Commit Graph

3292 Commits

Author SHA1 Message Date
Rob Crittenden
886e417fd7 Set the default Int maxvalue to the maximum XML-RPC can handle.
Also handle marshalling errors thrown by xmlrpclib more gracefully.

ticket 770
2011-01-18 10:03:55 -05:00
Adam Young
ec3e7f1202 search unit tests Unit tests were by the hiding of the search, and elements from the action panel. 2011-01-18 01:46:56 -05:00
Adam Young
2b50853492 jslint cleanup 2011-01-18 01:46:47 -05:00
Simo Sorce
25cfddcbe1 Move sudo related data all under cn=sudo
Fixes: https://fedorahosted.org/freeipa/ticket/773
2011-01-17 11:46:45 -05:00
Endi S. Dewata
fb1f9ecf9f Certificate and Kerberos key status adjustments.
The OTP field has been moved into a separate row to avoid line
wrapping. The line height inside tables has been increased to
avoid overlapping buttons in certificate status panel.
2011-01-15 04:55:16 +00:00
Adam Young
6650dbf6a4 no entry for search if the search facet is selected, don't put an entry in the action panel for the search 2011-01-15 04:46:43 +00:00
Adam Young
285ee9db0c Details to Settings
Using I18N messages for most of the details
2011-01-15 04:42:49 +00:00
Adam Young
f92c831a32 arrow icons Use Unicode characters for the arrow icons 2011-01-15 04:42:06 +00:00
Adam Young
d49cf9ee61 lint clean added a config file for running jsl. run 'jsl -conf jsl.conf' and see that there are no error messages. 2011-01-15 03:35:42 +00:00
Martin Kosek
bd965c92d8 Mozldap-specific code removed
Mozldap code removed from all sources and configure source script.
Now, IPA will compile even when package mozldap-devel is not
installed on the system.

https://fedorahosted.org/freeipa/ticket/756
2011-01-14 17:33:11 -05:00
Rob Crittenden
84ff4ca0f1 Don't require or create the log dirs if we're just validating the API.
Fixes an error displayed in the automated builds, plus we don't want
a Makefile messing around with our homedir.
2011-01-14 17:26:49 -05:00
Simo Sorce
f8c7afd15c Remove old DNS plugin commands from API validation 2011-01-14 17:26:48 -05:00
Simo Sorce
e1cf7b8d01 Fix replica installation warnings
We were attempting to re-add these entries on the replicas too.
Which were failing because these containers, obviously, already existed there.
2011-01-14 17:26:48 -05:00
Jakub Hrozek
12c67b99e0 Rename DNS2 to DNS 2011-01-14 17:26:48 -05:00
Jakub Hrozek
3711261802 Port installer and host plugin to the new DNS plugin
* move ipa dns-resolve to the new plugin
* port the installer and the host plugin to the new interface
* remove the old plugin
2011-01-14 17:26:48 -05:00
Rob Crittenden
d7bd9138c8 Execute /usr/bin/python directly instead of /usr/bin/env python
ticket 608
2011-01-14 16:27:48 -05:00
Simo Sorce
81311a9f4e Fix API validation 2011-01-14 15:42:40 -05:00
Martin Kosek
63e70d052c Potential memory leaks in ipa-kpasswd
This patch fixes 2 situations where a pointer to allocated error
string could be overwritten - which could have resulted in
a memory leak.

https://fedorahosted.org/freeipa/ticket/716
2011-01-14 14:33:32 -05:00
Rob Crittenden
c69d8084c1 Add API version and have server reject incompatible clients.
This patch contains 2 parts.

The first part is a small utility to create and validate the current
API. To do this it needs to load ipalib which on a fresh system
introduces a few problems, namely that it relies on a python plugin
to set the default encoding to utf8. For our purposes we can skip that.
It is also important that any optional plugins be loadable so the
API can be examined.

The second part is a version exchange between the client and server.
The version has a major and a minor version. The major verion is
updated whenever existing API changes. The minor version is updated when
new API is added. A request will be rejected if either the major versions
don't match or if the client major version is higher than then server
major version (though by implication new API would return a command not
found if allowed to proceed).

To determine the API version of the server from a client use the ping
command.

ticket 584
2011-01-14 14:26:22 -05:00
Martin Kosek
c94d20cfd8 Unchecked return values in SLAPI plugins
Return values weren't checked in several cases which could
have lead to unhandled errors.

https://fedorahosted.org/freeipa/ticket/722
2011-01-14 14:20:57 -05:00
Martin Kosek
a6a91e5dbc Unitialized pointer read in ipa-join
This patch fixes a possible situation when krb5_kt_close()
function is called with uninitialized keytab parameter.

https://fedorahosted.org/freeipa/ticket/712
2011-01-14 14:20:57 -05:00
Martin Kosek
8173b8e375 Potential memory leaks in ipa-pwd-extop
This patch fixes several potential memory leaks in ipa-pwd-extop
SLAPI plugin.

Common function ipapwd_gen_hashes() now cleans after itself when
it fails. Other changes are local and self-explanatory.

https://fedorahosted.org/freeipa/ticket/715
2011-01-14 14:20:57 -05:00
Martin Kosek
7b5601eeb5 Potential memory leaks in ipa-getkeytab
This patch fixes 2 situations where a pointer to allocated error
string could be overwritten - which could have resulted in
a memory leak.

https://fedorahosted.org/freeipa/ticket/714
2011-01-14 14:20:57 -05:00
Simo Sorce
063c6efd42 Remove dependency on nss_ldap/nss-pam-ldapd
We use sssd in ipa v2

Fixes: https://fedorahosted.org/freeipa/ticket/757
2011-01-14 14:06:56 -05:00
Simo Sorce
7ee490e35c Remove radius options completely.
This has been completely abandoned since ipa v1 and is not built by default.
Instead of carrying dead weight, let's remove it for now.

