Commit Graph

4141 Commits

Author SHA1 Message Date
Rob Crittenden
1ebe3c1d12 When setting a host password don't set krbPasswordExpiration.
This can cause problems if a host is enrolled, unenrolled and a password
set. The password will be marked as expired like all new passwords are.

https://fedorahosted.org/freeipa/ticket/1526
2011-07-29 10:27:15 +02:00
Endi S. Dewata
51cd0c916b Added association facets for HBAC and sudo.
The HBAC service, HBAC service group, sudo command and sudo command
group have been modified to show the associations as facets.

Ticket #1536
2011-07-28 21:40:03 -04:00
Endi S. Dewata
1983193d47 Fixed missing memberof definition in HBAC service.
The HBAC service class has been modified to define the memberof
relationship with HBAC service group.

Ticket #1546
2011-07-28 21:40:03 -04:00
Endi S. Dewata
be17fed8c4 Fixed problem unprovisioning service.
The IPA.service_provisioning_status_widget has been modified to
execute the disable command with the right entity name.

Ticket #1543
2011-07-28 21:47:07 +00:00
Rob Crittenden
324777d67c Fix message in test case for checking minimum values 2011-07-28 02:03:56 -04:00
Adam Young
970018f206 dns section header i18n.
https://fedorahosted.org/freeipa/ticket/1493
2011-07-28 19:11:17 +00:00
Endi S. Dewata
ab35f38e57 Fixed missing section header in sudo command group.
The sudo command group details page has been fixed to use the
correct label name.

Ticket #1537.
2011-07-28 19:11:01 +00:00
Adam Young
b36df6e9b9 removing setters setup and init
change widget and widget unit tests to hold on to entity, not entity name.
    Replacing entity_name with entity.name  in most places.
       The one exception is columns for table_widget.
       Widgets that refer to other entities have to have late resolution of the entity object, due to circular dependencies.

    cleanup entity assignment.
    removed template and layout,
    merged setup into create
    adder dialogs adjust height for external
    removed init from widget, isection, association, facet, host and service

    Make unit tests use factory.
    fix functional tests to click find link correctly.
    tweak to activation test, but still broken.
    moved initialization code to the end
    use --all for hbacrule find, so the type shows up now

    fixed dns exception code and exception handling for get_entity
    replace metadata look up with value from entity.
    fixed author lines
    removed duplicate columns in managed by facets.
    tweak to nav fix in order to initialize tab.
    more defensive code
    update metadata for true false
    one line init for entity_name in widget
    move init code to end of constructor functions
    moved constants to start of function for adder_dialog
    external fields for dialogs initialized at dialog creation
    sudo sections: move add fields and columns to widget definition.

   The parameter validation in IPA.column ...This is precondition checking.  Note that it merely throws an exception if the entity_name is not set.  I want this stuff at the top of the function so that it is obvious to people looking to use them what is required.  I added a comment to make this clear, but I'd like to keep precondition checking at the top of the function.

   decreased the scope of the pkey_name and moved the initiailzation fof columns into the setup_column function for association_tables

   return false at the end of click handler

   removed blank labels in sudo command section

   fix radio buttons for sudo category

   fixed table side for adder dialogs with external fields
    comments for future direction with add_columns

    https://fedorahosted.org/freeipa/ticket/1451
    https://fedorahosted.org/freeipa/ticket/1462
    https://fedorahosted.org/freeipa/ticket/1493
    https://fedorahosted.org/freeipa/ticket/1497
    https://fedorahosted.org/freeipa/ticket/1532
    https://fedorahosted.org/freeipa/ticket/1534
2011-07-28 14:17:25 -04:00
John Dennis
264ed38fa2 Make AVA, RDN & DN comparison case insensitive. No need for lowercase normalization.
Replace deepcopy with constructor (i.e. type call)
Can now "clone" with configuration changes by passing object
of the same type to it's constructor, e.g.
dn1 = DN(('cn', 'foo'))
dn2 = DN(dn1)
dn2 = DN(dn1, first_key_match=False)

Remove pairwise grouping for RDN's. Had previously removed it
for DN's, left it in for RDN's because it seemed to make sense
because of the way RDN's work but consistency is a higher goal.

