Nathan Kinder
2c559fce85
Fixed the way we call ipa-client-install from ipa-replica-install.
...
434980
2008-02-28 15:24:10 -08:00
Rob Crittenden
ab86f52999
Fix off-by-one error in the number of steps to install a service
2008-02-28 21:57:52 -05:00
Rob Crittenden
6533bc1a84
Add action statement to ldap.conf update
...
Move imports into try/except so that ctrl-C can always be caught
Fix typo
2008-02-27 16:17:38 -05:00
Rob Crittenden
999bd4fb1e
In the UI we don't want to display Edit links unless someone can actually
...
edit things. We use the 'editors' group for this. This group itself grants
no permission other than displaying certain things in the UI.
In order to be in the editors group a user must be a member of a group that
is the source group in a delegation. The memberof plugin will do all the
hard work to be sure that a user's memberof contains cn=editors if they
are in a delegated group.
432874
2008-02-27 15:14:52 -05:00
Rob Crittenden
ad8096b51f
- Centralize try/except so the entire program is covered. This make it
...
possible to catch KeyboardInterrupt during the import process.
- Add function for handling python differences with GSSError
434798
2008-02-27 10:40:18 -05:00
Rob Crittenden
d5f5026454
Don't log passwords in ipaserver-install.log
...
433509
2008-02-26 10:48:45 -05:00
Rob Crittenden
f49ed705b3
The admins group cannot be renamed.
...
433880
2008-02-27 10:50:17 -05:00
Rob Crittenden
f02b5c1962
Use correct variable for determining the host name
...
435055
2008-02-26 22:34:06 -05:00
Rob Crittenden
d6d12e9dc5
Require that service principals resolve to a DNS A record.
...
There is a --force option for those who know what they are doing.
433483
2008-02-26 13:51:56 -05:00
Rob Crittenden
111a475b15
Don't try to use options.realm_name unless it was passed in
...
Don't allow empty responses to domain and realm name
Handle ctrl-C
434982
2008-02-26 15:31:34 -05:00
Rob Crittenden
8f0d4a8ed3
Add failover to the XML-RPC client
...
433506
2008-02-22 14:47:15 -05:00
Simo Sorce
c367b917d7
Contribute, RHEL4 compatible, simple setup script
2008-02-26 12:34:02 -05:00
Rob Crittenden
66df51c754
Use the label "Full Name" for "Common Name"
...
433525
2008-02-26 09:33:39 -05:00
Simo Sorce
d2fd2270cd
We do not require the Master password anymore, fix code and error message
2008-02-25 17:18:18 -05:00
Simo Sorce
e50f0fdbee
Fix unattended install
2008-02-25 17:16:18 -05:00
Rob Crittenden
3617100849
Compress man pages after installation
2008-02-25 16:34:00 -05:00
Rob Crittenden
6d759d7dcb
Move ipa-getkeytab man page into proper subdir
...
433878
2008-02-25 14:56:09 -05:00
Rob Crittenden
02d3c5aff3
Don't allow a group to be a member of itself.
...
434542
2008-02-22 15:40:21 -05:00
Rob Crittenden
44797e3917
Command-line utility to manage password policy
...
432814
2008-02-25 13:11:15 -05:00
Rob Crittenden
b9c7056a2a
Remove HTML from Javascript error message and fix up language to be clearer
...
433374
2008-02-22 09:36:12 -05:00
Rob Crittenden
231913f3c2
Make sure KrbPrincipalName is unique server-wide
...
Fix the build. Somehow this file didn't get committed.
2008-02-21 23:22:31 -05:00
Simo Sorce
144a728182
Make sure KrbPrincipalName is unique server-wide
2008-02-21 22:31:16 -05:00
Simo Sorce
fbb2637a48
Syntax error, ')' in the worng place throws nasty 500 errors on ldap errors :)
2008-02-21 17:16:17 -05:00
Rob Crittenden
b4c11c9bea
Remove reference to wrong command
...
