Pavel Zuna
a3ae5047f3
Add group plugin port to new LDAP backend.
2009-05-20 16:46:28 -06:00
Rob Crittenden
e5bec4ae39
Schema change so the nisnetgroup triples work properly.
...
If we use cn for hostname there is no easy way to distinguish between
a host and a hostgroup. So adding a fqdn attribute to be used to store
the hostname instead.
2009-05-19 09:54:17 -04:00
Rob Crittenden
5e3cdb9643
Remove all services when a host is removed Revoke certificate (if any) when a service is removed
2009-05-13 14:17:21 -04:00
Rob Crittenden
014f3ff1c6
Improve revocation_reason argument
2009-05-13 14:17:03 -04:00
Rob Crittenden
1c31b5bc08
Add a reason to the NotFound exception so we can provide more robust errors
2009-05-13 14:16:44 -04:00
Rob Crittenden
0d6aaef2e1
We decided not to issue a certificate on join
2009-05-07 10:54:21 -04:00
Rob Crittenden
8f1df0fe8a
Store the new certificate in a service record. Clean up some argument names to match the current standard.
2009-05-07 10:54:14 -04:00
Rob Crittenden
5405c01025
Add validator and normalizer for service principals Add --certificate argument Update default objectclasses Use the crud.Search method for service-find
2009-05-06 11:28:49 -04:00
Rob Crittenden
c0020955a5
Some minor cosmetic changes
2009-05-04 18:01:06 -04:00
Rob Crittenden
d4076915cd
Add posixGroup to the objectclass list if gidnumber is set
...
498335
2009-05-04 17:43:00 -04:00
Rob Crittenden
c8ee910ff6
Issue an SSL server cert when joining the IPA domain
2009-05-04 17:41:06 -04:00
Rob Crittenden
8424ea8c03
A class for dealing with a temporary NSS certificate database
2009-05-04 16:56:12 -04:00
Pavel Zuna
36c239cda4
Add DNS management plugin port to the new ldap backend.
2009-04-30 16:17:49 -04:00
Pavel Zuna
75b551fd5e
Use right attribute name for e-mail in user2 plugin.
2009-04-30 13:50:05 -04:00
Rob Crittenden
21ccdec860
Add missing required attribute, nisdomainname
2009-04-30 13:26:27 -04:00
Rob Crittenden
536b215078
Use correct attribute for e-mail address
...
Resolves 498269
2009-04-29 13:51:47 -04:00
David O'Brien
763c7ef914
trivial update to standardize terms in docstring
2009-04-28 13:32:01 -04:00
Pavel Zuna
7d0bd4b895
Rename errors2.py to errors.py. Modify all affected files.
2009-04-23 10:29:14 -04:00
Pavel Zuna
af82879009
Add user plugin port with some bugs fixed to the new LDAP backend.
2009-04-22 15:16:51 -04:00
Rob Crittenden
64fa3dd4c3
Finish work replacing the errors module with errors2
...
Once this is committed we can start the process of renaming errors2 as errors.
I thought that combinig this into one commit would be more difficult to
review.
2009-04-20 13:58:26 -04:00
Rob Crittenden
e6171404bf
Make parentmap a autofill variable and add tests when parentmap is not passed
2009-04-13 15:22:49 -04:00
Rob Crittenden
8821d8cac3
Fill in default values for os and platform
2009-04-13 14:54:16 -04:00
Jason Gerard DeRose
a6294ba041
Renamed remaining plugins still using f_* b_* convention
2009-04-01 10:34:57 -04:00
Rob Crittenden
d6814f3aae
Implement a few new targets for ACIs
...
