IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-15 19:01:55 -06:00
Code Issues Packages Projects Releases Wiki Activity
914 Commits 11 Branches 59 Tags 60 MiB
a19d27717a
Commit Graph

84 Commits

Author SHA1 Message Date
Martin Nagy
f7ca405716 Wrap up the raw_input() to user_input() for convenience and uniformity. 2008-07-23 10:05:06 -04:00
Martin Nagy
6cce2f45e8 Fix some small issues that caused compiler warnings, like uninitialized or unused variables or missing krb5 prototypes. 2008-06-30 14:17:10 -04:00
Simo Sorce
24f0f632b6 Fix uninizialized counter, was causing allocation to fail and command to 
return in case any encryption type was explicitly requested
 2008-06-12 19:06:30 -04:00
Rob Crittenden
5c916a1cc8 Fix some minor man page issues. 
438771
 2008-06-04 12:50:13 -04:00
Rob Crittenden
d6f7998fe7 Fix some formatting issues and correct the example. 
443009
 2008-06-04 11:14:33 -04:00
Rob Crittenden
28008a4bf2 Fix typo and reorder -q|--quiet so it displays nicer. popt isn't putting it on a separate line so moving it up front makes it easier to find. 
443014
 2008-06-04 11:05:47 -04:00
Rob Crittenden
c58b7a3d7c Move version.py to the common ipa directory instead of being server-based so it can be used by the client tool. 
Fix the client tool imports to fail more gracefully.
 2008-06-03 22:39:11 -04:00
Rob Crittenden
e935287f6e Try to clear up messages prompting for domain and IPA server when DNS discovery fails to find them. 2008-05-30 15:44:56 -04:00
Simo Sorce
8f082f2d4f Now that admin is in the common users tree make the nss_ldap 
configuration look at the specific tree where users are and
not search the full server.
 2008-05-29 09:43:08 -04:00
Simo Sorce
53afb67537 Fix the case where domain != lower(REALM) 
add the domain to the ipa.conf file for apps that need to know
This should fix a bug in the replica setup
 2008-05-29 09:43:00 -04:00
Martin Nagy
2f69e7e18d Change file mode of log files to 600. 
446869
 2008-05-20 22:43:03 -04:00
Jim Meyering
0d2212fe2f remove useless if-before-free tests 
I've been on a crusade (;-) to remove useless if-before-free tests,
so ran a script that spotted some here.  I think I removed the first
batch (without braces) automatically, then manually removed the ones
with curly braces around the free statements.

You may well have doubts about the portability of removing those
tests, but as long as you don't care about SunOS4 or earlier, you'll
be fine.  I've done similar things for e.g., coreutils, glibc, and git,
and have had no problems.
 2008-05-15 12:59:28 -04:00
Rob Crittenden
2b05d973a4 Fix typo in ipa-client-install manpage. 
446201
 2008-05-14 11:41:56 -04:00
Rob Crittenden
92d7f9c28a Make sure all services are stopped during uninstall. 
We were just shutting down the KDC if it had been started prior to IPA
installation. We need to stop it in all cases.

And we should restart nscd as it may have made an LDAP connection.

440322
 2008-05-14 09:57:09 -04:00
Simo Sorce
a86b1eaeed fix stupid typo, 
thanks Nalin for spotting this.
 2008-05-10 11:25:31 -04:00
Simo Sorce
5c4b1770c0 On IPA Servers connect to ourselves using localhost, 
and avoid searching for KDC servers via DNS, we just connect
to ourselves.
 2008-05-08 17:31:19 -04:00
Rob Crittenden
570b71372f Second half of the redoing how the version is managed. 2008-05-07 18:26:03 -04:00
Rob Crittenden
5ad2af3429 Redo the way versioning works in freeIPA. 
The file VERSION is now the sole-source of versioning.

The generated .spec files will been removed in the maintainer-clean targets
and have been removed from the repository.

By default a GIT build is done. To do a non-GIT build do:

 $ make TARGET IPA_VERSION_IS_GIT_SNAPSHOT=no

When updating the version you can run this to regenerate the version:

 $ make version-update

The version can be determined in Python by using ipaserver.version.VERSION
 2008-05-05 13:53:57 -04:00
W. Michael Petullo
29ddbc610c This patch begins the process of replacing OpenLDAP with mozldap. 
FreeIPA relies on RedHat's Directory Server, which uses mozldap.
A FreeIPA build using mozldap would reduce the project's dependencies and
redundant code. In addition, mozldap uses NSS instead of OpenSSL.
This is beneficial for the reasons listed in [1].

