Commit Graph

3896 Commits

Author SHA1 Message Date
Adam Young
800cb7f46e identify target as section for permissions 2011-06-27 12:14:49 -04:00
Endi S. Dewata
7452b6d3cb Fixed entity labels.
The entity labels in the following locations have been fixed:
 - search facet title: plural
 - details facet title: singular
 - association facet title: singular
 - breadcrumb: plural
 - adder dialog title: singular
 - deleter dialog title: plural

Some entity labels have been changed into the correct plural form.
Unused file install/ui/test/data/i18n_messages.json has been removed.

Ticket #1249
Ticket #1387
2011-06-27 12:11:22 -04:00
Endi S. Dewata
8d9575605d Added singular entity labels.
A new attribute label_singular has been added to all entities which
contains the singular form of the entity label in lower cases except
for acronyms (e.g. HBAC) or proper nouns (e.g. Kerberos). In the Web
UI, this label can be capitalized using CSS text-transform.

The existing 'label' attribute is intentionally left unchanged due to
inconsistencies in the current values. It contains mostly the plural
form of capitalized entity label, but some are singular. Also, it
seems currently there is no comparable capitalization method on the
server-side. So more work is needed before the label can be changed.

Ticket #1249
2011-06-27 12:11:22 -04:00
Jr Aquino
d49bf3871b oneliner correct typo in ipasudorunas_group
https://fedorahosted.org/freeipa/ticket/1326
2011-06-26 20:30:54 -04:00
Jan Cholasta
3656d9be3c Verify that the hostname is fully-qualified before accessing the service information in ipactl.
Fail gracefully if the supplied hostname isn't fully-qualified in
ipa-server-install.

ticket 1035
2011-06-24 01:23:14 -04:00
Rob Crittenden
b02b77f8d7 Slight performance improvement by not doing some checking in production mode
These changes save a few hundred ms but every little bit helps.

ticket 1023
2011-06-23 23:45:10 -04:00
Endi S. Dewata
1717d638fc Added record count into association facet tabs.
The details and association facets have been modified to show the number of records in each association in the corresponding facet tab.

Ticket #1386
2011-06-24 12:05:51 -04:00
Rob Crittenden
8a32bb3746 Make dogtag an optional (and default un-) installed component in a replica.
A dogtag replica file is created as usual. When the replica is installed
dogtag is optional and not installed by default. Adding the --setup-ca
option will configure it when the replica is installed.

A new tool ipa-ca-install will configure dogtag if it wasn't configured
when the replica was initially installed.

This moves a fair bit of code out of ipa-replica-install into
installutils and cainstance to avoid duplication.

https://fedorahosted.org/freeipa/ticket/1251
2011-06-23 19:04:33 -04:00
Adam Young
cbffe1d65d automountkey details
Adds hooks for navigation to the show page due to the unusual way that keys are accessed.

https://fedorahosted.org/freeipa/ticket/1257
2011-06-23 20:24:14 -04:00
Rob Crittenden
8810758c11 Let the framework be able to override the hostname.
The hostname is passed in during the server installation. We should use
this hostname for the resulting server as well. It was being discarded
and we always used the system hostname value.

Important changes:
- configure ipa_hostname in sssd on masters
- set PKI_HOSTNAME so the hostname is passed to dogtag installer
- set the hostname when doing ldapi binds

This also reorders some things in the dogtag installer to eliminate an
unnecessary restart. We were restarting the service twice in a row with
very little time in between and this could result in a slew of reported
errors, though the server installed ok.

ticket 1052
2011-06-23 02:11:34 -04:00
Endi S. Dewata
975e2bfa2b Added navigation breadcrumb.
Navigation breadcrumb has been added to the facet header. The
breadcrumb will appear on details, association, and automount
facets.

Ticket #1323
2011-06-23 15:50:55 -04:00
Endi S. Dewata
c8eb76766a Converted entity header into facet header.
The content and the size of entity header changes depending on the
facet being displayed, so the entity header has been converted into
a facet header to allow better control via CSS.

The DNS record facet has been updated to use the same styling and
support scrolling.

To help styling and testing, all buttons have been assigned a name.
2011-06-23 15:50:49 -04:00
kylebaker
3d9fb938d9 Facet icon swap and tab sizing 2011-06-23 19:30:00 +00:00
kylebaker
545ecf94ef Tab and spacing on list 2011-06-23 19:29:50 +00:00
John Dennis
d9d00f1522 Update test_role_plugin test to include a comma in a privilege
Introduce a comma into a privilege name to assure we can handle
commas.

Commas must be escaped for some parameters, add escape_comma() utility
and invoke it for the necessary parameters.

