IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-09-03 20:52:56 -05:00
Code Issues Packages Projects Releases Wiki Activity
910 Commits 11 Branches 63 Tags
72a3114a01d0c67cf3b8faf7b28da93e8a6f2de3
Commit Graph
910 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Nathan Kinder 72a3114a01 Cleaned up comments that were mangled by vim 2008-07-18 13:11:21 -04:00
Nathan Kinder 2301f60652 Re-base memberOf plug-in off of current FDS memberOf plug-in. Resolves: 452537, 453011, 443241, 439628 2008-07-18 13:11:19 -04:00
Simo Sorce 67f62709f8 In openvz we found out some interfaces may return a null pointer here. 
Skip them if no address is provided or we later get a segfault because
we dereference a null pointer.
 2008-07-15 16:16:33 -04:00
Simo Sorce 4b4e0e1516 fix typo 2008-07-15 16:16:33 -04:00
Rob Crittenden 6980b07303 Rework the way SSL certificates are imported from PKCS#12 files. 
Add the ability to provide PKCS#12 files during initial installation
Add the ability to provide PKCS#12 files when preparing a replica
Correct some issues with ipa-server-certinstall

452402
 2008-07-14 09:06:52 -04:00
Martin Nagy b95c05f5c6 Fix attribute parsing so that you can add a DN or an attribute with a '=' character in it. Fixes #454630 2008-07-09 16:54:19 -04:00
Simo Sorce 66aa3581fc Make sure we have the right prototypes when using openldap libs 2008-07-09 16:51:18 -04:00
Simo Sorce f86c8420b1 Admin must be able to add/delete too 2008-07-09 16:50:54 -04:00
Rob Crittenden 3f85a011c6 Be more exacting when deleting a group. 
453222
 2008-07-07 10:23:38 -04:00
Simo Sorce aead1f652e If krbPasswordExpiration or krbLastPwdChange are not present on the entry 
we might segfault trying a direct strcmp(), check they are not NULL.
Also fix a couple of memleaks.
 2008-07-07 10:01:29 -04:00
Simo Sorce 79df2465a7 After the rework of the code that binds to specific interfaces to 
correctly support multihomed server, we need to add a couple of
SELinux lines to the policy file. (lines suggested by Dan Walsh)
 2008-07-07 10:01:20 -04:00
Rob Crittenden 469fc7663c Add documentation for -v/--verbose option 
451117
 2008-07-03 15:26:27 -04:00
Rob Crittenden fb9f92c9f3 Merge branch 'master' of ssh://rcritten@git.fedorahosted.org/git/freeipa 2008-07-03 15:20:36 -04:00
Rob Crittenden 1bd0a868a2 NSS_DIR is already fetched into a variable, use that instead. 
451098
 2008-07-03 15:20:19 -04:00
Simo Sorce 675df04806 Make sure we listen only on the krb5 port and therefore disable krb4 support 2008-07-02 15:24:36 -04:00
Rob Crittenden e9196e2d93 Properly convert the realm to a DS instance name 
451014
 2008-07-01 15:07:00 -04:00
Rob Crittenden ec597b0ef1 Ensure correct permissions and file ownership of Apache NSS database 
451098
 2008-07-01 15:06:59 -04:00
Martin Nagy 6cce2f45e8 Fix some small issues that caused compiler warnings, like uninitialized or unused variables or missing krb5 prototypes. 2008-06-30 14:17:10 -04:00
Simo Sorce f5d9dd647f slapi_pw_find_sv() expects an array, make sure we have a NULL terminated 
one to avoid potential segfaults
Avoid leaking memory too.
 2008-06-30 14:13:25 -04:00
Simo Sorce 2dc64eddd4 Fix make all 2008-06-16 14:28:41 -04:00
Simo Sorce 798d345e13 Very ugly fix to configure to make it actually find a 
correctly installed slapi-plugin.h file
 2008-06-16 13:52:26 -04:00
Simo Sorce d2bd1b29a0 Must index uidnumber and gidnumber and any attribute that dna plugin is going 
to generate or that we need to search on.
 2008-06-12 19:06:38 -04:00
Simo Sorce 24f0f632b6 Fix uninizialized counter, was causing allocation to fail and command to 
return in case any encryption type was explicitly requested
 2008-06-12 19:06:30 -04:00
Simo Sorce 9c34dde165 Change default. 
By default increment by one  but set the maximum value to one million.

