Commit Graph

660 Commits

Author SHA1 Message Date
Endi S. Dewata
4ee6882e9f Removed unused code. 2011-02-07 11:31:21 -05:00
Endi S. Dewata
348d734c59 Restructuring details page.
Previously the IPA.details_list_section can only be used with widgets
that generates <dd> tag because it uses the following structure:

<dl>
  <dt>Telephone Number:</dt>
  <span name="teleponenumber">
    <dd>111-1111</dd>
    <dd>222-2222</dd>
  </span>
</dl>

The <dd> tag was previously used to handle multi-valued attributes.
Since multi-valued attributes are now handled by the recently added
IPA.multivalued_text_widget, the structure can be changed as follows:

<dl>
  <dt>Telephone Number:</dt>
  <dd>
    <span name="telephonenumber">
      <div>111-1111</div>
      <div>222-2222</div>
    </span>
  </dd>
</dl>

This allows IPA.details_list_section to be used with any widgets
without requiring the <dd> tag.
2011-02-07 11:31:17 -05:00
Adam Young
a6849ef2ba removed duplicate postion
olny need to specify once
2011-02-04 16:13:14 -05:00
Endi S. Dewata
bd493d47a7 Added multi-valued text widget.
A multi-valued text widget has been created to replace the old
IPA.details_field. The old code was designed to handle all data
types, and it uses one <dd> tag for each value, so the code is
still incomplete and complex. The new code was designed to handle
only multi-valued text attributes, and it uses one <dd> tag for
all values, so it's easier to maintain. There are already other
widgets that can be used to handle other data types.

The new code supports line-level undo and line-out for removal
like the old code, but there are some changes:
 - Undoing a newly added line will remove the entire line.
 - Editing the value of a removed line will cancel the removal.
 - It provides 'undo all' link to reset the entire attribute.

The old code will be cleaned up in a subsequent patch.
2011-02-03 20:09:15 -05:00
Adam Young
ff646ec3a4 favicon
adds a favicon that is the freeipa cube
2011-02-03 15:04:23 -05:00
Endi S. Dewata
ce995bf1b9 Fixed CSS error. 2011-02-03 11:02:54 -05:00
Martin Kosek
4880598fbd ipa-server-install inconsistent capitalization
A cosmetic patch to IPA server installation output aimed to make
capitalization in installer output consistent. Several installation
tasks started with a lowercase letter and several installation
task steps started with an uppercase letter.

https://fedorahosted.org/freeipa/ticket/776
2011-02-03 10:34:01 -05:00
Endi S. Dewata
a686f36906 Fixed section expand/collapse in user details.
The section names were missing from the entity definition.
2011-02-03 09:04:17 -05:00
Adam Young
afce50a3e4 city and state
using approapriate lcoality and state abbreviations for the attributes: l and st
2011-02-02 16:59:44 -05:00
Endi S. Dewata
d389e054f6 Added undo for permission target.
https://fedorahosted.org/freeipa/ticket/885
2011-02-02 15:56:50 -05:00
Jakub Hrozek
bb56285f6b IPv6 enhancements
* Make host-add, host-del and reverse zone creation IPv6 aware
* Make Bind listen on IPv6 interfaces, too

https://fedorahosted.org/freeipa/ticket/398
2011-02-02 12:39:35 -05:00
Adam Young
2518612b0d core widget unit tests baseline set of unit tests for checking that each widget conforms to the contract 2011-02-02 10:59:46 -05:00
Rob Crittenden
275998f6bd Add support for tracking and counting entitlements
Adds a plugin, entitle, to register to the entitlement server, consume
entitlements and to count and track them. It is also possible to
import an entitlement certificate (if for example the remote entitlement
server is unaviailable).

This uses the candlepin server from https://fedorahosted.org/candlepin/wiki
for entitlements.

Add a cron job to validate the entitlement status and syslog the results.

tickets 28, 79, 278
2011-02-02 10:00:38 -05:00
Rob Crittenden
f3d04bfc40 Fix installing with an external CA and wait for dogtag to come up
There wasn't an exception in the "is the server already installed"
check for a two-stage CA installation.

