Commit Graph

65 Commits

Author SHA1 Message Date
John Dennis
4f33d67418 remove radius_client.py, move contents to radius_util.py 2007-11-26 11:12:58 -05:00
John Dennis
2c2069d3ec checkpoint radius client add,modify,find,del working, command line args handled correctly 2007-11-26 09:46:19 -05:00
jdennis@VAIO
9a9a7e4058 clean up attribute names
clean up command line args in ipa-delradiusclient
2007-11-24 11:20:28 -05:00
John Dennis
9a8326c5c1 clean up radius client command line tools 2007-11-23 10:35:22 -05:00
John Dennis
d98686e967 Add radius profile implementations:
get_radius_profile_by_uid
  add_radius_profile
  update_radius_profile
  delete_radius_profile
  find_radius_profiles

Rewrite command line arg handling, now support pair entry, interactive
mode with auto completion, reading pairs from a file, better handling
of mandatory values, better help, long arg names now match attribute
name in pairs

Establish mappings for all attributes and names used in clients and
profiles

Add notion of containers to radius clients and profiles in LDAP

Move common code, variables, constants, and strings into the files
radius_client.py, radius_util.py, ipautil.py to eliminate redundant
elements which could get out of sync if modified and to provide access
to other code which might benefit from using these items in the
future.

Add utility functions:
  format_list()
  parse_key_value_pairs()