[1] http://fedoraproject.org/wiki/FedoraCryptoConsolidation
 2008-05-01 09:59:43 -04:00
Simo Sorce
298747e15a Make sure we always have the [domain-realm] section or kerberos libs misbheave. 2008-04-22 15:28:42 -04:00
Rob Crittenden
def28f3d5b Become version 1.0.0 2008-04-16 14:29:17 -07:00
Rob Crittenden
ff3ca61f73 Handle exceptions more gracefully on systems with python-ldap 2.2.0 
442136
 2008-04-14 18:23:29 -04:00
Simo Sorce
24a7cf3714 Fix client discovery and make sure command line options are not overwritten 
with discovered options, just verified.
 2008-04-09 15:55:46 -04:00
Simo Sorce
70d3717e8b Add --permitted-enctypes command and add it to the man page too 2008-04-08 18:02:42 -04:00
Simo Sorce
c45d58cc3f Make sure we start the NSCD daemon. 
It makes a huge difference on clients, if we cache lookups
 2008-04-08 14:58:52 -04:00
Simo Sorce
625d9b2de8 - Better defaults for nss_ldap 
- Make sure timeouts are not too high, so that machine does not hang if remote
  servers are not reachable
- Make sure root can always login no matter what the status of the ldap
  servers
- use rfc2307bis schema directive
 2008-04-01 18:04:59 -04:00
Simo Sorce
28ac93a535 Implement client uninstall 
(including RHEL4 contrib setup script)
 2008-03-31 17:33:55 -04:00
Rob Crittenden
5f72955bca Add some missing man pages 
436501
 2008-03-17 18:04:49 -04:00
Simo Sorce
8bfe814358 Allow client install to specify ntp server name 2008-03-14 08:42:06 -04:00
Rob Crittenden
546155c3af Fix build breakage. We now provide a man file, need to specify location to rpm 2008-03-11 17:02:22 -04:00
Simo Sorce
c2d3a9343f Add --quiet option to ipa-getkeytab 
Return message on success
Avoid SASL output from being printed
Make sure the man page is up to date
 2008-03-05 14:54:13 -05:00
Rob Crittenden
7fd656477a Prevent server and domain from being undefined or blank when we need them 
Improve LDAP error reporting
Don't return the str() of discovery values because it can return "None"

436130
 2008-03-05 16:33:12 -05:00
Rob Crittenden
b49942fe96 Close all fds when running another program. This fixes the SELinux AVCs. 
Put installation log files into /var/log.

430024
 2008-03-03 16:14:48 -05:00
Rob Crittenden
6533bc1a84 Add action statement to ldap.conf update 
Move imports into try/except so that ctrl-C can always be caught
Fix typo
 2008-02-27 16:17:38 -05:00
Rob Crittenden
111a475b15 Don't try to use options.realm_name unless it was passed in 
Don't allow empty responses to domain and realm name
Handle ctrl-C

434982
 2008-02-26 15:31:34 -05:00
Rob Crittenden
3617100849 Compress man pages after installation 2008-02-25 16:34:00 -05:00
Rob Crittenden
6d759d7dcb Move ipa-getkeytab man page into proper subdir 
433878
 2008-02-25 14:56:09 -05:00
Rob Crittenden
84d1e08d76 Become freeipa-0.99.0 2008-02-21 16:11:42 -05:00
Rob Crittenden
cbb6b5a005 Provide feedback on what is being done during ipa-client-install 
429541
 2008-02-20 17:09:02 -05:00
Simo Sorce
30195fb5fb Pass in server and domain parameters if provided, so that they are not ignored 2008-02-19 15:57:53 -05:00
Simo Sorce
46cb6e9bdd Run ipa-client-install after server install bits 2008-02-20 10:16:19 -05:00
Simo Sorce
0375112200 Add switch to be able to provide a comma separate list of encryption types 
we want to have in the keytab.
This superceedes any default enctype.
 2008-02-06 19:01:22 -05:00
Rob Crittenden
97d9c235dd Set the license uniformly to GPLv2 only. 2008-02-04 15:15:52 -05:00
Simo Sorce
3902a381d5 Add uniqueMember -> member mapping into /etc/ldap.conf on installation 2008-02-05 15:41:55 -05:00
Rob Crittenden
0e3ecf6270 Marked with wrong license. IPA is GPLv2. 2008-01-31 16:49:01 -05:00
Rob Crittenden
3594157f54 Add a copy of the LICENSE and populate some README's 2008-01-23 10:30:18 -05:00
Rob Crittenden
042fb11fa1 Fix issues reported by rpmlint. 
- Removing shebangs (#!) from a bunch of python libraries
- Don't use a variable name in init scripts for the lock file
- Keep the init script name consistent with the binary name, so renamed
  ipa-kpasswd.init to ipa_kpasswd.init
- Add status option to the init scripts
- Move most python scripts out of /usr/share/ipa and into the python
  site-packages directories (ipaserver and ipaclient)
- Remove unnecessary sys.path.append("/usr/share/ipa")
- Fix the license string in the spec files
- Rename ipa-webgui to ipa_webgui everywhere
- Fix a couple of issues reported by pychecker in ipa-python
 2008-01-18 16:20:36 -05:00
Rob Crittenden
aaa3cfd58c Fix case where a question was being asked in unattended mode. 
Catch permission errors on install.
Initialize srv so the error message works if the user presses enter
 2008-01-17 16:36:05 -05:00
Rob Crittenden
f45ded96a6 Add cyrus-sasl-gssapi as a requirement. 2008-01-16 10:26:53 -05:00
Mark McLoughlin
23ac773ada Update the .spec filenames in EXTRA_DIST 
Signed-off-by: Mark McLoughlin <markmc@redhat.com>
 2008-01-11 10:36:25 +00:00