Made the installer slightly more robust. We create a cache file of
answers so the next run won't ask all the questions again. This cache
is removed when the installation is complete. Previously nothing would work
if the installer was run more than once, this should be fixed now.
The cache is encrypted using the DM password.

The second problem is that the tomcat6 init script returns control
before the web apps are up. Add a small loop in our restart method
to wait for the 9180 port to be available.

This also adds an additional restart to ensure that nonces are disabled.

ticket 835

revise
2011-02-01 17:52:57 -05:00
Adam Young
c704ae605a undo entity widget adds line level undo for the entity-select-widget now shows the undo link on filter change does JSON queries on keyup instead of keypress https://fedorahosted.org/freeipa/ticket/886 2011-02-01 16:37:42 -05:00
Rob Crittenden
c6ef39b2c0 Add new schema to store information about permissions.
There are some permissions we can't display because they are stored
outside of the basedn (such as the replication permissions). We
are adding a new attribute to store extra information to make this
clear, in this case SYSTEM.

ticket 853
2011-02-01 16:00:41 -05:00
Adam Young
ec59e618da use entity select widget for permissions
https://fedorahosted.org/freeipa/ticket/879
2011-02-01 14:56:41 -05:00
Simo Sorce
5c6232e24d Force sync in both direction before changing replication agreements
Fixes: https://fedorahosted.org/freeipa/ticket/887
2011-02-01 13:49:41 -05:00
Endi S. Dewata
8cff0812d5 Fixed attribute name for delegation member group. 2011-02-01 12:03:45 -05:00
Endi S. Dewata
613a3d0f56 Added undo for permission rights.
https://fedorahosted.org/freeipa/ticket/884
2011-02-01 08:30:35 -05:00
Endi S. Dewata
7c23d5aff9 Fixed missing object reference. 2011-01-31 23:29:07 -05:00
Adam Young
f85771b2a7 aci association fixes
declarative priv definition
fixes role_add_privilege and privilege_add_permisison
2011-01-31 23:09:13 -05:00
Jakub Hrozek
0dce1bc9e1 Add an address for a nameserver when a new zone is created during install
https://fedorahosted.org/freeipa/ticket/881
2011-01-31 22:15:45 -05:00
Adam Young
a7e89190fa association fixes
PLaces custom association facets into the proper facet groups
usesthe associators if they are specifiedfor an association
2011-01-31 20:42:09 -05:00
Simo Sorce
cc9abf5d38 Use a common group for all DS instances
Also remove the option to choose a user.
It is silly to keep it, when you can't choose the group nor the CA
directory user.

Fixes: https://fedorahosted.org/freeipa/ticket/851
2011-01-31 16:35:53 -05:00
Endi S. Dewata
a629f3f4c7 Removed permission description from UI
https://fedorahosted.org/freeipa/ticket/877
2011-01-31 15:06:47 -05:00
Adam Young
f89860b77e reduce scope of remove link it was global https://fedorahosted.org/freeipa/ticket/212 2011-01-31 14:31:44 -05:00
Rob Crittenden
bf4f77d985 Rename permissions and privileges to be more readable.
This also drops description from permissions since it seems redundant and
fixes up the help text a little.

ticket 792
2011-01-31 13:17:38 -05:00
Adam Young
c281e786c8 widget unit tests
unit test for basic functionality, text, and checkbox widgets
2011-01-31 13:12:53 -05:00
Endi S. Dewata
987507efd0 Fixed IPA.widget's load, save, and is_dirty.
This patch fixes the problem leaving the user details page.
2011-01-30 15:32:59 -05:00
Adam Young
de28abc236 delegation work around
Since the delegation enityt is using membergroup as the property name at this stage, we can use that as the value until the pluing is consistant
2011-01-29 23:16:08 -05:00
Endi S. Dewata
f5e6d01916 Fixed permission reset and is_dirty unit test
The reset and is_dirty functionality for permission has been fixed.
New widgets have been created for select and a collection of checkboxes.
New test data files have been added for each target type.
2011-01-29 22:13:15 -05:00
Adam Young
20e742d355 populate attribute table for delegation add 2011-01-29 22:08:27 -05:00
Endi S. Dewata
8df5202940 Fixed permission reset and is_dirty.
The reset and is_dirty functionality for permission has been fixed.
New widgets have been created for select and a collection of checkboxes.
New test data files have been added for each target type.
2011-01-29 21:23:01 -05:00
Adam Young
e633dd81dd placeholder function
ipa_target_section does not overload is_dirty, and it alwayrs returns true, meaning you can never leave the page once you visit it.

