Commit Graph

18 Commits

Author SHA1 Message Date
Rob Crittenden
00489597d8 Rework input validation to more closely match what we require in the UI 2007-12-07 17:07:03 -05:00
Rob Crittenden
f42f1f44c8 Enable group inactivation by using the Class of Service plugin.
This adds 2 new groups: activated and inactivated.

If you, or a group you are a member of, is in inactivated then you are too.

If you, or a group you are a member of, is in the activated group, then you
are too.

In a fight between activated and inactivated, activated wins.

The DNs for doing this matching is case and white space sensitive.

The goal is to never have to actually set nsAccountLock in a user directly
but move them between these groups.

We need to decide where in the CLI this will happen. Right it is split
between ipa-deluser and ipa-usermod. To inactivate groups for now just
add the group to inactivate or active.
2007-11-20 22:45:29 -05:00
Rob Crittenden
b01c468e8c Completely remove attributes when delattr argument 2007-11-15 14:39:54 -05:00
Rob Crittenden
bfcc044db2 If unable to connect to the XML-RPC server print a more useful error msg. 2007-11-15 10:27:59 -05:00
Rob Crittenden
cd489f0a73 Allow a user or group to change an attribute in its RDN
Add secretary to the list of indexes otherwise RDN changing could be slow
Port --addattr, --setattr and --delattr from usermod to groupmod
2007-11-12 23:11:55 -05:00
Karl MacMillan
45346ee3ab Remove multi-value set/add in ipa-usermod.
Calling --add multiple times will accomplish the same
thing without the need for handling splits on ",".
-
Karl MacMillan
3b66d27383 Allow set/add/del to be called multiple times.
Allow the --set/add/del options to be called multiple
times during the same invocation. Also add more robust
checking of errors.
-
Rob Crittenden
402274af4b Allow adding, setting, deleting arbitrary attributes 2007-10-31 09:32:25 -04:00
Rob Crittenden
6f5b692b5c Fix minor spelling issue 2007-10-29 14:15:21 -04:00
Rob Crittenden
6b0587726a Actually return a value to the shell 2007-10-19 09:59:07 -04:00
rcritten@redhat.com
7b96973711 Give ipa-adduser, ipa-addgroup and ipa-usermod an interactive mode
Add ipa-passwd tool
Add simple field validation package
This patch adds a package requirement, python-krbV. This is needed to
 determine the current user based on their kerberos ticket.
2007-09-21 10:24:36 -04:00
rcritten@redhat.com
9b30f46744 Enable LDAP SASL authentication using a forwarded kerberos ticket
Handle both SASL auth and proxied authentication
Refactor LDAP connection code to be simpler
Other small bug fixes
2007-09-05 13:14:23 -04:00
rcritten@redhat.com
861cda3cb5 Initial support for Groups
Create separate object for Users and Groups (using same base class)
Check for uniqueness before adding new users and groups
Remove user_container from everything but add operations
Abstract out a number of functions that are common across users and groups
Make sure all strings passed in to be in a filter are checked
Add new error message: No modifications specified
2007-08-24 15:42:56 -04:00
rcritten@redhat.com
8879ee173e Handle optional arguments by using the value __NONE__ over XML-RPC.
rpcclient.py must call XML-RPC functions with all arguments.
Removed encode_args and decode_args. They were the source of most of the
  argument pain. Now opts is alwyas appended to the end of the arguments
  so MUST be the last argument in any server-side function (can be None)
Allow the User object to handle unicode data
Small fixes to command-line tools to be friendlier
Broke out get_user() into get_user_by_dn() and get_user_by_uid()
Need to request more than just 'nsAccountLock' attribute when trying to
  see if a user is already marked deleted. If it is blank the record
  coming back is empty. Add 'uid' to the list to guarantee something coming
  back (dn is handled specially)
Added user_container attribute to get_user_* and add_user so the caller
  can specify where in the tree the user will be searched for/added.
Added global default value for user_container
2007-08-23 09:44:00 -04:00
Kevin McCarthy
66d3f1e730 Embed origiginal values inside user, and have update_user pass in a user
object.  Based on rcrit's original patch.
Push scalar to list value conversion inside funcs.py.
2007-08-20 10:50:11 -07:00
rcritten@redhat.com
3daff667ac Pass string changes as a list so modifyModList works properly 2007-08-17 13:46:07 -04:00
rcritten@redhat.com
05f6a22110 Implement user inactivation
Comment some functions
Add attribute argument to get_user()
2007-08-17 10:03:33 -04:00
rcritten@redhat.com
5f0f23ee91 Ensure that the Apache server is in forked mode
Add ability to update existing users
Try to prevent fetching and setting empty strings
2007-08-14 17:22:05 -04:00