IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-15 19:01:55 -06:00
Code Issues Packages Projects Releases Wiki Activity
854 Commits 11 Branches 59 Tags 60 MiB
8fb4809465
Commit Graph

854 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Simo Sorce
8fb4809465 Use openldap libraries by default as mozldap libs seem to break 
ldap_extended_operation() somehow and ipa_kpasswd stops working
 2008-05-29 09:43:28 -04:00
Simo Sorce
dc7d62d543 Fix crash bug in ipa_kpasswd 2008-05-29 09:43:20 -04:00
Simo Sorce
8f082f2d4f Now that admin is in the common users tree make the nss_ldap 
configuration look at the specific tree where users are and
not search the full server.
 2008-05-29 09:43:08 -04:00
Simo Sorce
53afb67537 Fix the case where domain != lower(REALM) 
add the domain to the ipa.conf file for apps that need to know
This should fix a bug in the replica setup
 2008-05-29 09:43:00 -04:00
Rob Crittenden
c5d6ad5c6e Set default logging level to INFO (still logs to Apache) 
Add function entry log for the core IPA XML-RPC functions.
 2008-05-28 14:13:19 -04:00
Rob Crittenden
0f9b944dde Add python-configobj as a Requires and do some other specfile cleanups. 
432814
 2008-05-28 14:09:08 -04:00
Simo Sorce
f32f8d6d82 Use a value that is explicitly 64bit on all architectures 2008-05-23 15:07:49 -04:00
Simo Sorce
3931d1d753 Move admin into cn=users,cn=accounts 
After some deep thinking I think the advantages of keeping all
posix enabled user accounts under cn=users,cn=accounts overweight a
perceived better protection of the admin account by keeping it in a
separate tree.
 2008-05-23 15:07:37 -04:00
Simo Sorce
0695649926 Don't make the rpm %post fail just because the server has never been 
configured before (and therefore there is nothing to upgrade, just let
it spit out warnings for admins that actually check whats going on.
 2008-05-22 17:20:09 -04:00
Rob Crittenden
927447b144 Fix up function return values so we can return 1 on an installation error. 
447973
 2008-05-22 16:37:33 -04:00
Rob Crittenden
a087818197 Move non-user-configurable configuration elements to TurboGears app.cfg file. 
432908
 2008-05-22 16:31:08 -04:00
Simo Sorce
0d023b2680 Fix testing for asprintf errors, we need to test the return value as 
per standard the  buffer status is undefined.
While there also introduce a new spearate variable to return the final
error and keep using ret for local error checks. This avoid potentially
overwriting the correct return value when checking for asprintf ...
 2008-05-22 11:44:02 -04:00
Martin Nagy
1069324eba Only ask the user to install bind. 2008-05-22 11:40:31 -04:00
Martin Nagy
2f69e7e18d Change file mode of log files to 600. 
446869
 2008-05-20 22:43:03 -04:00
Rob Crittenden
fcd3260955 Ensure hostnames are lower during installation and when adding service princs 
447381
 2008-05-20 15:07:24 -04:00
Rob Crittenden
fe2f69718f Remove broken link for IE configuration and replace sample domain/realm. Also fix some HTML errors: missing DOCTYPE, title, head. 
The web page actually comes up as a link in a search on Microsoft's site
but the content is gone. It is possible it will come back at some point, who
knows.

447445
 2008-05-20 15:05:50 -04:00
Rob Crittenden
d640eb17e5 Add validators.py to the list of files. 
445286
 2008-05-20 15:03:58 -04:00
Rob Crittenden
d142b5376d Do uniqueness check on phone numbers and cn entered via the UI. 
445286
 2008-05-20 11:38:35 -04:00
Rob Crittenden
6c87f83180 Don't pass the Directory Manager password on the command-line to ldapmodify. 
446865
 2008-05-19 17:07:41 -04:00
Simo Sorce
6119f83799 Use split instead of find as split does not fail to provide a complete 
component if no '.' is found.
 2008-05-15 14:26:25 -04:00
Jim Meyering
58592c3b4f detect failure to write ipa_kpasswd.pid file 
* ipa_kpasswd.c (main): Detect not just open failure,
but also any write failure.
 2008-05-15 12:59:28 -04:00
Jim Meyering
0d2212fe2f remove useless if-before-free tests 
I've been on a crusade (;-) to remove useless if-before-free tests,
so ran a script that spotted some here.  I think I removed the first
batch (without braces) automatically, then manually removed the ones
with curly braces around the free statements.

