Commit Graph
3505 Commits
Author SHA1 Message Date
Rob Crittenden 5c88225dda Add brackets around optional parameters when prompting.
ticket 832
2011-01-25 17:08:57 -05:00
System Administrator 7262884706 Modal Panel Changes 2011-01-25 16:48:44 -05:00
Adam Young fd1e78d2b2 error handling style
modifying the directories so they find the assets in the right locations
2011-01-25 16:47:09 -05:00
Kyle Baker 02803be1ba Main UI, migration, and html Style updates 2011-01-25 16:46:59 -05:00
Jan Zeleny 24a582304f Rename package to freeipa
https://fedorahosted.org/freeipa/ticket/581
2011-01-25 14:18:18 -05:00
Rob Crittenden 1229fd5654 Clean up some rpmlint errors in the spec file.
Re-arrange doc and defattr to clean up rpmlint warnings
Remove conditionals on older releases
Move some man pages into admintools subpackage
Remove some explicit Requires in client that aren't needed
Consistent use of buildroot vs RPM_BUILD_ROOT

Ticket 804
2011-01-25 14:01:36 -05:00
Jakub Hrozek ab2ca8022e Fix assorted bugs found by pylint 2011-01-25 14:01:36 -05:00
Simo Sorce 27da394c44 Fix ipa-replica-manage regressions with winsync
Avoids ipa-replica-manage to throw up errors.

Fixes: https://fedorahosted.org/freeipa/ticket/807
2011-01-25 14:01:35 -05:00
Simo Sorce 34cedfe138 Create DNS records as early as possible
Fixes: https://fedorahosted.org/freeipa/ticket/833
2011-01-25 14:01:35 -05:00
Simo Sorce cec3978c79 Always add DNS records when installing a replica
Even if the replica is not running a DNS server other replicas might.
So if the DNS container is present, then try to add DNS records.

Fixes: https://fedorahosted.org/freeipa/ticket/824
2011-01-25 14:01:35 -05:00
Adam Young bc7ed9b1e3 action panel select for multiple entities 2011-01-25 13:54:57 -05:00
Adam Young 5058c4c978 unselected facets Facets that were not selected were getting the class indicating that they were sselected 2011-01-25 13:28:47 -05:00
Adam Young 4fa04942df action buttons for dns 2011-01-25 13:11:55 -05:00
Adam Young 32c74fccef aci attribute table two columns 2011-01-25 13:11:43 -05:00
Adam Young 485e4a097f remove icons from association buttons 2011-01-25 13:11:37 -05:00
Jakub Hrozek 70a9e04f04 Enforce uniqueness on (key,info) pairs in automount keys
https://fedorahosted.org/freeipa/ticket/293
2011-01-25 11:13:10 -05:00
Simo Sorce 5bc7e5a9c7 Populate shared tree with replica related values
Fixes: https://fedorahosted.org/freeipa/ticket/820
2011-01-25 11:10:27 -05:00
Martin Kosek 82b4d5d6e8 Unused value in initdefault_encoding_utf8
There is no use for return value of Py_InitModule3. Removing it
in this patch.

https://fedorahosted.org/freeipa/ticket/710
2011-01-25 08:59:50 -05:00
Pavel Zuna 0c2beda3f7 Fix crash when displaying values composed of white-space chars only in CLI.
Ticket #825
2011-01-24 22:44:15 -05:00
Jan Zeleny 3e3cc55d24 Disable renaming to empty string
So far it was possible to rename any object using LDAPUpdate to a name
with empty primary key. Since this can cause nasty problems, this patch
disables empty string in --rename argument.

https://fedorahosted.org/freeipa/ticket/827
2011-01-24 22:32:55 -05:00
Simo Sorce 35b3d6b3be Make the -u option optional in unattended mode
Fixes: https://fedorahosted.org/freeipa/ticket/836
2011-01-24 16:45:43 -05:00
Simo Sorce 5431d56ed4 Do not set a replication dn when using SASL/GSSAPI replication
Fixes: https://fedorahosted.org/freeipa/ticket/817
2011-01-24 16:45:31 -05:00
Simo Sorce e72815771e Remove trailing space 2011-01-24 14:50:50 -05:00
Rob Crittenden 678c764d40 Make a copy of objectclasses so a call can't update them globally.
In the host plugin we may change the default objectclasses based on
the options selected. This was affecting it globally and causing
subsequent calls to fail.
2011-01-24 14:35:11 -05:00
Rob Crittenden 96469fbc88 Fix failed tests. API for utcoffset changed and strings are more robust.
In Python 2.7 the API for time.utcoffset() changed.

