Commit Graph

4231 Commits

Author SHA1 Message Date
Endi S. Dewata
91de76f8b1 Fixed tab and dialog widths.
The width of the 1st level tab has been modified to expand according
to the size of the tab label.

The width of the adder dialogs have been increased to allow longer
button labels.

Ticket #1825
2011-09-29 16:58:05 +00:00
Endi S. Dewata
ce431be795 Updated color scheme.
The UI background has been replaced with new images from UXD.

Ticket #1842
2011-09-28 14:09:18 +00:00
Rob Crittenden
08ec4b0ddf Detect CA installation type in ipa-replica-prepare and ipa-ca-install.
ipa-ca-install can only add a dogtag CA to an IPA install.

ipa-replica-prepare can only be run on the initial master with a
selfsign backend.

https://fedorahosted.org/freeipa/ticket/1756
https://fedorahosted.org/freeipa/ticket/1757
2011-09-27 17:51:44 +02:00
Petr Vobornik
84744a2591 Fixed: Enrolment dialog offers to add entity to reflexive association.
https://fedorahosted.org/freeipa/ticket/1883

It's a regression introduced by patch for #1797

Reproduce:

 * show user group foo
 * click on user groups tab
 * click on enroll button

Result:
User group 'foo' is listed in available list.

Expected result:
User group 'foo' is not listed in available list.
2011-09-27 14:44:38 +00:00
Endi S. Dewata
df16d4aff7 Fixed duplicate entries in enrollment dialog.
The IPA.association_adder_dialog has been modified not to show
search results that are already selected to prevent duplicates.

Ticket #1859
2011-09-27 14:44:33 +00:00
Rob Crittenden
a27a820221 Add regular expression pattern to host names.
Limit hostnames to letters, digits and - with a maximum length of 255

https://fedorahosted.org/freeipa/ticket/1780
2011-09-27 16:08:40 +02:00
Rob Crittenden
2be04c6e7f Include failed service and service groups in hbac rule management
hbacrule-service-add/remove failures weren't being displayed because
no label was defined.

https://fedorahosted.org/freeipa/ticket/1863
https://fedorahosted.org/freeipa/ticket/1865
2011-09-27 15:57:24 +02:00
Martin Kosek
c0f3c318da Fix error messages in hbacrule
Fix NotFound error messages in hbacrule commands so that the text is
consistent with the rest of the framework.

https://fedorahosted.org/freeipa/ticket/1861
2011-09-27 15:37:24 +02:00
Martin Kosek
d6d73fd8a8 Revert "Always require SSL in the Kerberos authorization block."
This patch broke installation of a new master. Reverting until
we develop a better solution.

This reverts commit 384d4e8f50.
2011-09-27 08:56:50 +02:00
Jan Cholasta
63182c963b Validate name_from_ip parameter of dnszone.
ticket 1627
2011-09-27 08:44:03 +02:00
Endi S. Dewata
ef2faa6e37 Fixed add/delete arrows position.
The IPA.adder_dialog has been modified such that it shows the >>
arrow first then the << arrow.

Ticket #1858
2011-09-26 16:41:00 +00:00
Jan Cholasta
f4089adf77 Fix ipa-replica-prepare always warning the user about not using the system hostname.
ticket 1717
2011-09-26 17:11:17 +02:00
Petr Vobornik
09dc3562f2 Fixed: Column header for attributes table should be full width
https://fedorahosted.org/freeipa/ticket/1841

The column header for the attributes table (IPA.attributes_widget) does not cover the entire width of the table. This problem appears in the adder dialog and details page for permissions, self-service permissions, and delegations.
2011-09-26 14:58:06 +00:00
Marko Myllynen
5915e478ec Don't remove /tmp when removing temp cert dir
If /tmp happens to be empty os.removedirs() happily removes it...

https://fedorahosted.org/freeipa/ticket/1843
2011-09-22 22:03:12 -04:00
Rob Crittenden
384d4e8f50 Always require SSL in the Kerberos authorization block.
This also corrects a slight bug where if add is True then we always
re-update the file.

https://fedorahosted.org/freeipa/ticket/1755
2011-09-23 20:41:17 +02:00
Endi S. Dewata
060eea5f03 Fixed problem displaying special characters.
Some jQuery objects in various locations have been modified to use
text() to show values obtained from the server (except messages).
The text() will automatically encode special characters.

Ticket #1798
2011-09-23 15:29:26 +00:00
Rob Crittenden
ad37727150 Don't log one-time password in logs when configuring client.
https://fedorahosted.org/freeipa/ticket/1801
2011-09-23 15:31:58 +02:00
Endi S. Dewata
e254ea5d30 Fixed problem on combobox with search limit.
The IPA.combobox_widget has been modified such that if the drop-down
list doesn't contain the stored value (due to search limit) it will
not select anything from the list.