Add keyword constructor parameters to pass configuration options.

Make first_key_match a configuration keyword.

Updated documentation.

Updated unit test.

FWIW, I noticed the unittest is now running 2x faster, not sure why,
removal of deepcopy? Anyway, hard to argue with performance doubling.
2011-07-27 20:58:48 -04:00
Martin Kosek
18aa73e06e Fix invalid issuer in unit tests
Fix several test failures when issuer does not match the one
generated by make-testcert (CN=Certificate Authority,O=<realm>).

https://fedorahosted.org/freeipa/ticket/1527
2011-07-27 20:56:16 -04:00
Endi S. Dewata
1b09ca53a2 Fixed hard-coded label in Find button.
The IPA.adder_dialog has been modified to use translated label for
the Find button.
2011-07-28 00:01:45 +00:00
Endi S. Dewata
a9a9f00aa9 Fixed hard-coded labels in sudo rules.
The sudo rule interface has been modified to remove unused labels
and use translated dialog box title.

Ticket #1518
2011-07-28 00:01:27 +00:00
Endi S. Dewata
d7e790dd07 Fixed problem setting host OTP.
The handler for host 'Set OTP' button has been modified to obtain
the primary key from the entity and return false to stop the normal
event processing.

Ticket #1511
2011-07-28 00:01:21 +00:00
Rob Crittenden
62445b8673 Don't leave dangling map if adding an indirect map fails
When using the add_indirect helper we create a new map and then add a key
for it all in one step. If adding the key fails for any reason be sure to
remove the map we added.

https://fedorahosted.org/freeipa/ticket/1520
2011-07-27 00:02:28 -04:00
Jan Cholasta
a2641254fe Fix external CA install.
ticket 1523
2011-07-26 22:30:21 -04:00
Martin Kosek
e7118a5f28 Fix automountkey commands summary
The summary value was set to primary key. However, the primary key
may contain also an info option as a workaround for multiple direct
maps problem.

This patch sets the result 'value' and thus summary text to
expected and consistent value.

https://fedorahosted.org/freeipa/ticket/1524
2011-07-27 18:05:26 +02:00
Endi S. Dewata
61ff6ff107 Fixed problem bookmarking Policy/IPA Server tabs
When opening a bookmark, each tab level will be updated separately
from top to bottom according to the URL state. The navigation code
has been modified to recognize when an ancestor tab is being updated
and not change the URL state.

Ticket #1521
2011-07-26 17:06:01 -04:00
Rob Crittenden
87821f2049 Revert use of 'can be at least' to 'must be at least' in minvalue validator
BZ https://bugzilla.redhat.com/show_bug.cgi?id=723969
2011-07-26 01:58:41 -04:00
Petr Vobornik
9a4ce988df fixed empty dns record update
https://fedorahosted.org/freeipa/ticket/1477

Redirection after updating empty DNS Record (which is deleted).
Added hook to details facet for post update operation.
2011-07-25 23:06:59 -04:00
Jan Cholasta
9e7a3e7f3c Make sure that hostname specified by user is not an IP address.
ticket 1375
2011-07-25 01:47:52 -04:00
Endi S. Dewata
53ab352b4a New icons for entitlement buttons
The entitlement facets have been modified to use the new icons
provided by Kyle Baker.

