Commit Graph

81 Commits

Author SHA1 Message Date
Rob Crittenden
99b84bfd01 Handle ldap.UNWILLING_TO_PERFORM more gracefully 2007-11-09 16:34:52 -05:00
Rob Crittenden
705d68ddcb Require uniqueness in the name/comment field of delegations
Fix error reporting in the UI to include the detailed message
Sort delegations by name when displaying them
Update the name field from "Name" to "Delegation Name"
2007-11-09 13:58:36 -05:00
Rob Crittenden
e9dfbfa773 Enable multi-value field support for some attributes on the edit pages
Better error reporting in the GUI
Include a document describing how multi-valued fields work
2007-11-08 22:12:42 -05:00
John Dennis
22493d9b9f remove offensive use of rpm
add the radiusprofile to the list of objectclasses used when creating a user
2007-11-06 16:26:10 -05:00
John Dennis
8cfd270f34 merge initial radius work 2007-11-03 12:22:20 -04:00
Rob Crittenden
d9f809746b Completely remove an attribute 2007-10-31 17:11:55 -04:00
Karl MacMillan
29c0668e98 Bump versions for release. 0001-01-01 00:00:00 +00:00
Karl MacMillan
27f0aab667 Rename memberOf to group_members in xml-rpc interface. 0001-01-01 00:00:00 +00:00
Rob Crittenden
303d5ebad9 Have the GUI use memberOf() instead of looping through the member DNs
Fix a bug in the local transport version of memberOf()
2007-10-31 10:08:16 -04:00
Rob Crittenden
1d6e88565c Add memberOf API call to the XML-RPC interface
Make find-groups use memberOf to have a prettier dispaly of members
2007-10-30 15:07:02 -04:00
Kevin McCarthy
859291a706 Add delete user and group to webgui.
NOTE: this doesn't handle referential integrity.
2007-10-23 16:46:50 -07:00
Mark McLoughlin
5ec9a55278 Cleanup freeipa-python requires
We don't need the elaborate python requires, since a requires
for e.g. "python-abi = 2.5" is automatically added.

We also don't need the elaborate build requires, since all
it does is query the currently installed version of python
and require that you have it's appropriate python-devel
installed. But if python-devel is installed at all, this
should hold true.

(Also, IMHO the .spec files should be removed from mercurial
since they are automatically generated)

Signed-off-by: Mark McLouglin <markmc@redhat.com>
2008-02-21 15:23:29 +00:00
Rob Crittenden
04636b8ae7 Add an LDAP attribute -> label mapping function to XML-RPC layer
Move some ACI functions around in preparation for cli delegation
2007-10-22 17:06:52 -04:00
Karl MacMillan
1685751b1c Remove dependency between ipa-pyton and ipa-server
Current ipa-python imports and calls code from ipaserver (which is in
the ipa-server package). This makes it impossible to use the admin
tools or the ipa-python package on a system without the server bits
installed. This fixes that in a fairly minimal way.
0001-01-01 00:00:00 +00:00
Kevin McCarthy
5e651a6496 Finish the email autosuggest.
For now I've added a new API call.  The field-specific searching is
a ways off.
2007-10-18 14:33:55 -07:00
Rob Crittenden
ba0adcffb1 Require SSL for the XML-RPC interface 2007-10-19 10:14:30 -04:00
Rob Crittenden
53166669e7 Make distclean work again 2007-10-19 09:53:27 -04:00
Rob Crittenden
bc52446074 Fix build issues by combining patches submitted by Michael Gregg and
Karl MacMillan
Remove #!/usr/bin/python from many files to quiet rpmlint
2007-10-17 11:28:37 -04:00
Karl MacMillan
bd3b07b448 Use setup.py for ipa-python from William Jon McCann <mccann@jhu.edu>. 0001-01-01 00:00:00 +00:00
Kevin McCarthy
233915b780 Add basic delegation editing. 2007-10-15 13:07:39 -07:00
Kevin McCarthy
fbbdd27b53 Creates an update_entry api call, aliases update_user and update_group to it. 2007-10-15 09:04:13 -07:00
Kevin McCarthy
63f7cdf7f7 Adds delegation listing and creation to the GUI. 2007-10-12 15:11:55 -07:00
Kevin McCarthy
52a57a9639 This is a really simple (and dumb) ACI parser for the ACI's we
will need in the delegation UI.
2007-10-11 11:21:27 -07:00
Kevin McCarthy
2b38769b50 Combine get_user/group by dn/cn into get_entry_by_cn/dn.
Also a couple double-escaping fixes I missed in the last patch.
2007-10-09 09:26:16 -07:00
Kevin McCarthy
99c793e2ad Fixes none values in first/last name to display properly. 2007-10-04 12:20:00 -07:00
Kevin McCarthy
2ac1b39f42 Trickle the group_cn to group_dn down the layers. Fix controller calls. 2007-10-03 18:21:41 -07:00
rcritten@redhat.com
53e872fb72 Try to catch more error conditions during installation
Modify the way we detect SELinux to use selinuxenabled instead of using
  a try/except.
Handle SASL/GSSAPI authentication failures when getting a connection
2007-10-03 17:37:13 -04:00
mccann@jhu.edu
3ef4a374f7 Patch to fix the installer crashing if selinux is disabled. Also changes
the exception to contain the complete command.
Add a check to make sure installer is running as root.
Add signal handler to detect a user-cancelled installation.
Detect existing DS instances and prompt to remove them.
2007-10-02 16:56:51 -04:00
rcritten@redhat.com
6aa72b44e4 Do group operations based on the group DN, not the CN
Add new class of errors for connections
Raise an exception if a connection cannot be made due to missing ccache
2007-10-02 16:56:51 -04:00
Simo Sorce
cfac4acf9f Rely more on kerberos.
Don't read ipa.conf to get the realm, the kerberos libs do that for you.
Use the krbPrincipalName to change passwords
Make it possible to specify the principal at user creation.
Mail is not a required attribute so far, don't require it.
2007-10-01 17:33:16 -04:00
Kevin McCarthy
dbf8c1aeb9 Add group management to the user edit page.
Added a couple more API calls to make the inverse operations easier.
2007-09-28 16:01:42 -07:00
Kevin McCarthy
572b3e9fdd Make timelimit a parameter to the find methods. 2007-09-27 15:51:26 -07:00
Karl MacMillan
679343594d Install the web gui
Install the turbogears web gui including an init script. This
patch includes a few related changes:

* create a production configuration
* rename the web gui startup scrip to ipa-webgui
* add an init script
* chkconfig on the ipa-webgui init script
* make the start script properly daemonize the app when not
  in a development directory.
* Install everything to the correct places (/usr/sbin/ipa-webgui
  and /usr/share/ipa/ipagui mainly).

There are some things still left to do:

* Sort out the logging - the config needs to be adjusted so
  that logging messages end up in /var/log.
0001-01-01 00:00:00 +00:00
Karl MacMillan
50d12d6d2e Misc small fixes
* Remove the rpmbuild tree with the dist-clean target.
* Move ipa-server-setupssl from /usr/sbin to /usr/share/ipa
* Check in requirement change for generated freeipa-python.spec
* Fix interactive hostname in ipa-server-install.
0001-01-01 00:00:00 +00:00
Kevin McCarthy
1725397a53 Adds methods to manipulate groups by dns.
Renamed some of the user_group parameters to be self-evident.
Binary wrapping isn't necessary on strings, so removed from xmlrpc calls.
2007-09-26 15:47:34 -07:00
Kevin McCarthy
fa7759684f Adds manager and direct reports to usershow page.
Fixes a bug with the group by member where is wasn't trapping not found errors.
2007-09-25 15:44:49 -07:00
Kevin McCarthy
765279d82b Show the list of groups a user belongs to. 2007-09-25 13:35:43 -07:00
rcritten@redhat.com
7b96973711 Give ipa-adduser, ipa-addgroup and ipa-usermod an interactive mode
Add ipa-passwd tool
Add simple field validation package
This patch adds a package requirement, python-krbV. This is needed to
 determine the current user based on their kerberos ticket.
2007-09-21 10:24:36 -04:00
Simo Sorce
fbfefe6b0e Merge conflicts between rob and kevin patches 2007-09-20 16:58:54 -04:00
Kevin McCarthy
f17071533a Implement asynchronous search for groups.
Use the filter generation code to search on multiple fields.
2007-09-19 08:42:34 -07:00
Kevin McCarthy
6b3d1e85da Add client-side search limit parameter for user search.
Limit editgroup user ajax search.
Minor UI cleanup for editgroup.
2007-09-18 14:58:30 -07:00
rcritten@redhat.com
b85668579e Use ticket forwarding with TurboGears. mod_proxy forwards the principal
name and location of the keytab. In order for this keytab to be usable
 TurboGears and Apache will need to run as the same user. We will also need
 to listen only on localhost in TG.
2007-09-14 17:19:02 -04:00
Simo Sorce
5898ae527a In the TCP case there is an extra (redundant) lenght
field before the packet data, address the problem.
2007-09-12 11:51:16 -04:00
rcritten@redhat.com
ed6ab17c9c Add function to allow user's to set/reset their kerberos password
Remove some unused calls to retrieve the current realm
2007-09-11 02:48:53 -04:00
Karl MacMillan
d0c856d547 Reset version numbers for next milestone. 0001-01-01 00:00:00 +00:00
Karl MacMillan
d15ad0f26a Update version numbers for release. 0001-01-01 00:00:00 +00:00
Kevin McCarthy
3afd023c3a Generalized Time parser and tests, for use in krbPasswordExpiration 2007-09-04 13:44:59 -07:00
Simo Sorce
584baa7ee2 merge ipa-server/ipaserver/util.py into ipa-python/ipautil.py
this way freeipa-client does not depend on freeipa-server
2007-09-04 16:13:15 -04:00
Kevin McCarthy
c85c8eede3 Add 'test' target to makefiles. Hook up ipautil tests to run. 2007-09-04 10:22:45 -07:00
Kevin McCarthy
a57fe697a7 Fix python-ldap attribution for cidict. 2007-08-27 09:49:35 -07:00