The widget has also been modified not to select the value that matches
the filter automatically because that might not be the user's intention.

Ticket #1819
2011-09-23 13:15:41 +00:00
Endi S. Dewata
c6f5806ed8 Removed undo flags from dialog field specs.
Since the undo flag is now automatically set to false in dialogs,
it's no longer necessary to specify it in the field specs.

Ticket #1394
2011-09-23 13:13:50 +00:00
Endi S. Dewata
eb9d9634da Modified dialog to use sections.
The IPA.dialog has been modified to store sections instead of fields.
If there is no sections specified, it will create a default section.

The adder dialog for automount map has been modified such that the
fields related to indirect map are stored in a section which will
only be visible when the map type is set to indirect.

The adder dialog for host has been modified such that it uses a
custom section for hostname and DNS zone and standard section for
the other fields.

Ticket #1394
2011-09-23 13:13:46 +00:00
Rob Crittenden
b8461e8d56 Shut down duplicated file handle when HTTP response code is not 200.
httplib purposely keeps the socket open as a file on failed requests. We
need to close this file otherwise nss_shutdown() will fail.

https://fedorahosted.org/freeipa/ticket/1807
2011-09-23 10:49:59 +02:00
Endi S. Dewata
e4f40a98a6 Fixed problem enrolling member with the same name.
The IPA.association_adder_dialog has been modified to use an exclusion
list to hide entries that are already enrolled.

The IPA.adder_dialog has been modified to store the columns directly
in the available & selected tables.

Ticket #1797
2011-09-22 17:05:51 +00:00
Endi S. Dewata
e5ef7fa817 Fixed problem enabling/disabling DNS zone.
The details facet for DNS zone has been modified to use dnszone-
enable/disable for idnszoneactive and dnszone-mod for other fields.

Ticket #1813
2011-09-22 17:05:22 +00:00
Simo Sorce
a7b6a6e498 ipa-pwd-extop: Enforce old password checks
If a user is changing his own password, then require the old password to be
sent for validation purposes.

https://fedorahosted.org/freeipa/ticket/1814
2011-09-21 18:10:44 -04:00
Rob Crittenden
fb6abb2acc Normalize uid in user principal to lower-case and do validation
Use same normalization and validation in passwd plugin and add some
tests for invalid principals

https://fedorahosted.org/freeipa/ticket/1778
2011-09-22 15:41:33 +02:00
Simo Sorce
355b93ecf3 ipa-pwd-extop: Fix segfault in password change.
Do not pass an empty buffer to ber_init() as it will assert.
Check before hand and return an error.
2011-09-21 16:04:39 -04:00
Martin Kosek
798490ffb6 Fix /usr/bin/ipa dupled server list
Fix get_url_list() so that the configured master server is there
just once. This fix lets /usr/bin/ipa try connecting to all IPA
masters just once and not print confusing server list with
dupled master.

https://fedorahosted.org/freeipa/ticket/1817
2011-09-22 15:09:48 +02:00
Martin Kosek
89e8e1a3d6 Remove checks for ds-replication plugin
The replication plugin is no longer shipped as a separate package.
Remove the code checking its existence.

https://fedorahosted.org/freeipa/ticket/1815
2011-09-22 13:14:42 +02:00
Endi S. Dewata
78a70fca9d Fixed missing cancel button in unprovisioning dialog.
The host unprovisioning dialog has been modified to provide a cancel
button.

Ticket #1811
2011-09-21 22:15:57 +00:00
Endi S. Dewata
dea515245c Fixed columns in HBAC/sudo rules list pages.
The following list pages were modified to show these columns only:
 * HBAC rules: name, type, enabled, description
 * Sudo rules: name, enabled, description

Ticket #1796
2011-09-21 22:15:46 +00:00
JR Aquino
fc84af65d5 25 Create Tool for Enabling/Disabling Managed Entry Plugins
Remove legacy ipa-host-net-manage
Add ipa-managed-entries tool
Add man page for ipa-managed-entries tool

https://fedorahosted.org/freeipa/ticket/1181
2011-09-21 09:23:02 +02:00
Endi S. Dewata
417ccb63af Fixed posix group checkbox.
In the adder dialog for groups the checkbox has been modified to use
the correct field name "nonposix" and be checked by default.

Note: This is a temporary fix to minimize the changes due to release
schedule. Eventually the field label will be changed into "Non-POSIX
group" and the checkbox will be unchecked by default, which is more
consistent with CLI.