You may well have doubts about the portability of removing those
tests, but as long as you don't care about SunOS4 or earlier, you'll
be fine.  I've done similar things for e.g., coreutils, glibc, and git,
and have had no problems.
 2008-05-15 12:59:28 -04:00
Jim Meyering
3256365277 * ipa_pwd_extop.c (encrypt_encode_key): Handle malloc failure. 2008-05-15 12:59:28 -04:00
Simo Sorce
d0f0d97be6 If there is an error we need to send back a reply ourselves. 
Return also an intelligible error message.
 2008-05-15 12:59:28 -04:00
Simo Sorce
fb3555c483 For some unknown reason the sort control returns values sorted in reverse. 
Ask for inverse order to get them straight ...
 2008-05-15 12:59:28 -04:00
Simo Sorce
10f0881dba Implement checks to make sure we are not assigning a number that is in use. 
Change config to support a maximum value so that ranges can be defined.
Add stubs to reach out and ask to swap in new ranges and notify that new
chuncks are needed/used.
 2008-05-15 12:59:28 -04:00
Martin Nagy
2d608a8354 Don't ask the user again if he wants to replace bind configuration files if he specified --setup-bind. 
430090
 2008-05-14 16:25:10 -04:00
Martin Nagy
28f312664e Fix typo, /etc/resolve.conf -> /etc/resolv.conf. 
444660
 2008-05-14 16:25:06 -04:00
Rob Crittenden
2b05d973a4 Fix typo in ipa-client-install manpage. 
446201
 2008-05-14 11:41:56 -04:00
Rob Crittenden
92d7f9c28a Make sure all services are stopped during uninstall. 
We were just shutting down the KDC if it had been started prior to IPA
installation. We need to stop it in all cases.

And we should restart nscd as it may have made an LDAP connection.

440322
 2008-05-14 09:57:09 -04:00
Rob Crittenden
99141e3a04 Enforce the maximum username length set by IPA Policy 
439891
 2008-05-14 09:48:21 -04:00
Rob Crittenden
319cb38e28 Do a more thorough job of removing an existing DS instance. 
Add /usr/lib/dirsrv/slapd-INSTANCE to the list of directories removed.

442753
 2008-05-13 22:53:01 -04:00
Rob Crittenden
3daa94ccc0 Catch name resolution errors coming from the socket module. 
442650
 2008-05-13 12:00:21 -04:00
Rob Crittenden
b1cc4199fa The admin user doesn't have the inetorgperson objectclass so don't have a givenname attribute. The UI is currently hardcoded to require "first name" which renders the admin user uneditable via the UI. 
This is a hack that will allow admin to be edited, assuming that one doesn't
try to add a firstname field.

440548
 2008-05-13 11:59:46 -04:00
Simo Sorce
a86b1eaeed fix stupid typo, 
thanks Nalin for spotting this.
 2008-05-10 11:25:31 -04:00
Simo Sorce
0b2756bed7 Fix existence check, default_server is an array so we need to 
check its length to determine if it is empty
 2008-05-10 11:25:31 -04:00
Rob Crittenden
41457f0e81 Display information on how to uninstall a partially installed server. 
This may have failed either because the user pressed ^C or something
failed during installation.

442454
 2008-05-09 14:05:47 -04:00
Rob Crittenden
ae641ed31b Include information on where to look if a hostname resolves to localhost. 
442812
 2008-05-09 14:04:04 -04:00
Rob Crittenden
9fe649b804 Convert mercurial command to git equivalent for creating an archive. 
By default it will use the master branch of the repo this is run from.
To specify a different branch use the argument TARGET=<branch>

e.g. make dist TARGET=ipa-1-0

442419
 2008-05-09 11:09:49 -04:00
Simo Sorce
5c4b1770c0 On IPA Servers connect to ourselves using localhost, 
and avoid searching for KDC servers via DNS, we just connect
to ourselves.
 2008-05-08 17:31:19 -04:00
Simo Sorce
34c6ac06c6 Return better ewrror message that gives a hint about who actually returned it 
+ Some cleanups (trainling spaces and such).
 2008-05-08 17:03:43 -04:00
Rob Crittenden
6538c150b1 Detect existing DS instances and prompt for removal during replica install. 
442454
 2008-05-08 15:56:10 -04:00
Rob Crittenden
318c6adfae Add missing colon to function definition that broke the build 2008-05-08 15:17:59 -04:00
Rob Crittenden
bd9dea888d Add a version API to the server so it knows what version it is. 
435019
 2008-05-08 13:01:27 -04:00
Rob Crittenden
24f43bc846 Don't allow the IPA server service principals to be removed. 
440282
 2008-05-08 12:57:31 -04:00
Rob Crittenden
2bb64e404c Don't prompt for confirmation of DM password when installing a replica. 
It implies that you are setting a new password and you really aren't.

Also added a catch for KeyboardInterrupt with instructions on how to
recover from a partial install.

441607
 2008-05-08 12:01:38 -04:00
Rob Crittenden
570b71372f Second half of the redoing how the version is managed. 2008-05-07 18:26:03 -04:00
Simo Sorce
6f4d71d2cc Indent the plugin accordingly to our style guidelines. 
Used indent -kr -nut dna.c for most of the changes
 2008-05-07 14:45:46 -04:00
Simo Sorce
70d5209b11 Fix a bug in our dns library, do not return the query as a reply if 0 replies were returned. 2008-05-07 14:42:49 -04:00
Rob Crittenden
8e7561cff6 Refine our web space some more so that everything we reference is in /ipa 
UI: /ipa/ui
XML-RPC: /ipa/xml
errors: /ipa/errors
config: /ipa/config

I had to hardcode that URI into the CSS pages but TurboGears handles the
rest of the translations with tg.url().

Added a version to ipa.conf and ipa-rewrite.conf so we can update them
in the future if needed with ipa-upgradeconfig

440443
 2008-05-07 09:41:32 -04:00