Add utility class:
  AttributeValueCompleter

Unify attribute usage in radius ldap schema
2007-11-21 13:11:10 -05:00
John Dennis
087d11af5c map attrs to friendly name 2007-11-14 16:01:27 -05:00
John Dennis
c4dbe6433d add ipa-findradiusclient search 2007-11-14 15:32:08 -05:00
John Dennis
c24da12fe1 radius client modify and delete work 2007-11-14 00:04:19 -05:00
John Dennis
c4bf859bfb move radius client utility code to common radius_client.py so it can be shared 2007-11-13 20:22:18 -05:00
John Dennis
eab5a89d4a ipa-addradiusclient now working 2007-11-13 20:05:02 -05:00
John Dennis
152f8e3392 checkpoint radius client work 2007-11-13 13:06:18 -05:00
Karl MacMillan
957a70e560 Prevent gzip from requesting confirmation.
The current manpage installation gzips the files in
place and requests confirmation before overwriting
existing files. Add -f to prevent prompting. We
should consider not gzipping the files in place.
0001-01-01 00:00:00 +00:00
Rob Crittenden
10917161a7 Use proper method of retrieving attributes 2007-11-01 13:21:13 -04:00
Karl MacMillan
29c0668e98 Bump versions for release. 0001-01-01 00:00:00 +00:00
Karl MacMillan
45346ee3ab Remove multi-value set/add in ipa-usermod.
Calling --add multiple times will accomplish the same
thing without the need for handling splits on ",".
0001-01-01 00:00:00 +00:00
Karl MacMillan
27f0aab667 Rename memberOf to group_members in xml-rpc interface. 0001-01-01 00:00:00 +00:00
Karl MacMillan
3b66d27383 Allow set/add/del to be called multiple times.
Allow the --set/add/del options to be called multiple
times during the same invocation. Also add more robust
checking of errors.
0001-01-01 00:00:00 +00:00
Rob Crittenden
1d6e88565c Add memberOf API call to the XML-RPC interface
Make find-groups use memberOf to have a prettier dispaly of members
2007-10-30 15:07:02 -04:00
Rob Crittenden
402274af4b Allow adding, setting, deleting arbitrary attributes 2007-10-31 09:32:25 -04:00
Rob Crittenden
c116f8d739 Install the delegation tools 2007-10-29 14:16:44 -04:00
Rob Crittenden
6f5b692b5c Fix minor spelling issue 2007-10-29 14:15:21 -04:00
Mark McLoughlin
893e4b24dc imported patch freeipa-require-python-krbv.patch 2008-02-21 15:23:29 +00:00
Rob Crittenden
0d80589bcb Command-line delegation tools with man pages 2007-10-24 13:10:23 -04:00
Rob Crittenden
6b0587726a Actually return a value to the shell 2007-10-19 09:59:07 -04:00
Rob Crittenden
53166669e7 Make distclean work again 2007-10-19 09:53:27 -04:00
Rob Crittenden
91ab2d3893 Add unique exit status to the ipa-find* tools when nothing is found 2007-10-16 12:19:43 -04:00
Rob Crittenden
a4143789da Add option -a to print all attributes
Make sure we don't print out binary data
Remvoe any trailing white space when printing to avoid extra newlines
2007-10-11 10:00:01 -04:00
Rob Crittenden
0a935d5be3 First draft of man pages for the admin tools 2007-10-11 10:49:32 -04:00
Kevin McCarthy
2b38769b50 Combine get_user/group by dn/cn into get_entry_by_cn/dn.
Also a couple double-escaping fixes I missed in the last patch.
2007-10-09 09:26:16 -07:00
rcritten@redhat.com
6aa72b44e4 Do group operations based on the group DN, not the CN
Add new class of errors for connections
Raise an exception if a connection cannot be made due to missing ccache
2007-10-02 16:56:51 -04:00
Simo Sorce
cfac4acf9f Rely more on kerberos.
Don't read ipa.conf to get the realm, the kerberos libs do that for you.
Use the krbPrincipalName to change passwords
Make it possible to specify the principal at user creation.
Mail is not a required attribute so far, don't require it.
2007-10-01 17:33:16 -04:00
rcritten@redhat.com
7b96973711 Give ipa-adduser, ipa-addgroup and ipa-usermod an interactive mode
Add ipa-passwd tool
Add simple field validation package
This patch adds a package requirement, python-krbV. This is needed to
 determine the current user based on their kerberos ticket.
2007-09-21 10:24:36 -04:00
rcritten@redhat.com
2035297e22 Add a missing exception catcher 2007-09-24 15:22:17 -04:00
Simo Sorce
fbfefe6b0e Merge conflicts between rob and kevin patches 2007-09-20 16:58:54 -04:00
Kevin McCarthy
f17071533a Implement asynchronous search for groups.
Use the filter generation code to search on multiple fields.
2007-09-19 08:42:34 -07:00
Simo Sorce
5898ae527a In the TCP case there is an extra (redundant) lenght
field before the packet data, address the problem.
2007-09-12 11:51:16 -04:00
rcritten@redhat.com
ed6ab17c9c Add function to allow user's to set/reset their kerberos password
Remove some unused calls to retrieve the current realm
2007-09-11 02:48:53 -04:00
Karl MacMillan
d0c856d547 Reset version numbers for next milestone. 0001-01-01 00:00:00 +00:00
Karl MacMillan
d15ad0f26a Update version numbers for release. 0001-01-01 00:00:00 +00:00
rcritten@redhat.com
2377e8bcb0 Add group command-line tools to the Makefile
Updated installation instructions
2007-09-07 17:49:44 -04:00
rcritten@redhat.com
9b30f46744 Enable LDAP SASL authentication using a forwarded kerberos ticket
Handle both SASL auth and proxied authentication
Refactor LDAP connection code to be simpler
Other small bug fixes
2007-09-05 13:14:23 -04:00
Kevin McCarthy
c85c8eede3 Add 'test' target to makefiles. Hook up ipautil tests to run. 2007-09-04 10:22:45 -07:00
rcritten@redhat.com
eebaa73d3d Implement delete users and groups
Implement adding a group to a group
Some other small fixups
Add new cmd-line tool ipa-delgroup
2007-08-28 13:52:08 -04:00
rcritten@redhat.com
861cda3cb5 Initial support for Groups
Create separate object for Users and Groups (using same base class)
Check for uniqueness before adding new users and groups
Remove user_container from everything but add operations
Abstract out a number of functions that are common across users and groups
Make sure all strings passed in to be in a filter are checked
Add new error message: No modifications specified
2007-08-24 15:42:56 -04:00
rcritten@redhat.com
8879ee173e Handle optional arguments by using the value __NONE__ over XML-RPC.
rpcclient.py must call XML-RPC functions with all arguments.
Removed encode_args and decode_args. They were the source of most of the
  argument pain. Now opts is alwyas appended to the end of the arguments
  so MUST be the last argument in any server-side function (can be None)
Allow the User object to handle unicode data
Small fixes to command-line tools to be friendlier
Broke out get_user() into get_user_by_dn() and get_user_by_uid()
Need to request more than just 'nsAccountLock' attribute when trying to
  see if a user is already marked deleted. If it is blank the record
  coming back is empty. Add 'uid' to the list to guarantee something coming
  back (dn is handled specially)
Added user_container attribute to get_user_* and add_user so the caller
  can specify where in the tree the user will be searched for/added.
Added global default value for user_container
2007-08-23 09:44:00 -04:00
Kevin McCarthy
cb03961ff1 Convert add_user to take a user instead of a dict. 2007-08-20 12:10:50 -07:00
Kevin McCarthy
66d3f1e730 Embed origiginal values inside user, and have update_user pass in a user
object.  Based on rcrit's original patch.
Push scalar to list value conversion inside funcs.py.
2007-08-20 10:50:11 -07:00
Kevin McCarthy
a0e2fa00f1 Manual merge changes in for the cidict/ipaclient add_user() 2007-08-17 14:27:54 -07:00
Karl MacMillan
8d36f03f83 Merge simple fix from Rob Crittenden. 0001-01-01 00:00:00 +00:00
rcritten@redhat.com
3daff667ac Pass string changes as a list so modifyModList works properly 2007-08-17 13:46:07 -04:00