Commit Graph

469 Commits

Author SHA1 Message Date
Rob Crittenden
2e7f629d91 Remove unnecessary attribute left over from testing 2007-11-26 20:34:59 -05:00
Karl MacMillan
3b4f0db73e Convert the setup of ssl from a shell script to a
python module. This is in preparation for user
supplied certs.
-
Karl MacMillan
cd93c81a13 Committed generated spec files. -
Karl MacMillan
c397041bfa Merge. -
Rob Crittenden
2fbe5cbf49 Phase 1 of allowing admins to set the default object classes for users & groups
This adds the UI and does error checking of the selected object classes but
it doesn't actually use the values yet.

It also generalizes some functions for doing multi-valued fields.
2007-12-04 13:18:37 -05:00
Rob Crittenden
69765f52ce Groups may be iterated over so should be an empty list, not None 2007-12-05 15:12:24 -05:00
Rob Crittenden
299e457698 Convert krbmaxpwdlife and krbminpwdlife from seconds into days and hours 2007-12-03 18:07:47 -05:00
Karl MacMillan
a174d6d6e6 Fix mode on ipa-keytab-util. -
Karl MacMillan
ad3fcc200c Merge. -
Karl MacMillan
90d6fefe32 Fix errors with ipautil.CalledProcessError and cleanup some imports. -
Karl MacMillan
61258a645c Add ipa-keytab-util to spec. -
Karl MacMillan
d2378f13d0 Merge. -
John Dennis
d53915954e merge 2007-12-04 10:08:08 -05:00
John Dennis
4e1d291d15 change location of radius data in ldap from
cn=radius,cn=services,cn=etc
to
cn=radius
2007-11-30 20:29:12 -05:00
John Dennis
6be932e8af fix merge error 2007-11-29 11:44:50 -05:00
John Dennis
904b76059c merged radius work with latest mainline tip 2007-11-28 07:49:07 -05:00
John Dennis
09238510ff add command line utilites for radius profiles 2007-11-26 19:30:33 -05:00
John Dennis
9a8326c5c1 clean up radius client command line tools 2007-11-23 10:35:22 -05:00
John Dennis
d98686e967 Add radius profile implementations:
get_radius_profile_by_uid
  add_radius_profile
  update_radius_profile
  delete_radius_profile
  find_radius_profiles

Rewrite command line arg handling, now support pair entry, interactive
mode with auto completion, reading pairs from a file, better handling
of mandatory values, better help, long arg names now match attribute
name in pairs

Establish mappings for all attributes and names used in clients and
profiles

Add notion of containers to radius clients and profiles in LDAP

Move common code, variables, constants, and strings into the files
radius_client.py, radius_util.py, ipautil.py to eliminate redundant
elements which could get out of sync if modified and to provide access
to other code which might benefit from using these items in the
future.

Add utility functions:
  format_list()
  parse_key_value_pairs()

Add utility class:
  AttributeValueCompleter

Unify attribute usage in radius ldap schema
2007-11-21 13:11:10 -05:00
John Dennis
087d11af5c map attrs to friendly name 2007-11-14 16:01:27 -05:00
John Dennis
c4dbe6433d add ipa-findradiusclient search 2007-11-14 15:32:08 -05:00
John Dennis
c24da12fe1 radius client modify and delete work 2007-11-14 00:04:19 -05:00
John Dennis
eab5a89d4a ipa-addradiusclient now working 2007-11-13 20:05:02 -05:00
John Dennis
152f8e3392 checkpoint radius client work 2007-11-13 13:06:18 -05:00
John Dennis
f36872383c add aci's for radius 2007-11-10 12:04:43 -05:00
John Dennis
84275328a0 radius now does kerberos auth, reads client entries from LDAP 2007-11-10 00:09:07 -05:00
Pete Rowley
24d5777bd6 Add posix auto gen for single master case 2007-11-06 15:57:15 -08:00
John Dennis
80c4ed7af2 remove offensive use of rpm
add the radiusprofile to the list of objectclasses used when creating a user
2007-11-06 16:26:10 -05:00
John Dennis
22493d9b9f remove offensive use of rpm
add the radiusprofile to the list of objectclasses used when creating a user
2007-11-06 16:26:10 -05:00
Rob Crittenden
50c383aeed Update text to reflect new CSS code (sidebar now on right) 2007-11-06 10:22:47 -05:00
Karl MacMillan
edc7af1446 Add xml-rpc interface for getting keytabs.
Warning: this lacks any sort of authorization.
-
Karl MacMillan
8e48393c61 Introduce service base class and clean up ipa-server-install
1) Add a base class for all of the instance objects.
2) Normalize usage of logging.
3) General cleanups of ipa-server-install.
4) Make better use of httpinstance.
5) Add webguiinstance.
6) Improve progress reporting during installation.

