Commit Graph

1890 Commits

Author SHA1 Message Date
Simo Sorce
cfac4acf9f Rely more on kerberos.
Don't read ipa.conf to get the realm, the kerberos libs do that for you.
Use the krbPrincipalName to change passwords
Make it possible to specify the principal at user creation.
Mail is not a required attribute so far, don't require it.
2007-10-01 17:33:16 -04:00
Kevin McCarthy
5750ebdd83 Assorted UI fixes:
- Change sort functions to be on entities, so can use on the view pages too
- Fix bug: empty ajax search on useredit blows up
- Filter illegal characters from suggest uid/email methods
- Rename first/last name fields
- Make default font family sans-serif
- Speed up effect appear/fade rendering
- Add buttons to top and bottom of pages
- Make grouplist sortable
- Add noscript warning to welcome page
2007-10-02 10:49:44 -07:00
Kevin McCarthy
050157ace0 Add group management to the newgroup page. 2007-10-01 13:27:40 -07:00
Kevin McCarthy
59ee94e378 Allow group selection on the create user page. 2007-10-01 11:26:22 -07:00
Kevin McCarthy
dbf8c1aeb9 Add group management to the user edit page.
Added a couple more API calls to make the inverse operations easier.
2007-09-28 16:01:42 -07:00
rcritten@redhat.com
0cfccd0f8c Don't include opts in any public argument lists. It is used internally only. 2007-10-01 13:34:43 -04:00
Simo Sorce
2ef71a85d0 Check passwords are not empty 2007-09-28 14:55:28 -04:00
Simo Sorce
93deded293 IPv6ify, untested 2007-09-28 03:21:17 -04:00
kmacmill@speckledhen.hosted.redhat.com
ceb58d7288 Added tag milestone_4 for changeset 8227ce764d491a942389f7a9f654f69d2701cb12 2007-10-02 12:18:33 -04:00
Kevin McCarthy
b02e9bfd1f Extract the shared dynamic edit code.
Rename groupeditsearch.kid to dynamiceditsearch.kid
2007-09-28 11:55:56 -07:00
Kevin McCarthy
8323959c3c Sort the group members on the view and edit group pages. 2007-09-28 09:59:04 -07:00
Kevin McCarthy
afb9a3c0a9 Refactoring to allow better member rendering.
Created a MemberDisplayInfo to hold the info needed to render a member.
Changed round trip persistance to use that class.
Created a single renderMemberInfo method to render the members.
Changed dynamic as well as static lists to use renderMemberInfo.
Lastly, render groups members in italics.
Change view group to render group members in italics.
2007-09-28 08:53:10 -07:00
Kevin McCarthy
d13c6efc40 Adds nested group handling to the view and edit group pages.
Renames the ajax seach page, because it's tightly bound to the group edit page.
This isn't super polished, but the basic functionality is there.
2007-09-27 14:51:35 -07:00
Kevin McCarthy
0431a536e5 patch queue: add_filters.patch 2007-09-27 16:07:05 -07:00
Kevin McCarthy
572b3e9fdd Make timelimit a parameter to the find methods. 2007-09-27 15:51:26 -07:00
Kevin McCarthy
d95b47232d patch queue: group_users_use_dns.patch 2007-09-27 11:27:33 -07:00
Karl MacMillan
679343594d Install the web gui
Install the turbogears web gui including an init script. This
patch includes a few related changes:

* create a production configuration
* rename the web gui startup scrip to ipa-webgui
* add an init script
* chkconfig on the ipa-webgui init script
* make the start script properly daemonize the app when not
  in a development directory.
* Install everything to the correct places (/usr/sbin/ipa-webgui
  and /usr/share/ipa/ipagui mainly).

There are some things still left to do:

