Commit Graph

301 Commits

Author SHA1 Message Date
Rob Crittenden
99b84bfd01 Handle ldap.UNWILLING_TO_PERFORM more gracefully 2007-11-09 16:34:52 -05:00
Rob Crittenden
d9194cdd09 Don't continue if a kerberos credentials cache is not available
forked-model detection was incorrect.
Both of these return an error instead of raising one
2007-11-09 14:55:41 -05:00
Rob Crittenden
b7506a5ea6 Fix editing groups when cn is a single-valued field
Fix some error messages that were printing the entire detail message
2007-11-09 14:01:28 -05:00
Rob Crittenden
705d68ddcb Require uniqueness in the name/comment field of delegations
Fix error reporting in the UI to include the detailed message
Sort delegations by name when displaying them
Update the name field from "Name" to "Delegation Name"
2007-11-09 13:58:36 -05:00
Rob Crittenden
6f03dde1ab Underline columns on sort results page so users will know it is a link
Restore the CSS to display the up/down arrow on sort columns
2007-11-12 15:14:35 -05:00
Rob Crittenden
547e6e920e Redirect to the FQDN otherwise kerberos auth may fail 2007-11-12 14:47:48 -05:00
Rob Crittenden
e1ca8c235c Initial support for policy editing
More work is needed as the values are currently hardcoded and not saved
2007-11-12 14:19:05 -05:00
Rob Crittenden
e9dfbfa773 Enable multi-value field support for some attributes on the edit pages
Better error reporting in the GUI
Include a document describing how multi-valued fields work
2007-11-08 22:12:42 -05:00
Pete Rowley
24d5777bd6 Add posix auto gen for single master case 2007-11-06 15:57:15 -08:00
John Dennis
22493d9b9f remove offensive use of rpm
add the radiusprofile to the list of objectclasses used when creating a user
2007-11-06 16:26:10 -05:00
Rob Crittenden
50c383aeed Update text to reflect new CSS code (sidebar now on right) 2007-11-06 10:22:47 -05:00
Karl MacMillan
8e48393c61 Introduce service base class and clean up ipa-server-install
1) Add a base class for all of the instance objects.
2) Normalize usage of logging.
3) General cleanups of ipa-server-install.
4) Make better use of httpinstance.
5) Add webguiinstance.
6) Improve progress reporting during installation.

Works Here (TM), but it would be nice to get someone else
to test since this moves code around a bit.
0001-01-01 00:00:00 +00:00
John Dennis
8cfd270f34 merge initial radius work 2007-11-03 12:22:20 -04:00
Karl MacMillan
8f4362f2f2 Enable referential integrity plugin. 0001-01-01 00:00:00 +00:00
Rob Crittenden
010fb65bfd define Self-Service as editting your own record.
This has the side-effect of removing the realm from Loggin in as. This
can be changed by using user_name instead of display_name in master.kid.
2007-11-02 17:41:24 -04:00
Rob Crittenden
9d24003528 Distinguish between active and inactive users on the Find People page. 2007-11-02 11:42:38 -04:00
Rob Crittenden
dc01ea0fe6 groups come back as a list where the first element is the number of
groups returned. Skip that element.
2007-11-02 11:35:50 -04:00
Karl MacMillan
36e43aed1b NTP configuration for client and server.
Configure ipa servers as an ntp server and clients
to (by default) us the ipa server as an ntp server.

Also corrected the messages about which ports should
be opened.
0001-01-01 00:00:00 +00:00
Rob Crittenden
6a0ca23577 Update the UI look and feel 2007-11-01 16:15:32 -04:00
Simo Sorce
77a105688c Fix ticket #70 2007-11-01 13:56:03 -04:00
Rob Crittenden
a51dd58278 TurboGears log files and log rotation
The error log is rotated weekly on Sunday. 4 backups are saved.

The access log is not stored since it would be a duplicate of the
Apache logs. It can be enabled if desired.

