Commit Graph

634 Commits

Author SHA1 Message Date
Karl MacMillan
b3c39632ea Merge. 0001-01-01 00:00:00 +00:00
Simo Sorce
c39d6d3be8 Merge in Rob aci patch (resolve conflict) 2007-12-12 16:42:19 -05:00
Simo Sorce
cecbca1a84 Separate out ACIs that affect radius 2007-12-12 14:16:52 -05:00
Simo Sorce
87bc5c4d63 Handle add/removing and stopping restarting daemons in update/remove 2007-12-12 13:58:55 -05:00
Karl MacMillan
abdbc50683 Import correct httpinstance.py 0001-01-01 00:00:00 +00:00
Karl MacMillan
913201a919 Fix spec file to grab certinstall. 0001-01-01 00:00:00 +00:00
Karl MacMillan
18992de657 Merge. 0001-01-01 00:00:00 +00:00
Simo Sorce
88c0c7f321 from ipa.ipautil import * --> from ipa import ipautil 2007-12-12 13:15:56 -05:00
Simo Sorce
d76886ff4f - Better access control, make sure not even admins can read out passwords
- Insure admins can't locked out by mistake by inclusion in disabled groups
- Fix also minor error in krbinstance.py
2007-12-11 21:56:36 -05:00
Karl MacMillan
158b4e8ff4 Commit corrected certs.py 0001-01-01 00:00:00 +00:00
Karl MacMillan
cf595511ff Move radius server components into a separate package. 0001-01-01 00:00:00 +00:00
Karl MacMillan
5cdff99bdf Add a man page for ipa-getkeytab. 0001-01-01 00:00:00 +00:00
Karl MacMillan
c9160e0233 Fix minor typo in unauthorized page. 0001-01-01 00:00:00 +00:00
Rob Crittenden
6390db3502 Add automatic browser configuration for kerberos SSO using javascript.
This uses the UniversalPreferencesWrite function to set the browser
preferences to allow negotiation and ticket forwarding in the IPA domain.
A self-signed certificate is generated to sign the javascript.
2007-12-12 09:36:32 -05:00
Karl MacMillan
3b4f0db73e Convert the setup of ssl from a shell script to a
python module. This is in preparation for user
supplied certs.
0001-01-01 00:00:00 +00:00
Karl MacMillan
1c3849eb57 User provided certs. 0001-01-01 00:00:00 +00:00
Karl MacMillan
ad3fcc200c Merge. 0001-01-01 00:00:00 +00:00
Rob Crittenden
ca8e71d938 Move the sort arrow to the left of the column title and don't overlap the text 2007-12-10 21:55:12 -05:00
Simo Sorce
c0b809efd5 Move dnsclient into ipa-python so that I will be able to use it in ipaconfig 2007-12-10 16:31:21 -05:00
Rob Crittenden
f169641aae Use title case for field labels 2007-12-10 17:44:04 -05:00
Rob Crittenden
00489597d8 Rework input validation to more closely match what we require in the UI 2007-12-07 17:07:03 -05:00
Rob Crittenden
5e4a162954 Fix delegation in the UI and add a missing aci that allows writes.
Make ipa-deldelegation more user-friendly.
2007-12-07 16:08:12 -05:00
Rob Crittenden
0c0cc370cf Fix spelling 2007-12-10 15:01:30 -05:00
Rob Crittenden
b75d735b7e Add default e-mail domain to the IPA configuration 2007-12-10 11:53:00 -05:00
Rob Crittenden
c95550a164 Remove some debugging statements 2007-12-10 11:54:42 -05:00
Rob Crittenden
059e8f00ef Add principal management templates 2007-12-10 09:58:18 -05:00
Karl MacMillan
8792559f74 Remove radiusinstance from ipa-server-install. 0001-01-01 00:00:00 +00:00
Karl MacMillan
d2378f13d0 Merge. 0001-01-01 00:00:00 +00:00
John Dennis
d53915954e merge 2007-12-04 10:08:08 -05:00
Rob Crittenden
299e457698 Convert krbmaxpwdlife and krbminpwdlife from seconds into days and hours 2007-12-03 18:07:47 -05:00
Simo Sorce
25c542870d Fix client installation tool 2007-12-04 09:01:40 -05:00
Rob Crittenden
03fe2a8d6a Increase default max password lifetime from 10 to 90 days 2007-12-03 18:09:14 -05:00
John Dennis
4e1d291d15 change location of radius data in ldap from
cn=radius,cn=services,cn=etc
to
cn=radius
2007-11-30 20:29:12 -05:00
John Dennis
6be932e8af fix merge error 2007-11-29 11:44:50 -05:00
John Dennis
d7a7ba4f45 add user profile command line arg to all radius
profile command line tools to select between shared
and per user profiles

modify AttributeValueCompleter so default values prefer
previously entered values in editing session
2007-11-28 12:06:06 -05:00
John Dennis
904b76059c merged radius work with latest mainline tip 2007-11-28 07:49:07 -05:00
John Dennis
c939c5d289 fix regular expression used in parse_key_value_pairs() 2007-11-27 22:52:11 -05:00
John Dennis
f73bd4e27e bug fixes 2007-11-27 21:55:06 -05:00
John Dennis
3fb9a81339 checkpoint bug fixing and cleanup of command line radius tools 2007-11-27 21:29:50 -05:00
John Dennis
5d1ca46ea7 do a better job of handling attribute deletion 2007-11-27 16:16:10 -05:00
John Dennis
82654731ab checkpoint work to add attribute deletion 2007-11-27 07:57:49 -05:00
John Dennis
78b5987101 add parse_items(), read_items_file()
move read_pairs_file() to ipautil
2007-11-26 23:11:49 -05:00
John Dennis
c5a43a0168 add ItemCompleter class 2007-11-26 20:59:53 -05:00
Rob Crittenden
2e7f629d91 Remove unnecessary attribute left over from testing 2007-11-26 20:34:59 -05:00
John Dennis
09238510ff add command line utilites for radius profiles 2007-11-26 19:30:33 -05:00
John Dennis
4f33d67418 remove radius_client.py, move contents to radius_util.py 2007-11-26 11:12:58 -05:00
John Dennis
2c2069d3ec checkpoint radius client add,modify,find,del working, command line args handled correctly 2007-11-26 09:46:19 -05:00
jdennis@VAIO
9a9a7e4058 clean up attribute names
clean up command line args in ipa-delradiusclient
2007-11-24 11:20:28 -05:00
John Dennis
9a8326c5c1 clean up radius client command line tools 2007-11-23 10:35:22 -05:00
John Dennis
d98686e967 Add radius profile implementations:
get_radius_profile_by_uid
  add_radius_profile
  update_radius_profile
  delete_radius_profile
  find_radius_profiles

Rewrite command line arg handling, now support pair entry, interactive
mode with auto completion, reading pairs from a file, better handling
of mandatory values, better help, long arg names now match attribute
name in pairs

Establish mappings for all attributes and names used in clients and
profiles

Add notion of containers to radius clients and profiles in LDAP

Move common code, variables, constants, and strings into the files
radius_client.py, radius_util.py, ipautil.py to eliminate redundant
elements which could get out of sync if modified and to provide access
to other code which might benefit from using these items in the
future.

Add utility functions:
  format_list()
  parse_key_value_pairs()

Add utility class:
  AttributeValueCompleter

Unify attribute usage in radius ldap schema
2007-11-21 13:11:10 -05:00