Utilize a DN object to properly construct a DN and most importantly to
allow equality testing beween the DN we expect and the one
returned. This is necessary because a DN can be encoded according to
different encoding syntaxes all of which are valid. DN objects always
decode from their input. DN objects can test for equality between DN's
without being affected by DN encoding.

Add a equality callback for the dn in the expected dict. When the test
framework tests for equality between the expected value and the
returned value it will call back into a function we provide which will
convert the returned dn into a DN object. An equality test is then
performed between two DN objects. This is the only way to properly
compare two dn's.
2011-06-22 02:06:02 -04:00
John Dennis
8c95eb68d2 Use DN class in get_primary_key_from_dn to return decoded value 2011-06-22 01:26:01 -04:00
John Dennis
032b77ac23 Add backslash escape support for cvs reader 2011-06-22 01:20:27 -04:00
John Dennis
4c1bfdb919 assert_deepequal supports callback for equality testing 2011-06-22 01:16:31 -04:00
John Dennis
1a7d05cc0f Module for DN objects plus unit test 2011-06-22 01:05:44 -04:00
Martin Kosek
b227208d01 Fix IPA install for secure umask
Make sure that IPA can be installed with root umask set to secure
value 077. ipa-server-install was failing in DS configuration phase
when dirsrv tried to read boot.ldif created during installation.

https://fedorahosted.org/freeipa/ticket/1282
2011-06-21 23:45:00 -04:00
Rob Crittenden
ba42b700eb Update translation files 2011-06-21 19:21:55 -04:00
Rob Crittenden
dd69c7dbe6 Make data type of certificates more obvious/predictable internally.
For the most part certificates will be treated as being in DER format.
When we load a certificate we will generally accept it in any format but
will convert it to DER before proceeding in normalize_certificate().

This also re-arranges a bit of code to pull some certificate-specific
functions out of ipalib/plugins/service.py into ipalib/x509.py.

This also tries to use variable names to indicate what format the certificate
is in at any given point:

dercert: DER
cert: PEM
nsscert: a python-nss Certificate object
rawcert: unknown format

ticket 32
2011-06-21 19:09:50 -04:00
Adam Young
3a36eced53 tooltips for host add
https://fedorahosted.org/freeipa/ticket/1363
https://fedorahosted.org/freeipa/ticket/1361
2011-06-22 02:12:25 +00:00
Rob Crittenden
1aee9df3bc Do lazy LDAP schema retrieval in json handler.
It was possible to get to this point without a schema if the first
handled request resulted in a Kerberos error.

https://fedorahosted.org/freeipa/ticket/1354
2011-06-21 16:40:07 -04:00
Endi S. Dewata
f47ec11727 Fixed problem with navigation tabs on reload.
The navigation have been fixed to show the correct active tabs after
browser reload.

Ticket #1362
2011-06-21 14:44:45 -04:00
Rob Crittenden
c329a54c09 The IP address provided to ipa-server-install must be local
Compare the configured interfaces with the supplied IP address and
optional netmask to determine if the interface is available.

https://fedorahosted.org/freeipa/ticket/1175
2011-06-20 22:14:10 -04:00
Rob Crittenden
d0af8b28d7 On a master configure sssd to only talk to the local master.
Otherwise it is possible for sssd to pick a different master to
communicate with via the DNS SRV records and if the remote master
goes down the local one will have problems as well.

ticket https://fedorahosted.org/freeipa/ticket/1187
2011-06-21 16:07:06 +02:00
Adam Young
5f23c29d70 entity select for password policy http://fedorahosted.org/freeipa/ticket/1110 2011-06-21 01:14:57 +00:00
Adam Young
eeed975bc6 ipaddress for host add
updated label triggered an API change
2011-06-20 20:53:15 -04:00
Adam Young
d3bf7e4284 editable entity_select
jsl fixes

https://fedorahosted.org/freeipa/ticket/1043

remove redundant call to focus.
2011-06-20 15:36:30 -04:00
Adam Young
38f4368e30 no redirect on unknown error If the error name is indicates a server wide error, do not attempt to redirect.
this variation has a whitelist of errors on which to redirect.

https://fedorahosted.org/freeipa/ticket/1281
2011-06-20 18:46:48 +00:00
Martin Kosek
ceb7c9cf4b DNS installation fails when domain and host domain mismatch
Create DNS domain for IPA server hostname first so that it's forward
record can be added. This results in 2 forward DNS zones created
when server hostname doesn't equal server domain.