Had to move the call to daemonize() in ipa-webgui so that the
fork is done before TurboGears is initialized. Otherwise the log
files end up getting closed.
2007-11-01 11:55:53 -04:00
Karl MacMillan
29c0668e98 Bump versions for release. 0001-01-01 00:00:00 +00:00
Simo Sorce
51a5130227 Properly increment kvno and keep recent key material around
This is necessary for services that need to be able to respond
to requests from client that acquired a service ticket just before
a password change.
2007-10-31 10:52:44 -04:00
Karl MacMillan
27f0aab667 Rename memberOf to group_members in xml-rpc interface. 0001-01-01 00:00:00 +00:00
Rob Crittenden
303d5ebad9 Have the GUI use memberOf() instead of looping through the member DNs
Fix a bug in the local transport version of memberOf()
2007-10-31 10:08:16 -04:00
Rob Crittenden
1d6e88565c Add memberOf API call to the XML-RPC interface
Make find-groups use memberOf to have a prettier dispaly of members
2007-10-30 15:07:02 -04:00
Pete Rowley
1871e8dbf6 Add user self service aci 2007-10-29 14:52:19 -07:00
Karl MacMillan
4f4f947283 Update server deps to include acl and freeipa-admintools. 0001-01-01 00:00:00 +00:00
Rob Crittenden
ed387e2ebb Add inetUser to the admin user so memberOf will work 2007-10-30 14:42:19 -04:00
Rob Crittenden
3c8cfd94bd Create LDAP indeces on installation for fields the web GUI searches against 2007-10-30 13:41:41 -04:00
Rob Crittenden
e40c583b12 Create configuration for MIT Windows kerberos client and install into
http://hostname/config so users can point their MIT client at the IPA
server and automatically fetch the configuration.
2007-10-29 12:00:48 -04:00
Kevin McCarthy
859291a706 Add delete user and group to webgui.
NOTE: this doesn't handle referential integrity.
2007-10-23 16:46:50 -07:00
Rob Crittenden
28641544e7 Set the user password when adding a user 2007-10-26 12:35:32 -04:00
Kevin McCarthy
1d746c9fc2 Rename the form fields parameter to be clearer:
user -> user_fields
group -> group_fields
delegate -> delegate_fields
2007-10-25 09:18:45 -07:00
Kevin McCarthy
358d279a53 webgui side of custom fields. 2007-10-24 16:04:17 -07:00
Mark McLoughlin
6e6237e54a Fix host_name buglet in ipa-server-install
This patch fixes a couple of buglets with read_ip_address():

  1) It writes host_name to /etc/hosts, but isn't currently
     being passed host_name

  2) It doesn't return the IP address even though the caller
     expects it

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-02-21 15:23:29 +00:00
Karl MacMillan
263fba1468 Handle selinux failure
Ignore errors if setsebool fails and print a warning.
0001-01-01 00:00:00 +00:00
Karl MacMillan
2703be51c8 Print warning about NTP
After looking into setting up ntpd on the IPA servers I decided it
was better just to warn admins. There are just too many valid setups
for time synchronization for us to try to get this right. Additionally,
just installing ntp and accepting the default config will result in
a configuration that is perfectly valid for IPA.

This patch checks if ntpd is running and suggests enabling it if it
is not - for client and server. It also adds some suggested next
steps to the server installation.
0001-01-01 00:00:00 +00:00
Rob Crittenden
f5cc36507b Add dependency on python-krbV 2007-10-24 15:39:05 -04:00
Kevin McCarthy
60d46ac660 Fix devel mode for the webgui. 2007-10-23 09:02:55 -07:00
Rob Crittenden
04636b8ae7 Add an LDAP attribute -> label mapping function to XML-RPC layer
Move some ACI functions around in preparation for cli delegation
2007-10-22 17:06:52 -04:00
Rob Crittenden
a47f893957 update_user and update_group need to be defined differently in order
to be available to the XML-RPC interface
2007-10-22 10:09:39 -04:00
Kevin McCarthy
f881e21f7f Add add/edit/show for manager and secretary fields. 2007-10-19 15:19:28 -07:00
Karl MacMillan
1685751b1c Remove dependency between ipa-pyton and ipa-server
Current ipa-python imports and calls code from ipaserver (which is in
the ipa-server package). This makes it impossible to use the admin
tools or the ipa-python package on a system without the server bits
installed. This fixes that in a fairly minimal way.
0001-01-01 00:00:00 +00:00
Kevin McCarthy
5e651a6496 Finish the email autosuggest.
For now I've added a new API call.  The field-specific searching is
a ways off.
2007-10-18 14:33:55 -07:00
Rob Crittenden
f018c2123c Require mod_nss-1.0.7-2 or higher. This version fixes an issue when
using mod_nss with mod_proxy.
2007-10-19 11:41:59 -04:00
Rob Crittenden
ba0adcffb1 Require SSL for the XML-RPC interface 2007-10-19 10:14:30 -04:00
Karl MacMillan
086193af0a Remove the use of uuid in the directory server instance name.
The use of a uuid for the DS instance name is overkill and it is a real
pain. This patch will use ipa-realm-name instead (resulting in something
like slapd-EXAMPLE-COM). All periods are converted to "-" because the DS
can't handle periods in server ids.
0001-01-01 00:00:00 +00:00
Kevin McCarthy
c4bd800b37 Fix HTML errors on empty fields. Move roomnumber to address section. 2007-10-19 09:18:51 -07:00
Kevin McCarthy
fd8690dd63 Add a flash message to the top of the page when there are validation errors. 2007-10-19 08:59:40 -07:00