Ticket #1425
2011-07-25 14:02:39 -04:00
Rob Crittenden
3fe36a63b6 Add an arch-specific Requires on cyrus-sasl-gssapi
If you had a 64-bit system and installed a 32-bit version of IPA then
ipa-getkeytab probably wouldn't work because yum wouldn't know to pull
in the 32-bit version of cyrus-sasl-gssapi.

https://fedorahosted.org/freeipa/ticket/1499
2011-07-24 19:58:03 -04:00
Martin Kosek
1897f12bc2 Fix man page ipa-csreplica-manage
Fix references to ipa-replica-manage in ipa-csreplica-manage.

https://fedorahosted.org/freeipa/ticket/1519
2011-07-25 10:55:33 +02:00
Rob Crittenden
a49d294845 Don't check for leading/trailing spaces in a File parameter
https://fedorahosted.org/freeipa/ticket/1505
2011-07-25 09:10:27 +02:00
Adam Young
cf161509e5 move dns to identity tab
fix JSL warning
2011-07-22 17:04:11 -04:00
Endi S. Dewata
7b73fa7bb0 Fixed click handlers on certificate buttons.
The click event handlers for certificate buttons have been fixed
to stop standard event processing which causes the page to change.
2011-07-22 16:29:53 -04:00
Adam Young
4ae7edebaf remove hardcoded DNS label for record name.
https://fedorahosted.org/freeipa/ticket/1493
2011-07-22 16:25:16 -04:00
Endi S. Dewata
28b9288c51 Fixed navigation unit test.
The mock-up get_state() has been modified to return an empty object
if it's called without parameter. It's the same as $bbq.getState().
2011-07-22 18:55:39 +00:00
Endi S. Dewata
740bacdfb9 Fixed navigation problems.
The navigation code has been modified store the facet's state
separately in the facet object itself. The path state is stored
in the navigation object. When the path is changed to view a new
facet, only the path and the state of the new facet will be shown
in the URL, thus keeping the URL short.

This fixes pagination, bookmark and search filter problems as well.

Ticket #1507, 1516, 1517
2011-07-22 12:29:55 -04:00
Endi S. Dewata
38ed284054 Fixed problem with navigation state loading.
The select event handler in the navigation tab has been modified to
distinguish the source of the event. If the event is triggered by
URL hash change, it will use the state specified in the URL. If the
event is triggered by a mouse click, it will use the state stored
internally.
2011-07-22 12:25:06 -04:00
Endi S. Dewata
ca7395c353 Refactored IPA.current_facet().
The IPA.current_facet() has been merged into IPA.entity.setup()
and replaced by IPA.entity.get_facet(). The setup() will read the
current facet's name from the <entity>-facet URL parameter and store
the facet object in the entity object. The get_facet() without any
parameter will return the current facet object.
2011-07-22 12:13:10 -04:00
Jan Cholasta
df7ee2ccf5 Fix ipa-compat-manage not working after recent ipa-nis-manage change.
ticket 1147
2011-07-22 10:38:49 +02:00
Rob Crittenden
abb5ee22d2 Autofill the default revocation reason
https://fedorahosted.org/freeipa/ticket/1514
2011-07-22 08:57:31 +02:00
Rob Crittenden
506cbaa1fb Hide the HBAC access type attribute now that deny is deprecated.
It won't appear in the UI/CLI but is still available via XML-RPC.
allow is the default and deny will be rejected.

https://fedorahosted.org/freeipa/ticket/1495
2011-07-21 01:11:45 -04:00
Jakub Hrozek
1554c9da68 Remove wrong kpasswd sysconfig 2011-07-21 00:41:50 -04:00
John Dennis
ad3cf68ac2 Ticket 1485 - DN pairwise grouping
The pairwise grouping used to form RDN's and AVA's proved to be
confusing in practice, this patch removes that functionality thus
requiring programmers to explicitly pair attr,value using a tuple or
list.

In addition it was discovered additional functionality was needed to
support some DN operations in freeipa. DN objects now support
startswith(), endswith() and the "in" membership test. These functions
and operators will accept either a DN or RDN.

The unittest was modified to remove the pairwise tests and add new
explicit tests. The unittest was augmented to test the new
functionality. In addition the unittest was cleaned up a bit to use
common utilty functions for improved readabilty and robustness.