when installing a replica change values to start from 1 million +1 and
cap it to 2 million and so on for any other replica.
 2008-06-12 19:05:45 -04:00
Rob Crittenden 4665700fef Index the memberof attribute 
450951
 2008-06-11 17:26:45 -04:00
Rob Crittenden 8752ebd185 Missed adding verbose to a couple of IPAClient invocations. 
443987
 2008-06-11 16:29:12 -04:00
Simo Sorce b3ca8359ee Fix cut&paste error 2008-06-11 11:36:21 -04:00
Simo Sorce 77906dce20 Fix typo in inet type 2008-06-11 11:36:14 -04:00
Günther Deschner ea981d3065 ipa-server: fail the build early when DS slapi plugin headers are not available. 
Guenther
 2008-06-11 11:33:16 -04:00
Simo Sorce e9b96cdabb Move version to 1.1.0 in preparation for new patch release 2008-06-11 09:21:18 -04:00
Simo Sorce 3f4b182bc4 Let DS encode the password, this will allow IPA -> AD password 
synchronization to work again.
 2008-06-11 09:18:38 -04:00
Rob Crittenden d1322c6517 Ensure that the realm name is upper-case. 
449182
 2008-06-09 22:18:00 -04:00
Rob Crittenden ad3e4d4ed5 Ignore empty values when converting a multi-valued form field back to a list. This will prevent validation errors when validate.UniqueList() is executed. 
449785
 2008-06-09 22:15:22 -04:00
Rob Crittenden 42cada4594 When an LDAP connection fails, display the host one is trying to connect to. 
450111
 2008-06-09 22:13:54 -04:00
Rob Crittenden 48f2e3c3db Add our own SIGTERM handler so we can do clean shutdowns. 
Also fix foreground mode.

450211
 2008-06-09 22:11:08 -04:00
Rob Crittenden 77483ac808 Make it clear which packages are being configured and which aren't. 
450175
 2008-06-09 22:09:19 -04:00
Rob Crittenden 1f511d4b75 Add sbin_t directory read permissions 
449760
 2008-06-05 13:02:38 -04:00
Rob Crittenden d600f9bb09 Fix typo 
450077
 2008-06-05 09:00:20 -04:00
Rob Crittenden ec2eff9774 Under some conditions rl may not have been initialized so the config may error out with: 
UnboundLocalError: "local variable 'rl' referenced before assignment"

This is caught and ignored but the result is that the records in DNS may
not be used at all. Initializing rl to zero fixes this.

I also convert the server list into a set to make each entry unique (and
back to a list because that is what we are supposed to return)

433506
 2008-06-04 22:40:32 -04:00
Rob Crittenden b26fc32d9d Fix import for version 2008-06-04 17:32:51 -04:00
Rob Crittenden 68e14ed8ba Add -p/--password option so the DM password can be passed on the command-line. 
The import for version moved from ipaserver to ipa, fix that as well.

449858
 2008-06-04 17:32:47 -04:00
Rob Crittenden 12899d9053 Don't make the search criteria lower-case so one can do case-sensitive searches (such as looking for HTTP principals) 
449975
 2008-06-04 16:34:47 -04:00
Rob Crittenden 5c916a1cc8 Fix some minor man page issues. 
438771
 2008-06-04 12:50:13 -04:00
Rob Crittenden d6f7998fe7 Fix some formatting issues and correct the example. 
443009
 2008-06-04 11:14:33 -04:00
Rob Crittenden 28008a4bf2 Fix typo and reorder -q|--quiet so it displays nicer. popt isn't putting it on a separate line so moving it up front makes it easier to find. 
443014
 2008-06-04 11:05:47 -04:00
Rob Crittenden 9bcd31efc5 Fix issue of double logging in ipa_error.log. 
We open the log in ipa_webgui and this was being inherited by TurboGears
which uses the same log so everything was getting logged twice. Shut down
the log in ipa_webgui at the last possible moment. This will not catch
configuration errors.

Add a Not Found template.

Only print a traceback on 500 errors.
 2008-06-03 22:41:09 -04:00
Rob Crittenden c58b7a3d7c Move version.py to the common ipa directory instead of being server-based so it can be used by the client tool. 
Fix the client tool imports to fail more gracefully.
 2008-06-03 22:39:11 -04:00
Rob Crittenden 5a56b7c885 Fix some minor man page issues. 
438771
 2008-06-03 14:33:18 -04:00
Rob Crittenden f87dc9123b Don't prompt regarding previous DS installations in unattended mode. 
449150
 2008-05-30 16:14:51 -04:00
Rob Crittenden e935287f6e Try to clear up messages prompting for domain and IPA server when DNS discovery fails to find them. 2008-05-30 15:44:56 -04:00