Rob Crittenden
15b7dc6ff9
Add UI for service principal creation and keytab retrieval
2007-12-05 15:17:11 -05:00
Karl MacMillan
002312c050
Revert logging setup change because it has unintended
...
consequences during ipa-server-install.
-
Rob Crittenden
8ff9f63d80
Require that the default users group exists
...
Fix some copy-paste errors from the password policy update
2007-11-30 13:27:33 -05:00
Rob Crittenden
bac556557d
Don't allow the admins or editors groups to be removed.
...
Don't allow the default group for users to be removed.
2007-11-30 12:49:08 -05:00
Rob Crittenden
5025e990e9
Remove optional arguments from the XML-RPC interface
2007-11-29 16:48:32 -05:00
Rob Crittenden
74d0fba899
Change the password expiration message to be more precise.
2007-11-29 16:43:38 -05:00
Rob Crittenden
ab67029d94
Add utility to lock user accounts. Remove lock capability from ipa-deluser
...
Fix bootstrap.ldif to add new Class of Service entries properly
Include some man pages that weren't being installed
2007-11-26 22:28:53 -05:00
Rob Crittenden
0b1650e7ad
Add ipa-python to maintainer-clean and clean up .pyc files
2007-11-28 12:33:14 -05:00
Rob Crittenden
2e7f629d91
Remove unnecessary attribute left over from testing
2007-11-26 20:34:59 -05:00
Karl MacMillan
3b4f0db73e
Convert the setup of ssl from a shell script to a
...
python module. This is in preparation for user
supplied certs.
-
Karl MacMillan
cd93c81a13
Committed generated spec files.
-
Karl MacMillan
c397041bfa
Merge.
-
Rob Crittenden
2fbe5cbf49
Phase 1 of allowing admins to set the default object classes for users & groups
...
This adds the UI and does error checking of the selected object classes but
it doesn't actually use the values yet.
It also generalizes some functions for doing multi-valued fields.
2007-12-04 13:18:37 -05:00
Rob Crittenden
69765f52ce
Groups may be iterated over so should be an empty list, not None
2007-12-05 15:12:24 -05:00
Rob Crittenden
299e457698
Convert krbmaxpwdlife and krbminpwdlife from seconds into days and hours
2007-12-03 18:07:47 -05:00
Karl MacMillan
a174d6d6e6
Fix mode on ipa-keytab-util.
-
Karl MacMillan
ad3fcc200c
Merge.
-
Karl MacMillan
90d6fefe32
Fix errors with ipautil.CalledProcessError and cleanup some imports.
-
Karl MacMillan
61258a645c
Add ipa-keytab-util to spec.
-
Karl MacMillan
d2378f13d0
Merge.
-
John Dennis
d53915954e
merge
2007-12-04 10:08:08 -05:00
John Dennis
4e1d291d15
change location of radius data in ldap from
...
cn=radius,cn=services,cn=etc
to
cn=radius
2007-11-30 20:29:12 -05:00
John Dennis
6be932e8af
fix merge error
2007-11-29 11:44:50 -05:00
John Dennis
904b76059c
merged radius work with latest mainline tip
2007-11-28 07:49:07 -05:00
John Dennis
09238510ff
add command line utilites for radius profiles
2007-11-26 19:30:33 -05:00
John Dennis
9a8326c5c1
clean up radius client command line tools
2007-11-23 10:35:22 -05:00
John Dennis
d98686e967
Add radius profile implementations:
...
get_radius_profile_by_uid
add_radius_profile
update_radius_profile
delete_radius_profile
find_radius_profiles
Rewrite command line arg handling, now support pair entry, interactive
mode with auto completion, reading pairs from a file, better handling
of mandatory values, better help, long arg names now match attribute
name in pairs
Establish mappings for all attributes and names used in clients and
profiles
Add notion of containers to radius clients and profiles in LDAP
Move common code, variables, constants, and strings into the files
radius_client.py, radius_util.py, ipautil.py to eliminate redundant
elements which could get out of sync if modified and to provide access
to other code which might benefit from using these items in the
future.
Add utility functions:
format_list()
parse_key_value_pairs()
Add utility class:
AttributeValueCompleter
Unify attribute usage in radius ldap schema
2007-11-21 13:11:10 -05:00
John Dennis
087d11af5c
map attrs to friendly name
2007-11-14 16:01:27 -05:00
John Dennis
c4dbe6433d
add ipa-findradiusclient search
2007-11-14 15:32:08 -05:00
John Dennis
c24da12fe1
radius client modify and delete work
2007-11-14 00:04:19 -05:00
John Dennis
eab5a89d4a
ipa-addradiusclient now working
2007-11-13 20:05:02 -05:00
John Dennis
152f8e3392
checkpoint radius client work
2007-11-13 13:06:18 -05:00
John Dennis
f36872383c
add aci's for radius
2007-11-10 12:04:43 -05:00
John Dennis
84275328a0
radius now does kerberos auth, reads client entries from LDAP
2007-11-10 00:09:07 -05:00
Pete Rowley
24d5777bd6
Add posix auto gen for single master case
2007-11-06 15:57:15 -08:00
John Dennis
80c4ed7af2
remove offensive use of rpm
...
add the radiusprofile to the list of objectclasses used when creating a user
2007-11-06 16:26:10 -05:00
John Dennis
22493d9b9f
remove offensive use of rpm
...
add the radiusprofile to the list of objectclasses used when creating a user
2007-11-06 16:26:10 -05:00
Rob Crittenden
50c383aeed
Update text to reflect new CSS code (sidebar now on right)
2007-11-06 10:22:47 -05:00
Karl MacMillan
edc7af1446
Add xml-rpc interface for getting keytabs.
...
Warning: this lacks any sort of authorization.
-
Karl MacMillan
8e48393c61
Introduce service base class and clean up ipa-server-install
...
1) Add a base class for all of the instance objects.
2) Normalize usage of logging.
3) General cleanups of ipa-server-install.
4) Make better use of httpinstance.
5) Add webguiinstance.
6) Improve progress reporting during installation.
Works Here (TM), but it would be nice to get someone else
to test since this moves code around a bit.
-
Karl MacMillan
9038bf71dd
Move packages to ipa from freeipa.
-
Karl MacMillan
b202b6cc31
Bump the version numbers for release. Also remove
...
specific version check on freeradius. Packages aren't
available and the freeradius support isn't ready
anyway.
-
John Dennis
8cfd270f34
merge initial radius work
2007-11-03 12:22:20 -04:00
Karl MacMillan
67cddce4d4
Generate master password from Simo.
-
Karl MacMillan
8f4362f2f2
Enable referential integrity plugin.
-
Rob Crittenden
010fb65bfd
define Self-Service as editting your own record.
...
This has the side-effect of removing the realm from Loggin in as. This
can be changed by using user_name instead of display_name in master.kid.
2007-11-02 17:41:24 -04:00
Rob Crittenden
9d24003528
Distinguish between active and inactive users on the Find People page.
2007-11-02 11:42:38 -04:00
Rob Crittenden
dc01ea0fe6
groups come back as a list where the first element is the number of
...
groups returned. Skip that element.
2007-11-02 11:35:50 -04:00
Karl MacMillan
7ce4df7038
Added replication.py
-
Karl MacMillan
36e43aed1b
NTP configuration for client and server.
...
Configure ipa servers as an ntp server and clients
to (by default) us the ipa server as an ntp server.
Also corrected the messages about which ports should
be opened.
-