* Sort out the logging - the config needs to be adjusted so
  that logging messages end up in /var/log.
0001-01-01 00:00:00 +00:00
Karl MacMillan
50d12d6d2e Misc small fixes
* Remove the rpmbuild tree with the dist-clean target.
* Move ipa-server-setupssl from /usr/sbin to /usr/share/ipa
* Check in requirement change for generated freeipa-python.spec
* Fix interactive hostname in ipa-server-install.
0001-01-01 00:00:00 +00:00
Karl MacMillan
22710a8dce Make apache work with selinux
The default configuration of the apache selinux policy doesn't allow
apache to connect to the turbogears gui. This sets the correct
boolean to allow that connection.
0001-01-01 00:00:00 +00:00
Kevin McCarthy
24c22a2ebc Misc small fixes:
- Members of groups are clickable
- Combine name and uid into a single column in find users
- Remove license plate from searching
- Mailto links on user emails
- Add timelimit to finds.  This is experimental...
- Fix usersearch to only search on objectClass=Person
- Change search to use get parameter
2007-09-25 11:25:48 -07:00
Kevin McCarthy
1725397a53 Adds methods to manipulate groups by dns.
Renamed some of the user_group parameters to be self-evident.
Binary wrapping isn't necessary on strings, so removed from xmlrpc calls.
2007-09-26 15:47:34 -07:00
rcritten@redhat.com
f8eda3da3e Fix a couple of XML-RPC functions that were missing the opts argument
Include a kerberized XML-RPC client that will list the XML-RPC API
2007-09-26 16:31:43 -04:00
Kevin McCarthy
1a7ef0d135 patch queue: helptext.patch 2007-09-26 13:08:29 -07:00
Kevin McCarthy
313f9bc4a0 Add IPA icon file. 2007-09-25 16:54:19 -07:00
Kevin McCarthy
fa7759684f Adds manager and direct reports to usershow page.
Fixes a bug with the group by member where is wasn't trapping not found errors.
2007-09-25 15:44:49 -07:00
Kevin McCarthy
765279d82b Show the list of groups a user belongs to. 2007-09-25 13:35:43 -07:00
rcritten@redhat.com
0258d01792 Use a different directory for test programs 2007-09-25 09:50:30 -04:00
rcritten@redhat.com
0b65e95b57 Make doing basic testing of Kerberos ticket forwarding and system setup
easier.
2007-09-25 08:37:45 -04:00
rcritten@redhat.com
fddae7a8a2 Fix error when using with TurboGears 2007-09-25 08:36:23 -04:00
rcritten@redhat.com
2807525128 Do per-user browser configuration 2007-09-24 17:29:51 -04:00
rcritten@redhat.com
a53c4f107f Add a per-user re-configuration script
rename browsersetup.sh to globalsetup.sh
2007-09-24 15:50:38 -04:00
rcritten@redhat.com
cf29177901 First crack at automated browser configuration. Requires running a
script to set things up on the client machine.
2007-09-24 15:26:35 -04:00
rcritten@redhat.com
337f0cf853 Install the error web pages 2007-09-24 15:25:44 -04:00
rcritten@redhat.com
e606ad5606 Show (hopefully) useful information if the Kerberos connection fails. 2007-09-24 15:20:34 -04:00
rcritten@redhat.com
a1196902aa Print the request environment for debugging purposes. 2007-09-24 15:24:44 -04:00
rcritten@redhat.com
2fec56d679 Enable LDAP debugging using the mod_python Apache configuration directive
PythonOption IPADebug On/Off
2007-09-21 14:39:52 -04:00
rcritten@redhat.com
7b96973711 Give ipa-adduser, ipa-addgroup and ipa-usermod an interactive mode
Add ipa-passwd tool
Add simple field validation package
This patch adds a package requirement, python-krbV. This is needed to
 determine the current user based on their kerberos ticket.
2007-09-21 10:24:36 -04:00
rcritten@redhat.com
919d037189 Add a failed login page. In theory it should never been seen but it makes
things nicer
Remove the login page
Remove the login link from master.kid
2007-09-21 10:58:40 -04:00
rcritten@redhat.com
e41bb1d6fe Don't fall back on proxy authentication. We don't generate the certificates
anymore and that failure just causes more confusion.
2007-09-24 15:23:50 -04:00
rcritten@redhat.com
2035297e22 Add a missing exception catcher 2007-09-24 15:22:17 -04:00
Kevin McCarthy
5cdfc5bd3b Add set_krbccache() calls to new controller methods.
Small fix to proxyprovider for anonymous case.
2007-09-20 14:53:23 -07:00
rcritten@redhat.com
370500ab1a Remove support for LDAP proxy connections 2007-09-20 09:01:23 -04:00
Simo Sorce
e16e215cdd Merge with upstream 2007-09-20 17:11:01 -04:00
Simo Sorce
fbfefe6b0e Merge conflicts between rob and kevin patches 2007-09-20 16:58:54 -04:00
Simo Sorce
3fd4b9ba2c Initial support for confiuguring a DNS Server during installation.
It's not perfect yet but good enough to include it.
2007-09-20 15:10:21 -04:00
Kevin McCarthy
4e79c37c60 Add password changing call to web gui. 2007-09-19 15:59:01 -07:00
Kevin McCarthy
036cf58042 Handle add/remove failures a little bit better.
Still some refinements that can be done, but at least it shows the failures
now.
2007-09-19 13:43:52 -07:00
Kevin McCarthy
f17071533a Implement asynchronous search for groups.
Use the filter generation code to search on multiple fields.
2007-09-19 08:42:34 -07:00
Kevin McCarthy
6b3d1e85da Add client-side search limit parameter for user search.
Limit editgroup user ajax search.
Minor UI cleanup for editgroup.
2007-09-18 14:58:30 -07:00
Kevin McCarthy
c4998d3902 Fixes to the edit protected checkbox.
- Make checkbox sticky on round trips
- Make required fields validate when checkbox is checked.
2007-09-18 10:54:53 -07:00