THis commit pushes a simple placeholder function that always returns fales.  Follow on work will be required to correctly inplement the is_dirty functonality
2011-01-29 14:24:00 -05:00
Endi S. Dewata
e806f32cae Add permission dialog adjustments.
The IPA.dialog has been modified to support sections. The add
dialog for permission has been modified to include the target
section. The base dialog classes have been moved from widget.js
into a new file called dialog.js.

This patch also includes ayoung's fix for parameter name and
format for the permission attributes.

https://fedorahosted.org/freeipa/ticket/791
2011-01-29 13:36:03 -05:00
Rob Crittenden
359d54e741 Don't perform some API self-tests in production mode for performance reasons
The API does a fair number of self tests and locking to assure that the
registered commands are consistent and will work. This does not need
to be done on a production system and adds additional overhead causing
somewhere between a 30 and 50% decrease in performance.

Because makeapi is executed when a build is done ensure that it is
executed in developer mode to ensure that the framework is ok.

ticket 751
2011-01-28 18:49:17 -05:00
Adam Young
fd1d0857b5 unmatched aciattrs
instead of reporting an error on unmatched aciattrs, append them to the table.
2011-01-28 17:01:19 -05:00
Adam Young
3625a1e88a services list
Declaritive Service definition
Fixed a problem with multiple calls to create breaking the link between the select box and the text box
swapped the select and the text

https://fedorahosted.org/freeipa/ticket/442
2011-01-28 14:57:06 -05:00
Endi S. Dewata
b96138ba56 Fixed delegation UI issues
This patch fixes several issues in delegation UI:

When adding a new delegation, only the first attribute selected
was saved. Now all attributes will be saved properly.

When loading the details page, the custom widgets did not store
the original values properly so is_dirty() did not work correctly.
Now this has been fixed except for the memberof attribute because
of these issues:
 - https://fedorahosted.org/freeipa/ticket/869
 - https://fedorahosted.org/freeipa/ticket/870

When saving the details page, the attrs were saved as an array
which was rejected by the server. Now it is stored as comma-
separated list.
2011-01-28 14:15:43 -05:00
Simo Sorce
4486341c83 Address entryusn initialization on replica installation
Fixes: https://fedorahosted.org/freeipa/ticket/637
2011-01-28 13:58:43 -05:00
Simo Sorce
86209d5248 Put some safeguards against misconfiguration on the kdc account
Ticket: https://fedorahosted.org/freeipa/ticket/862
2011-01-28 13:55:57 -05:00
Adam Young
828cd5f11a jsl warnings 2011-01-28 10:37:49 -05:00
Adam Young
c75f332af9 aci rights widget
Fixes is_dirty and save

https://fedorahosted.org/freeipa/ticket/77
https://fedorahosted.org/freeipa/ticket/667
2011-01-28 10:37:49 -05:00
Adam Young
ffcf10c832 default disable delete 2011-01-28 10:37:49 -05:00
Adam Young
114c238a9b entity filter text 2011-01-28 10:37:49 -05:00
Martin Kosek
b9dbd693de modifyprivilegemembership permission has nestedgroup OC
modifyprivilegemembership permission object class in LDAP should be
groupofnames, not nestedgroup.

https://fedorahosted.org/freeipa/ticket/858
2011-01-28 10:28:37 -05:00
Jan Zeleny
884f43f0db Add support for account unlocking
This patch adds command ipa user-unlock and some LDAP modifications
which are required by Kerberos for unlocking to work.

Ticket:
https://fedorahosted.org/freeipa/ticket/344
2011-01-28 10:23:02 -05:00
Jr Aquino
7b04b2240b block anonymous access to sudo info https://fedorahosted.org/freeipa/ticket/865 2011-01-27 22:22:38 -05:00
Simo Sorce
3cb33d74ae Make sure all DS instances are managed by ipactl
Fixes: https://fedorahosted.org/freeipa/ticket/860
2011-01-27 17:49:30 -05:00