Fixes: https://fedorahosted.org/freeipa/ticket/761
2011-01-14 14:06:56 -05:00
Simo Sorce
da7eb1155e Move mep templates under cn=etc
Fixes: https://fedorahosted.org/freeipa/ticket/760
2011-01-14 14:06:56 -05:00
Simo Sorce
5549dca50e Move Virtual Operations container under cn=etc
Fixes: https://fedorahosted.org/freeipa/ticket/759
2011-01-14 14:06:56 -05:00
Simo Sorce
cfa23b1c2a Allow using Kerberos credentials with the 'connect' command
Now that we can setup GSSAPI authenticated replication we are not
tied to use the Directory Manager password to set up replication
agreements.

Fixes: https://fedorahosted.org/freeipa/ticket/644
2011-01-14 14:06:56 -05:00
Simo Sorce
a0bfbec19f Use GSSAPI for replication
Uses a temporary simple replication agreement over SSL to init the tree.
Then once all principals have been created switches replication to GSSAPI.

Fixes: https://fedorahosted.org/freeipa/ticket/690
2011-01-14 14:06:56 -05:00
Simo Sorce
05055870c9 Remove port argument for ipa-replica-manage
We can't use arbitrary ports anyway. And neither AD has any way to use non
stadard ports. So remove this unnecessary option.
2011-01-14 14:06:56 -05:00
Simo Sorce
343ab382a5 Remove unused random password in replica install script 2011-01-14 14:06:56 -05:00
Simo Sorce
2255479ef0 Refactor some replication code
This simplifies or rationalizes some code in order to make it easier to change
it to fix bug #690
2011-01-14 14:06:56 -05:00
Adam Young
a68b2d2aa3 hide unselectable options
If an option is not selectable from the action panel, hide it until it is selectable
addresses https://fedorahosted.org/freeipa/ticket/747
2011-01-14 13:32:03 -05:00
Adam Young
91fae67fa4 null pkey
If the pkey is null, send an empty array.
If the pkey is not null, send and array of length 1 with the pkey in it.

Addresses:  https://fedorahosted.org/freeipa/ticket/767
2011-01-14 13:19:56 -05:00
Adam Young
c385db4fc0 spinning wheel display a spinning icon gif during network traffic. Fixes the following from first patch: 1 primary key set in span as opposed to appended, so it only appears once. 2. call hide for the network activity icon only in success or failure functions, not multiple times 2011-01-14 11:42:27 -05:00
Gowrishankar Rajaiyan
74d8a3c487 Fixed typo in ipa help service 2011-01-14 09:53:19 -05:00
Rob Crittenden
ce169c7fa6 Set minimum version of dogtag to 9
ticket 763
2011-01-14 09:51:01 -05:00
Rob Crittenden
6785283568 python-ldap fails gloriously if the search time limit is 0. Don't allow it.
Don't allow the time limit to be set in the API. Also add a failsafe
in the ldap driver because such bad things happen if this value is 0.
I think it literally spends 0 time on the request and just returns
immediately.

ticket 752
2011-01-14 09:48:07 -05:00
Adam Young
680148ed03 scoping functions
converting function of the form ipa_<name> to IPA.<name> to remove them from the global namespace.

https://fedorahosted.org/freeipa/ticket/212
2011-01-14 04:03:47 -05:00
Endi S. Dewata
00b3984e5a Support for str in StrEnum.
The StrEnum class has been modified to accept str value and convert
it into unicode. This is to fix encoding issue on F14.
2011-01-13 21:48:07 -05:00
Endi S. Dewata
3486047583 Increased icon size for certificate and Kerberos key status.
The <li> tag used for status icon has been replaced with <div>
tag shaped like a circle. The size can be adjusted using CSS.
2011-01-13 21:46:05 -05:00
Adam Young
406a52edae metadata update
Static viewing was broken due to recent hbac changes.
2011-01-13 15:55:47 -05:00
Endi S. Dewata
1dc48bca51 Removed debugging message. 2011-01-13 13:09:07 -05:00
Endi S. Dewata
26d1de2d27 Fixed incorrect loop variable. 2011-01-13 13:09:00 -05:00
Endi S. Dewata
d92f5bf8bb Host details adjustments.
The labels for the following fields in Host details page have been
changed:
 - fqdn: Fully Qualified Host Name
 - serverhostname: Host Name

The ipa_details_field_create_input() and _ipa_create_text_input()
has been converted into methods in ipa_details_field class. The code
has been modified to display read-only fields as labels instead
of disabled text fields.

The attributelevelrights in host test data files have been updated.
2011-01-13 02:14:51 -05:00
Adam Young
b79bf4ab17 javascript lint cleanup 2011-01-12 21:47:05 -05:00
Rob Crittenden
4da9228fb2 Drop dependency on mozldap 2011-01-12 17:41:53 -05:00
Jakub Hrozek
f67d3cd32d Use correct option name in host plugin 2011-01-12 17:21:27 -05:00
Jakub Hrozek
404ded0e0a Fixes for the DNS plugin
https://fedorahosted.org/freeipa/ticket/730
2011-01-12 17:21:27 -05:00
Simo Sorce
abf4dde3e3 Restrict anonymous tgts
Fixes: https://fedorahosted.org/freeipa/ticket/432
2011-01-12 17:20:09 -05:00