The documentation was updated.

fix test_role_plugin use of DN to avoid pairwise grouping
2011-07-21 00:29:38 -04:00
Martin Kosek
d4310c07a9 Add missing automount summaries
https://fedorahosted.org/freeipa/ticket/1509
https://fedorahosted.org/freeipa/ticket/1510
2011-07-21 00:19:50 -04:00
Endi S. Dewata
4ff959f55d Removed custom layouts using HTML templates.
The code for supporting custom layouts using HTML templates has been
removed. If it's needed again in the future the code can be restored.

Ticket #1501
2011-07-21 11:47:57 -04:00
Endi S. Dewata
b5fe1e8f61 Removed HBAC access time code.
The HBAC access time is currently not supported, so the related UI
code has been removed to reduce maintenance issue. When the feature
becomes supported in the future the code may be restored/rewritten.

Ticket #546
2011-07-21 11:47:57 -04:00
Endi S. Dewata
af339cd546 Fixed problem loading data in HBAC/sudo details page.
In a recent change the details page was changed to create and locate
field containers with 'details-field' CSS class. The HBAC and sudo
custom details pages have been modified to use the same CSS class.

Ticket #1508
2011-07-21 15:34:30 +00:00
Endi S. Dewata
f210a08268 Removed entitlement registration UUID field.
The UUID field has been removed from the entitlement registration
dialog box because it's currently not supported. The code has been
modified not to send empty UUID value should this become supported
in the future.

Ticket #1506
2011-07-21 15:34:07 +00:00
Endi S. Dewata
8e8ad513a7 Creating reverse zones from IP address.
A custom adder dialog has been added for DNS zones to simplify creating
reverse zones from IP address. The dialog provides a checkbox which
indicates whether the content of the zone name field is an IP address.
The IP address will be used to generate the reverse zone name and email
address.

Ticket #1045
2011-07-20 15:09:19 -04:00
Endi S. Dewata
6d14331a05 Added checkbox to remove hosts from DNS.
A custom deleter dialog for hosts has been added to provide an option
whether to remove the hosts from DNS.

Ticket #1470
2011-07-20 13:51:20 -04:00
Adam Young
bc4e97e191 no dns
Remove all DNS entities if the DNS server is not installed.
Removes it from the navigation as well.

https://fedorahosted.org/freeipa/ticket/1498

move created count to last thing in the funciton.
2011-07-20 13:40:01 -04:00
Rob Crittenden
7ce57e38c4 Only call entry_from_entry() after waiting for the new entry.
This fixes an indentation problem.
2011-07-19 21:45:03 -04:00
Rob Crittenden
fd148541aa Add Alexander Bokovoy and Jan Cholasta to contributors file 2011-07-19 20:43:21 -04:00
Rob Crittenden
02df85bb2e Make ipa-client-install error messages more understandable and relevant.
* Check remote LDAP server to see if it is a V2 server
* Replace numeric return values with alphanumeric constants
* Display the error message from the ipa-enrollment extended op
* Remove generic join failed error message when XML-RPC fails
* Don't display Certificate subject base when enrollment fails
* Return proper error message when LDAP bind fails

https://fedorahosted.org/freeipa/ticket/1417
2011-07-19 20:41:54 -04:00
Rob Crittenden
e8c7eaf260 Set a default minimum value for class Int, handle long values better.
Allow a long to get as far as the min/max constraints where we can
compare it to min/max int values and reject with a proper error message.

https://fedorahosted.org/freeipa/ticket/1494
2011-07-19 20:32:00 -04:00
Rob Crittenden
bcdd149bd1 With the external user/group management fixed, correct the unit tests.
The unit tests were incorrectly expecting the removed data back when
removing external users.
2011-07-20 17:27:42 +02:00
Jr Aquino
9821160d89 Correct sudo runasuser and runasgroup attributes in schema
https://fedorahosted.org/freeipa/ticket/1309
2011-07-19 08:06:41 -04:00