Commit Graph

34 Commits

Author SHA1 Message Date
Simo Sorce
48e70a4bf0 Merge with upstream 2007-09-04 15:40:24 -04:00
Simo Sorce
abeda55e34 Add password request for admin user
Set password for admin user using the Directory Mangaer account
and the mozldapldappaswd binary to get and SSL connection
Fix some timeout problems with deploying keytabs
Fix ipa_pwd_extop to actuallt correctly detect an SSL connection
Do not ask for the user to use for the directory unless 'dirsrv' is
 an existing user which may clash, create it silently
2007-08-31 18:40:01 -04:00
Kevin McCarthy
00e299467c Add account deactivation checkbox.
Fix genModList to lowercase all keys and use CIDict.
2007-08-31 10:59:26 -07:00
Simo Sorce
f0ebdce024 Fix copy&paste error, its not the conf files we need access to,
we need to access the generated keytabs
2007-08-30 15:31:27 -04:00
Kevin McCarthy
e9bd8dee3b Change user search to be asynchronous.
This way it returns results even if the search times out.
The find_users() search now returns a counter as the first result, which
is set to -1 if the results are partial.
2007-08-28 16:01:07 -07:00
Kevin McCarthy
ef2dc5cefa Changes for larger data demo.
Add fields to search results
Put result() call inside try block - it's throwing an exception
Trap ADMINLIMIT and SIZELIMIT exceptions
2007-08-28 09:20:12 -07:00
rcritten@redhat.com
eebaa73d3d Implement delete users and groups
Implement adding a group to a group
Some other small fixups
Add new cmd-line tool ipa-delgroup
2007-08-28 13:52:08 -04:00
Karl MacMillan
6eea6664e0 This patch wraps binary data in an xmlrpclib Binary object. This
removes the need for LDIF conversion.  It will make TurboGears direct
code faster, but should keep xmlrpc about the same speed.

The patch also swaps out ldap.cidict for the IPA CIDict class.  IPA code
should only use the CIDict class now.
0001-01-01 00:00:00 +00:00
rcritten@redhat.com
861cda3cb5 Initial support for Groups
Create separate object for Users and Groups (using same base class)
Check for uniqueness before adding new users and groups
Remove user_container from everything but add operations
Abstract out a number of functions that are common across users and groups
Make sure all strings passed in to be in a filter are checked
Add new error message: No modifications specified
2007-08-24 15:42:56 -04:00
rcritten@redhat.com
8879ee173e Handle optional arguments by using the value __NONE__ over XML-RPC.
rpcclient.py must call XML-RPC functions with all arguments.
Removed encode_args and decode_args. They were the source of most of the
  argument pain. Now opts is alwyas appended to the end of the arguments
  so MUST be the last argument in any server-side function (can be None)
Allow the User object to handle unicode data
Small fixes to command-line tools to be friendlier
Broke out get_user() into get_user_by_dn() and get_user_by_uid()
Need to request more than just 'nsAccountLock' attribute when trying to
  see if a user is already marked deleted. If it is blank the record
  coming back is empty. Add 'uid' to the list to guarantee something coming
  back (dn is handled specially)
Added user_container attribute to get_user_* and add_user so the caller
  can specify where in the tree the user will be searched for/added.
Added global default value for user_container
2007-08-23 09:44:00 -04:00
Kevin McCarthy
7691653c0a Create ipaerror module.
Move LDAPError trapping/conversion into the ipaldap module.
Fix xmlrpc layer to encode/decode ipaerrors properly.
Also, implement mid-air collision exception for updates.
2007-08-22 10:30:51 -07:00
Kevin McCarthy
4c8f2346a0 Improved modlist generator. 2007-08-20 16:18:12 -07:00
Kevin McCarthy
a0e2fa00f1 Manual merge changes in for the cidict/ipaclient add_user() 2007-08-17 14:27:54 -07:00
rcritten@redhat.com
05f6a22110 Implement user inactivation
Comment some functions
Add attribute argument to get_user()
2007-08-17 10:03:33 -04:00
rcritten@redhat.com
5f0f23ee91 Ensure that the Apache server is in forked mode
Add ability to update existing users
Try to prevent fetching and setting empty strings
2007-08-14 17:22:05 -04:00
rcritten@redhat.com
cfaa28150b Basic LDAP connection pooling
Implement user search
2007-08-13 16:41:38 -04:00
Simo Sorce
82f24bb490 General fixes.
Do not start ipa_kpasswd by default yet
2007-08-15 21:35:35 -04:00
Simo Sorce
1e59adbe45 in F7 all directory names have changed from fedora-ds to dirsrv
which should also be the name used in DS 8.0, change all occurences
2007-08-15 19:45:18 -04:00
Simo Sorce
9faa5ce77e Use relative .so names for plugin so that lib/lib64 does not get in the way
change the pwd-extop conf ldif to a more sensible name
2007-08-15 18:55:20 -04:00
Simo Sorce
788149e2e5 Activate the passwd extop plugin and ipa-kpasswd daemon 2007-08-15 18:30:15 -04:00
Simo Sorce
5a7c853ec7 export kpasswd keytab during installation process 2007-08-09 16:55:23 -04:00
Simo Sorce
d60f233223 typo 2007-08-09 14:58:28 -04:00
Simo Sorce
a59c36b394 merge in changes from upstream 2007-08-09 14:52:54 -04:00
Simo Sorce
c13bbdeb7a set preauth on kadmin/changepw otherwise the kpasswd can't acquire a ticket 2007-08-08 22:19:03 -04:00
Simo Sorce
fbfee82317 Try to fix dir layout and recover missing files 2007-08-01 15:58:52 -04:00
Simo Sorce
96d292b735 Merge from upstream 2007-08-01 15:26:08 -04:00
Karl MacMillan
b1831b4593 Fix typo / buglets in setup scripts.
Add fallback to ds_newinst.pl.
0001-01-01 00:00:00 +00:00
rcritten@redhat.com
b9b06a2a60 Generate /etc/httpd/conf.d/ipa.conf from a template so the realm can
be set during installation
2007-08-06 10:51:23 -04:00
rcritten@redhat.com
993f76fe60 - Abstracted client class to work directly or over RPC
- Add mod_auth_kerb and cyrus-sasl-gssapi to Requires
- Remove references to admin server in ipa-server-setupssl
- Generate a client certificate for the XML-RPC server to connect to LDAP with
- Create a keytab for Apache
- Create an ldif with a test user
- Provide a certmap.conf for doing SSL client authentication
- Update tools to use kerberos
- Add User class
2007-08-06 10:05:53 -04:00
Karl MacMillan
8cf45633fe Fixed broken patches and server spec. 0001-01-01 00:00:00 +00:00
Karl MacMillan
7d95cd612c Final reorginzation to reflect packaging. 0001-01-01 00:00:00 +00:00
Karl MacMillan
4d656111e6 First part of xml-rpc patch. 0001-01-01 00:00:00 +00:00
Karl MacMillan
e811c87b1c Update dsinstance.py to use setup-ds.pl instead of ds_newinst.pl. 0001-01-01 00:00:00 +00:00
Karl MacMillan
bac241ffc3 More reorgnization. 0001-01-01 00:00:00 +00:00