We do more automatic conversions of strings so need to loosen the tests
a bit.
2011-01-24 14:34:38 -05:00
Rob Crittenden 6e7729726f Block anonymous access to HBAC, role and some member information.
Prevents an unauthenticated user from accessing HBAC and role
information as well as memberof which could disclose roles,
memberships in HBAC, etc.

ticket 811
2011-01-24 14:33:21 -05:00
Endi S. Dewata 9319385c7e Removed 'name' from 'Sudo Command Group name'. 2011-01-24 13:33:00 -05:00
Endi S. Dewata fa5ae89d7f Added scrollable panel for delete dialog box. 2011-01-24 13:32:55 -05:00
Endi S. Dewata 5ef7b8adb8 Added spaces around radio buttons. 2011-01-24 13:32:50 -05:00
Rob Crittenden 0637bff95f Fix exception doctest failure 2011-01-24 10:42:16 -05:00
Rob Crittenden 8cc46af050 Remove del-all from dnsrecord_del from API.txt
This was from an unpushed patch I had in my tree.
2011-01-21 16:03:22 -05:00
Rob Crittenden 5f0c52ab97 Add new option to dns_del and always ask permission options to API.txt 2011-01-21 15:13:58 -05:00
Jan Zeleny 9b7920b0f5 Make ipa permission-add ask for optional attributes
Either one of type, filter, subtree, targetgroup, attrs or memberof is
required.

https://fedorahosted.org/freeipa/ticket/819
2011-01-21 14:26:31 -05:00
Rob Crittenden cf9ec1c427 Update kerberos password policy values on LDAP binds.
On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth
and will potentially fail the bind altogether.

On a successful bind it will zero krbLoginFailedCount and set
krbLastSuccessfulAuth.

This will also enforce locked-out accounts.

See http://k5wiki.kerberos.org/wiki/Projects/Lockout for details on
kerberos lockout.

ticket 343
2011-01-21 13:59:24 -05:00
Rob Crittenden 4361cd0242 Rename INTERNAL to NO_CLI for commands we hide from the cli.
Also make i18n_messages and json_metadata NO_CLI.

ticket 821
2011-01-21 13:56:02 -05:00
Rob Crittenden 35f2f1d720 Improve output when options are not found in non-interactive client install
We should still give some feedback when things go wrong when in
non-interactive mode.

ticket 828
2011-01-21 13:47:55 -05:00
Jan Zeleny 6d01bf037d Make command syntax less confusing in help
The patch adds [options] to the syntax line of ipa help <command>

https://fedorahosted.org/freeipa/ticket/733
2011-01-21 10:56:03 -05:00
Rob Crittenden fc28fae03f Add some basic filter validation to permissions and disallow empty filters
Try a query with a filter to see if it is at least legal. This doesn't
guarantee that the filter is at all otherwise sane.

ticket 808
2011-01-21 10:47:43 -05:00
Simo Sorce c22a3d25da Fix dns_is_enabled command 2011-01-20 16:07:50 -05:00
Simo Sorce 861aa9c1b8 Allow SASL/EXTERNAL authentication for the root user
This gives the root user low privileges so that when anonymous searches are
denied the init scripts can still search the directory via ldapi to get the
list of serevices to start.

Fixes: https://fedorahosted.org/freeipa/ticket/795
2011-01-20 15:49:30 -05:00
Simo Sorce 5af80a7583 Make krb5kdc use the ldapi socket to talk to dirsrv
Fixes: https://fedorahosted.org/freeipa/ticket/812
2011-01-20 15:49:30 -05:00
Adam Young b9ad279ad2 rename static to ui
Directory rename
2011-01-20 14:12:47 +00:00
Simo Sorce 835436df15 Provide API to check if IPA DNS is enabled on some server
Fixes: https://fedorahosted.org/freeipa/ticket/600
2011-01-19 20:23:42 -05:00
Simo Sorce a44607ecba Fix ipa_uuid to not interfer with proper error reporting
Fixes: https://fedorahosted.org/freeipa/ticket/813
2011-01-19 15:57:57 -05:00
Adam Young 902bd906a5 enroll dialog layout
we were squeezing the buttons in the middle of the page.  This patch shrinks the two boxes on either side and centers the buttons.
2011-01-19 04:58:56 -05:00
Adam Young bc27191db6 background into Makefile 2011-01-18 21:23:59 -05:00
Adam Young cbd121333a update API removal of idnssoamaximum from dns APIs broke the build. THis fixes it. 2011-01-18 14:43:19 -05:00
Pavel Zuna 5f4ac74563 Fix password/random logic in host plugin.
Fix #798
2011-01-18 12:46:53 -05:00
Pavel Zuna 74ad4f3d7d Fix updating of DNS records by the host plugin.
Fix #799
2011-01-18 12:46:53 -05:00
Pavel Zuna 687324c193 Remove SOA maximum parameters from DNS zone.
There's no such thing as "maximum" in SOA record RDATA format
according to RFC 1035 and there's also no such attribute in
the schema.

Fix #788
2011-01-18 12:46:53 -05:00