Works Here (TM), but it would be nice to get someone else
to test since this moves code around a bit.
-
Karl MacMillan
9038bf71dd Move packages to ipa from freeipa. -
Karl MacMillan
b202b6cc31 Bump the version numbers for release. Also remove
specific version check on freeradius. Packages aren't
available and the freeradius support isn't ready
anyway.
-
John Dennis
8cfd270f34 merge initial radius work 2007-11-03 12:22:20 -04:00
Karl MacMillan
67cddce4d4 Generate master password from Simo. -
Karl MacMillan
8f4362f2f2 Enable referential integrity plugin. -
Rob Crittenden
010fb65bfd define Self-Service as editting your own record.
This has the side-effect of removing the realm from Loggin in as. This
can be changed by using user_name instead of display_name in master.kid.
2007-11-02 17:41:24 -04:00
Rob Crittenden
9d24003528 Distinguish between active and inactive users on the Find People page. 2007-11-02 11:42:38 -04:00
Rob Crittenden
dc01ea0fe6 groups come back as a list where the first element is the number of
groups returned. Skip that element.
2007-11-02 11:35:50 -04:00
Karl MacMillan
7ce4df7038 Added replication.py -
Karl MacMillan
36e43aed1b NTP configuration for client and server.
Configure ipa servers as an ntp server and clients
to (by default) us the ipa server as an ntp server.

Also corrected the messages about which ports should
be opened.
-
Rob Crittenden
6a0ca23577 Update the UI look and feel 2007-11-01 16:15:32 -04:00
Simo Sorce
77a105688c Fix ticket #70 2007-11-01 13:56:03 -04:00
Rob Crittenden
a51dd58278 TurboGears log files and log rotation
The error log is rotated weekly on Sunday. 4 backups are saved.

The access log is not stored since it would be a duplicate of the
Apache logs. It can be enabled if desired.

Had to move the call to daemonize() in ipa-webgui so that the
fork is done before TurboGears is initialized. Otherwise the log
files end up getting closed.
2007-11-01 11:55:53 -04:00
Karl MacMillan
c373ed5c5c Initial replication setup.
This add replication setup through two new commands: ipa-replica-prepare
and ipa-replica-install. The procedure is to run ipa-replica-prepare
on an existing master. This will collect information about the realm
and the current master and create a file storing all of the information.
After copying that file to the new replica, ipa-replica-install is
run (with -r to create a read-only replica).

This version of the patch also includes fixes for the sasl mappings
on the replicas.

Remaining features:
- ssl for replication.
- automatic configuration of mesh topology for
  master (or a simpler way to replicate multiple
  masters.
- tool for view / configuring current replication.
-
Simo Sorce
b456d8424a more s/unique// wrt groups members/objectclasses 2007-11-21 16:07:07 -05:00
Simo Sorce
3580d0affb Use groupOfNames and member, not groupOfUniqueNames and uniqueMember 2007-11-20 10:22:43 -05:00
Simo Sorce
bec524485a Fix subtle errors in kpasswd 2007-11-20 17:41:26 -05:00
Rob Crittenden
d3d89f754b Use same tzinfo as the time parser to avoid TypeError from being thrown 2007-11-21 00:27:50 -05:00