Clean up language around automatically appending the Kerberos realm
433800
2008-02-21 22:37:36 -05:00
Rob Crittenden
49148dc34a
Redirect users when they don't use the FQDN on both SSL and non-SSL ports
...
We update the mod_nss configuration (nss.conf) during installation to include
ipa-rewrite.conf to handle the SSL side.
433054
2008-02-21 16:25:09 -05:00
Rob Crittenden
84d1e08d76
Become freeipa-0.99.0
2008-02-21 16:11:42 -05:00
Rob Crittenden
3ede5e42a5
Don't clear out the uid from the session until the record has been updated.
2008-02-20 16:57:01 -05:00
Rob Crittenden
4c588b3d5f
Don't let a regular user edit their own active status or manager
...
433384
2008-02-20 23:24:39 -05:00
Rob Crittenden
4bf136d95c
Use basestring class when testing to see if an object is a string to support
...
both Unicode and byte strings.
433651
2008-02-21 11:09:53 -05:00
Rob Crittenden
87d9c037e4
Add some additional error handling
...
433347
2008-02-20 16:31:32 -05:00
Simo Sorce
80feb3aecf
cosmetic fixes
2008-02-21 14:39:50 -05:00
Simo Sorce
ae0eaa0120
Let users write their own password, should fix 433707
2008-02-21 09:51:47 -05:00
Simo Sorce
33b746df58
merge
2008-02-21 09:38:39 -05:00
Simo Sorce
f87db10a07
Purely indentiation, trailing spaces, cosmetic fixes
2008-02-21 09:36:35 -05:00
Rob Crittenden
e368fa1844
Create the selinux installation directory before installing files
2008-02-20 22:14:44 -05:00
Rob Crittenden
75ad48272a
IE 6 doesn't support transparent PNG
...
Remove stray character and a debug line from the CSS
429984
2008-02-20 17:17:21 -05:00
Rob Crittenden
cbb6b5a005
Provide feedback on what is being done during ipa-client-install
...
429541
2008-02-20 17:09:02 -05:00
Rob Crittenden
e58774bf2e
Fix for building on RHEL 5.x.
2008-02-20 12:51:03 -05:00
Simo Sorce
0996e55573
merge
2008-02-20 11:59:45 -05:00
Rob Crittenden
936b84f569
Include and use policy icon in the UI
...
430954
2008-02-20 10:53:31 -05:00
Rob Crittenden
b5272bd8e0
Objects used by new CSS layout.
2008-02-20 10:45:00 -05:00
Simo Sorce
30195fb5fb
Pass in server and domain parameters if provided, so that they are not ignored
2008-02-19 15:57:53 -05:00
Simo Sorce
0ae42b28de
Start ntpd first unless we do not want it.
...
Make sure we do sync the clock leaping to the current correct time.
This avoids problems with bad dates on certificates, etc..
2008-02-20 11:03:46 -05:00
Simo Sorce
46cb6e9bdd
Run ipa-client-install after server install bits
2008-02-20 10:16:19 -05:00
Rob Crittenden
da24953f9a
Warn if a user tries to install a replica on the wrong target machine
...
432691
2008-02-19 10:46:22 -05:00
Rob Crittenden
e31d33619d
Add some error handling for LDAP connection issues
...
Verify the DM password earlier in the process
433368
2008-02-19 10:20:13 -05:00
Rob Crittenden
7e5f1514b2
Only show Delete button for admins, editors and don't let user delete them self
...
Resolves 433382
2008-02-18 22:41:28 -05:00
Rob Crittenden
80a4e94e5b
Verify current domain with user during installation
...
Use that domain when creating replicas
Resolves 432066
2008-02-15 20:47:29 -05:00
Rob Crittenden
c47248c5d8
Update of CSS from Máirín Duffy including some per-object images
2008-02-19 16:43:32 -05:00
Rob Crittenden
65960a2e58
Use the proper access methods in IPA policy subcontroller.
...
Resolves 433062
2008-02-18 17:41:58 -05:00
