d67418 remove radius_client.py, move contents to radius_util.py 2007-11-26 11:12:58 -05:00
John Dennis
2c2069d3ec checkpoint radius client add,modify,find,del working, command line args handled correctly 2007-11-26 09:46:19 -05:00
jdennis@VAIO
9a9a7e4058 clean up attribute names
clean up command line args in ipa-delradiusclient
2007-11-24 11:20:28 -05:00
John Dennis
9a8326c5c1 clean up radius client command line tools 2007-11-23 10:35:22 -05:00
John Dennis
d98686e967 Add radius profile implementations:
get_radius_profile_by_uid
  add_radius_profile
  update_radius_profile
  delete_radius_profile
  find_radius_profiles

Rewrite command line arg handling, now support pair entry, interactive
mode with auto completion, reading pairs from a file, better handling
of mandatory values, better help, long arg names now match attribute
name in pairs

Establish mappings for all attributes and names used in clients and
profiles

Add notion of containers to radius clients and profiles in LDAP

Move common code, variables, constants, and strings into the files
radius_client.py, radius_util.py, ipautil.py to eliminate redundant
elements which could get out of sync if modified and to provide access
to other code which might benefit from using these items in the
future.

Add utility functions:
  format_list()
  parse_key_value_pairs()

Add utility class:
  AttributeValueCompleter

Unify attribute usage in radius ldap schema
2007-11-21 13:11:10 -05:00
John Dennis
087d11af5c map attrs to friendly name 2007-11-14 16:01:27 -05:00
John Dennis
c4dbe6433d add ipa-findradiusclient search 2007-11-14 15:32:08 -05:00
John Dennis
c24da12fe1 radius client modify and delete work 2007-11-14 00:04:19 -05:00
John Dennis
c4bf859bfb move radius client utility code to common radius_client.py so it can be shared 2007-11-13 20:22:18 -05:00
John Dennis
eab5a89d4a ipa-addradiusclient now working 2007-11-13 20:05:02 -05:00
John Dennis
152f8e3392 checkpoint radius client work 2007-11-13 13:06:18 -05:00
John Dennis
f36872383c add aci's for radius 2007-11-10 12:04:43 -05:00
John Dennis
84275328a0 radius now does kerberos auth, reads client entries from LDAP 2007-11-10 00:09:07 -05:00
Pete Rowley
24d5777bd6 Add posix auto gen for single master case 2007-11-06 15:57:15 -08:00
John Dennis
80c4ed7af2 remove offensive use of rpm
add the radiusprofile to the list of objectclasses used when creating a user
2007-11-06 16:26:10 -05:00
John Dennis
22493d9b9f remove offensive use of rpm
add the radiusprofile to the list of objectclasses used when creating a user
2007-11-06 16:26:10 -05:00
Rob Crittenden
50c383aeed Update text to reflect new CSS code (sidebar now on right) 2007-11-06 10:22:47 -05:00
Karl MacMillan
8e48393c61 Introduce service base class and clean up ipa-server-install
1) Add a base class for all of the instance objects.
2) Normalize usage of logging.
3) General cleanups of ipa-server-install.
4) Make better use of httpinstance.
5) Add webguiinstance.
6) Improve progress reporting during installation.

Works Here (TM), but it would be nice to get someone else
to test since this moves code around a bit.
-
Karl MacMillan
957a70e560 Prevent gzip from requesting confirmation.
The current manpage installation gzips the files in
place and requests confirmation before overwriting
existing files. Add -f to prevent prompting. We
should consider not gzipping the files in place.
-
Karl MacMillan
de15549f8e Make it possible to force the running of autogen.
With the change to run autogen on make all if there
was no makefile present, it became impossible to
force the running of autogen when that is needed. Fix
that by adding a bootstrap-autogen target that checks
the existing of Makefiles and reverting the autogen
target to always run autogen.
-
John Dennis
8cfd270f34 merge initial radius work 2007-11-03 12:22:20 -04:00
Karl MacMillan
8f4362f2f2 Enable referential integrity plugin. -
Rob Crittenden
010fb65bfd define Self-Service as editting your own record.
This has the side-effect of removing the realm from Loggin in as. This
can be changed by using user_name instead of display_name in master.kid.
2007-11-02 17:41:24 -04:00
Rob Crittenden
9d24003528 Distinguish between active and inactive users on the Find People page. 2007-11-02 11:42:38 -04:00
Rob Crittenden
c54826653f 'make all' needs to depend on autogen.sh but we don't want to re-run it
on every iteration. This lets the top-level 'make install' work properly.
2007-11-02 11:34:02 -04:00
Rob Crittenden
dc01ea0fe6 groups come back as a list where the first element is the number of
groups returned. Skip that element.
2007-11-02 11:35:50 -04:00
Karl MacMillan
36e43aed1b NTP configuration for client and server.
Configure ipa servers as an ntp server and clients
to (by default) us the ipa server as an ntp server.

Also corrected the messages about which ports should
be opened.
-
Rob Crittenden
6a0ca23577 Update the UI look and feel 2007-11-01 16:15:32 -04:00
Simo Sorce
77a105688c Fix ticket #70 2007-11-01 13:56:03 -04:00
Rob Crittenden
10917161a7 Use proper method of retrieving attributes 2007-11-01 13:21:13 -04:00
Rob Crittenden
a51dd58278 TurboGears log files and log rotation
The error log is rotated weekly on Sunday. 4 backups are saved.

The access log is not stored since it would be a duplicate of the
Apache logs. It can be enabled if desired.

Had to move the call to daemonize() in ipa-webgui so that the
fork is done before TurboGears is initialized. Otherwise the log
files end up getting closed.
2007-11-01 11:55:53 -04:00
Rob Crittenden
d9f809746b Completely remove an attribute 2007-10-31 17:11:55 -04:00
Karl MacMillan
83592ebada Added tag milestone_4_1 for changeset 77f4aaa4e4bd -
Karl MacMillan
c0ae2b2f85 Removed tag mileston_4_1 -
Karl MacMillan
a7d1987ec3 Added tag mileston_4_1 for changeset bda291e79a4f -
Karl MacMillan
29c0668e98 Bump versions for release. -
Simo Sorce
51a5130227 Properly increment kvno and keep recent key material around
This is necessary for services that need to be able to respond
to requests from client that acquired a service ticket just before
a password change.
2007-10-31 10:52:44 -04:00
Karl MacMillan
45346ee3ab Remove multi-value set/add in ipa-usermod.
Calling --add multiple times will accomplish the same
thing without the need for handling splits on ",".
-
Karl MacMillan
27f0aab667 Rename memberOf to group_members in xml-rpc interface. -
Karl MacMillan
3b66d27383 Allow set/add/del to be called multiple times.
Allow the --set/add/del options to be called multiple
times during the same invocation. Also add more robust
checking of errors.
-
Rob Crittenden
303d5ebad9 Have the GUI use memberOf() instead of looping through the member DNs
Fix a bug in the local transport version of memberOf()
2007-10-31 10:08:16 -04:00
Rob Crittenden
1d6e88565c Add memberOf API call to the XML-RPC interface
Make find-groups use memberOf to have a prettier dispaly of members
2007-10-30 15:07:02 -04:00
Rob Crittenden
402274af4b Allow adding, setting, deleting arbitrary attributes 2007-10-31 09:32:25 -04:00
Pete Rowley
1871e8dbf6 Add user self service aci 2007-10-29 14:52:19 -07:00