https://fedorahosted.org/freeipa/ticket/1194
2011-06-19 23:36:28 -04:00
Adam Young
0399c140d9 entity select undo
Tests for dirty after the RPC call has completed and the select has updated
Passes the original value to the RPC completion, so it isn't lost upon RPC completion

https://fedorahosted.org/freeipa/ticket/1340
2011-06-20 17:24:21 +00:00
Endi S. Dewata
eacd33e88e Removed FreeWay font files.
The CSS files in install/html and install/migration have been
modified to use the Overpass font.
2011-06-20 12:59:05 -04:00
Adam Young
42d7ffbed1 service host entity select Use the entity select widget for add service 2011-06-20 16:50:28 +00:00
Adam Young
d72fed190e hide automount tabs.
the tabs are required for natigation, but they should not be visible, as the breadcrub provides the navigation for them instead.

Moved the automount tabs up one level so that it uses the  two level style
2011-06-20 16:39:47 +00:00
Adam Young
4ea381649d entity select widget for manager https://fedorahosted.org/freeipa/ticket/1149 2011-06-20 16:27:31 +00:00
Jan Cholasta
574d07be1f Improve IP address handling in the host-add command.
IP addresses are more strictly checked. Netmasks can be specified
and are used in DNS PTR record creation.

ticket 1234
2011-06-19 20:44:19 -04:00
Martin Kosek
f2df2a6954 Multi-process build problems
Fix a problem when a target missed a version-update requirement.
This caused build problems, especially in a parallel build
environment.

https://fedorahosted.org/freeipa/ticket/1215
2011-06-19 20:28:51 -04:00
Martin Kosek
d9808498a8 Improve IP address handling in IPA option parser
Implements a way to pass match_local and parse_netmask parameters
to IP option checker.

Now, there is just one common option type "ip" with new optional
attributes "ip_local" and "ip_netmask" which can be used to
pass IP address validation parameters.

https://fedorahosted.org/freeipa/ticket/1333
2011-06-19 20:06:21 -04:00
Endi S. Dewata
79ce958a3c Storing page number in URL.
The association facet has been modified to store the current page
number in the browser's URL. This way page changes are stored in
browser's history allowing the back button to work properly.

Ticket #1264
2011-06-17 16:01:40 -04:00
Rob Crittenden
a2a3782efb Require an imported certificate's issuer to match our issuer.
The goal is to not import foreign certificates.

This caused a bunch of tests to fail because we had a hardcoded server
certificate. Instead a developer will need to run make-testcert to
create a server certificate generated by the local CA to test against.

ticket 1134
2011-06-16 19:27:17 -04:00
Jr Aquino
ed7a3e005a Don't add empty tuple to entry_attrs['externalhost']
https://fedorahosted.org/freeipa/ticket/1339
2011-06-16 19:22:15 -04:00
Jr Aquino
44cdf8ef54 Raise DuplicateEntry Error when adding a duplicate sudo option
https://fedorahosted.org/freeipa/ticket/1276
https://fedorahosted.org/freeipa/ticket/1277
https://fedorahosted.org/freeipa/ticket/1308

Added new Exception: AttrValueNotFound
Fixed XML Test for Sudorule remove_option
1276 (Raise AttrValueNotFound when trying to remove a non-existent option from Sudo rule)
1277 (Raise DuplicateEntry Error when adding a duplicate sudo option)
1308 (Make sudooption a required option for sudorule_remove_option)
2011-06-16 19:21:07 -04:00
Martin Kosek
0377123b19 Fix doc for sudorule runasuser commands
https://fedorahosted.org/freeipa/ticket/1324
2011-06-17 15:44:13 +02:00
Endi S. Dewata
313f201ea5 Merged direct and indirect association facets
The direct and indirect associations are now displayed in the same
facet. The type of association to be displayed can be selected
using radio buttons.

Ticket #1338
2011-06-16 20:11:22 -04:00
Adam Young
dbeae4e3f4 test dirty onchange
instead of blindly setting dirty, check if the filed has a different value than it originally did.

https://fedorahosted.org/freeipa/ticket/1337
2011-06-16 20:29:14 +00:00
Adam Young
c03fab1095 test dirty multivalue test the multivalue widgets for changes before showing the undo link. https://fedorahosted.org/freeipa/ticket/1337 2011-06-16 20:29:10 +00:00
Adam Young
c610a17383 test dirty textarea
runs the testdirty check before setting the undo tag for a textarea
2011-06-16 14:36:04 -04:00
Adam Young
f02b544aaf test for dirty
instead of always setting dirty, we do the original test, and then set the flag and show the link.

https://fedorahosted.org/freeipa/ticket/1337
2011-06-16 17:21:22 +00:00