Ticket #1799
2011-09-20 18:53:56 +00:00
Martin Kosek
f35358e2bc dirsrv is not stopped correctly in the fallback
The previous patch fixed ipactl stop command. However, the dirsrv
stop in the ipactl start command fallback was not right either.

https://fedorahosted.org/freeipa/ticket/1800
2011-09-20 12:41:35 +02:00
Martin Kosek
60c2692fc7 ipactl does not stop dirsrv
Remove an invalid instance name passed to dirsrv service so that
it is correctly stopped.

https://fedorahosted.org/freeipa/ticket/1800
2011-09-20 10:50:42 +02:00
Rob Crittenden
7a4295ef1a The return value of restorecon is not reliable, ignore it.
https://fedorahosted.org/freeipa/ticket/1816
2011-09-20 08:54:43 +02:00
Jan Cholasta
f83c773a36 Fix client install on IPv6 machines.
ticket 1804
2011-09-19 18:11:47 +02:00
Rob Crittenden
b5a6cd91e8 Suppress managed netgroups as indirect members of hosts.
By design these managed netgroups are not supposed to show unless you
specifically want to see them.

https://fedorahosted.org/freeipa/ticket/1738
2011-09-19 08:41:39 +02:00
Rob Crittenden
5a778d4def Change the Requires for the server and server-selinux for proper order
The server package needs to be installed before the server-selinux
package otherwise the SELinux contexts won't get set properly.

The (postun) is so you can continue to do yum erase freeipa-python
and it will pick up everything else.

https://fedorahosted.org/freeipa/ticket/1779
2011-09-15 23:42:14 -04:00
Endi S. Dewata
e7a0f92441 Removed entitlement menu.
Ticket #1806
2011-09-16 16:34:42 +00:00
Jan Cholasta
5f9d81e7c8 Check that install hostname matches the server hostname.
ticket 1717
2011-09-14 22:42:24 -04:00
Endi S. Dewata
b3748cd1f7 Fixed problem opening host adder dialog.
The hidden fqdn field in the host adder dialog has been changed to
use a generic widget instead of text widget to avoid null pointer
error since the UI elements are never created.

Ticket #1788
2011-09-14 23:59:15 +00:00
Rob Crittenden
e5e17dcbee Skip the cert validator if the csr we are passed in is a valid filename
The validator will still fire, just after the load_files() call. Basically
it will hit the validator twice. The first time it will exit because the
value of csr is a filename. The second time it will run the validator against
the contents of the file.

ticket https://fedorahosted.org/freeipa/ticket/1777
2011-09-14 18:27:16 +02:00
Rob Crittenden
97104cc6d2 Update ipa-ldap-updater man page saying it is not an end-user utility
https://fedorahosted.org/freeipa/ticket/1792
2011-09-14 14:40:08 +02:00
Endi S. Dewata
8d40e3813c Fixed labels for run-as users and groups.
The labels for the run-as users and groups tables in sudo rule details
page have been modified to improve the clarity.

Ticket #1752
2011-09-13 17:34:09 +00:00
Petr Vobornik
65e978a243 Code cleanup: widget creation
https://fedorahosted.org/freeipa/ticket/1788

Removed code duplication of undo links.
Simplified code of widget creation to be more readable.
2011-09-13 17:34:00 +00:00
Rob Crittenden
613bd3ee6a The precendence on the modrdn plugin was set in the wrong location.
https://fedorahosted.org/freeipa/ticket/1370
2011-09-13 17:37:18 +02:00
Rob Crittenden
2c013a274e Improved handling for ipa-pki-proxy.conf
- Remove ipa-pki-proxy.conf when IPA is uninstalled
- Move file removal to httpinstance.py and use remove_file()
- Add a version stanza
- Create the file if it doesn't exist on upgraded installs

https://fedorahosted.org/freeipa/ticket/1771
2011-09-13 16:09:33 +02:00
Rob Crittenden
970480c6d8 Remove normalizer that made role, privilege and permission names lower-case
https://fedorahosted.org/freeipa/ticket/1747
2011-09-12 16:51:54 -04:00
Jr Aquino
3b633d559c Move Managed Entries into their own container in the replicated space.
Repoint cn=Managed Entries,cn=plugins,cn=config in common_setup
Create: cn=Managed Entries,cn=etc,$SUFFIX
Create: cn=Definitions,cn=Managed Entries,cn=etc,$SUFFIX
Create: cn=Templates,cn=Managed Entries,cn=etc,$SUFFIX
Create method for dynamically migrating any and all custom Managed Entries
from the cn=config space into the new container.
Separate the connection creation during update so that a restart can
be performed to initialize changes before performing a delete.
Add wait_for_open_socket() method in installutils

https://fedorahosted.org/freeipa/ticket/1708
2011-09-12 16:28:57 -04:00
Martin Kosek
7c50d17983 Fix pylint false positive in hbactest module
https://fedorahosted.org/freeipa/ticket/1763
2011-09-13 13:50:18 +02:00