Also switch to the StrEnum parameter type for some options so we let the
framework do the enforcement
2009-03-25 11:03:03 -04:00
Rob Crittenden
1b1f9af01c
Add a 'showall' command so one can pick from a list of tasks to add to a role
2009-03-25 11:02:49 -04:00
Rob Crittenden
5aed824a6c
Use tuples instead of lists for class variables
2009-03-25 11:02:47 -04:00
Rob Crittenden
c39a29e0cf
Converted to use new baseclass, remove the one with the f_ prefix
2009-03-20 09:28:26 -04:00
Rob Crittenden
b627f50121
Convert to use the new basegroup framework
2009-03-20 09:28:18 -04:00
Rob Crittenden
9bc1419ac0
Convert to use the new basegroup framework
2009-03-20 09:28:16 -04:00
Rob Crittenden
33df0a3915
Convert to use the new basegroup framework
2009-03-20 09:28:14 -04:00
Rob Crittenden
1445a36026
Modify the taskgroup plugin to use the new group baseclass and add tests
2009-03-20 09:28:12 -04:00
Rob Crittenden
a55c5d6bcd
New plugin to handle role groups
...
Role groups will be part of the ACI system. It will let one create broad
categories of permissions. Things like: helpdesk, user admin, group admin,
whatever.
2009-03-20 09:28:09 -04:00
Rob Crittenden
5e2e3fd17d
Add generic base class that will most of the heavy lifting for groups
2009-03-20 09:28:06 -04:00
Rob Crittenden
8d796eedee
kw is supposed to contain just lower-case values
2009-03-19 16:02:12 -04:00
Rob Crittenden
51193923f1
kw is supposed to contain just lower-case values
2009-03-19 16:02:09 -04:00
Rob Crittenden
bc056cda2d
Update the ACI class to be more robust and the beginnings of an ACI plugin
...
The ACI plugin is really meant for developers to help manage the ACIs.
It may or may not be shipped. If it is it will be disabled by default.
It is very much a shoot-in-foot problem waiting to happen.
2009-03-18 15:47:06 -04:00
Rob Crittenden
4c5806b4b4
Fix some minor issues in group and service plugins
2009-03-17 14:52:38 -04:00
Rob Crittenden
6fa330662a
Add taskgroups plugin
...
Taskgroups are what we grant permission to with the new ACI system.
2009-03-17 14:52:17 -04:00
Rob Crittenden
eb0601a19c
Plugin to handle IPA configuration
2009-03-04 09:56:16 -05:00
Rob Crittenden
7933a196a1
Set a minimum value for password policy integers
2009-03-04 09:56:13 -05:00
Rob Crittenden
bd9f7cd720
Fix some netgroup issues related to not all groups being posixGroups
2009-02-27 23:18:35 -05:00
Rob Crittenden
be0cac932a
Update objectclasses for groups, by default not posix groups.
...
This change depends on DS bugs 487574 and 487725. Groups cannot be
promoted properly without these fixed. It will fail with an
Object Class violation because gidNumber isn't set.
2009-02-27 23:18:19 -05:00
Rob Crittenden
3fdf9abfce
Enforce netgroup uniqueness, allow netgroups to be members of netgroups
...
When adding an entry, convert a constraint violation of "already exists"
into a DuplicateEntry exception so the user gets a useful response
2009-02-27 12:57:21 -05:00
Rob Crittenden
af0c0c309d
Added tofiles command and some documentation to the automount plugin
2009-02-24 16:54:28 -05:00
Rob Crittenden
b53edad254
raise exceptions in the proper form
2009-02-20 10:40:50 -05:00
Rob Crittenden
4476f6b939
The start of machine join
2009-02-19 10:09:07 -05:00
Rob Crittenden
ccf703a2b6
Add new users as a member of the default group
2009-02-19 10:08:11 -05:00
Rob Crittenden
fb3f86f703
Add --all option to show/find, add default attrs to show, cleanup output
2009-02-19 10:07:39 -05:00
Jason Gerard DeRose
7e23ee7cc6
Removed 'Assert False' that was mistakingly left in cert.py; small cleanup in cert.py and ra.py imports
2009-02-17 16:03:10 -05:00
Jason Gerard DeRose
4ab133c3cb
Implemented more elegant way for entire plugin module to be conditionally skipped; updated cert.py and ra.py modules to use this
2009-02-17 16:03:10 -05:00
