IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-09-03 20:52:56 -05:00
Code Issues Packages Projects Releases Wiki Activity
705 Commits 11 Branches 63 Tags
b3c8780c1dacf81b04afe7409068fa9dfd96e927
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Rob Crittenden b3c8780c1d Fix build breakage. 2008-03-03 22:30:10 -05:00
Rob Crittenden b49942fe96 Close all fds when running another program. This fixes the SELinux AVCs. 
Put installation log files into /var/log.

430024
 2008-03-03 16:14:48 -05:00
Rob Crittenden 79557e6bf2 Do argument type checking in the XML-RPC interface 
Fix error in service principals where the service wasn't being removed before
doing the DNS lookup.
 2008-02-29 10:58:07 -05:00
Rob Crittenden cc3b9cddef Add small script to start/stop all of the services that IPA requires in the 
proper order.

435026
 2008-02-28 11:37:06 -05:00
Rob Crittenden 6b960c008a Allow groups to be added as a group membe 
435134
 2008-02-28 11:34:34 -05:00
Rob Crittenden ab86f52999 Fix off-by-one error in the number of steps to install a service 2008-02-28 21:57:52 -05:00
Rob Crittenden 6533bc1a84 Add action statement to ldap.conf update 
Move imports into try/except so that ctrl-C can always be caught
Fix typo
 2008-02-27 16:17:38 -05:00
Rob Crittenden 999bd4fb1e In the UI we don't want to display Edit links unless someone can actually 
edit things. We use the 'editors' group for this. This group itself grants
no permission other than displaying certain things in the UI.

In order to be in the editors group a user must be a member of a group that
is the source group in a delegation. The memberof plugin will do all the
hard work to be sure that a user's memberof contains cn=editors if they
are in a delegated group.

432874
 2008-02-27 15:14:52 -05:00
Rob Crittenden ad8096b51f - Centralize try/except so the entire program is covered. This make it 
possible to catch KeyboardInterrupt during the import process.
- Add function for handling python differences with GSSError

434798
 2008-02-27 10:40:18 -05:00
Rob Crittenden d5f5026454 Don't log passwords in ipaserver-install.log 
433509
 2008-02-26 10:48:45 -05:00
Rob Crittenden f49ed705b3 The admins group cannot be renamed. 
433880
 2008-02-27 10:50:17 -05:00
Rob Crittenden f02b5c1962 Use correct variable for determining the host name 
435055
 2008-02-26 22:34:06 -05:00
Rob Crittenden d6d12e9dc5 Require that service principals resolve to a DNS A record. 
There is a --force option for those who know what they are doing.

433483
 2008-02-26 13:51:56 -05:00
Rob Crittenden 111a475b15 Don't try to use options.realm_name unless it was passed in 
Don't allow empty responses to domain and realm name
Handle ctrl-C

434982
 2008-02-26 15:31:34 -05:00
Rob Crittenden 8f0d4a8ed3 Add failover to the XML-RPC client 
433506
 2008-02-22 14:47:15 -05:00
Rob Crittenden 66df51c754 Use the label "Full Name" for "Common Name" 
433525
 2008-02-26 09:33:39 -05:00
Rob Crittenden 3617100849 Compress man pages after installation 2008-02-25 16:34:00 -05:00
Rob Crittenden 6d759d7dcb Move ipa-getkeytab man page into proper subdir 
433878
 2008-02-25 14:56:09 -05:00
Rob Crittenden 02d3c5aff3 Don't allow a group to be a member of itself. 
434542
 2008-02-22 15:40:21 -05:00
Rob Crittenden 44797e3917 Command-line utility to manage password policy 
432814
 2008-02-25 13:11:15 -05:00
Rob Crittenden b9c7056a2a Remove HTML from Javascript error message and fix up language to be clearer 
433374
 2008-02-22 09:36:12 -05:00
Rob Crittenden 231913f3c2 Make sure KrbPrincipalName is unique server-wide 
Fix the build. Somehow this file didn't get committed.
 2008-02-21 23:22:31 -05:00
Rob Crittenden b4c11c9bea Remove reference to wrong command 
Clean up language around automatically appending the Kerberos realm

433800
 2008-02-21 22:37:36 -05:00
Rob Crittenden 49148dc34a Redirect users when they don't use the FQDN on both SSL and non-SSL ports 
We update the mod_nss configuration (nss.conf) during installation to include
ipa-rewrite.conf to handle the SSL side.

433054
 2008-02-21 16:25:09 -05:00
Rob Crittenden 84d1e08d76 Become freeipa-0.99.0 2008-02-21 16:11:42 -05:00
Rob Crittenden 3ede5e42a5 Don't clear out the uid from the session until the record has been updated. 2008-02-20 16:57:01 -05:00
Rob Crittenden 4c588b3d5f Don't let a regular user edit their own active status or manager 
433384
 2008-02-20 23:24:39 -05:00
Rob Crittenden 4bf136d95c Use basestring class when testing to see if an object is a string to support 
both Unicode and byte strings.

433651
 2008-02-21 11:09:53 -05:00
Rob Crittenden 87d9c037e4 Add some additional error handling 
433347
 2008-02-20 16:31:32 -05:00
Rob Crittenden e368fa1844 Create the selinux installation directory before installing files 2008-02-20 22:14:44 -05:00
Rob Crittenden 75ad48272a IE 6 doesn't support transparent PNG 
Remove stray character and a debug line from the CSS

429984
 2008-02-20 17:17:21 -05:00
Rob Crittenden cbb6b5a005 Provide feedback on what is being done during ipa-client-install 
429541
 2008-02-20 17:09:02 -05:00
Rob Crittenden e58774bf2e Fix for building on RHEL 5.x. 2008-02-20 12:51:03 -05:00
Rob Crittenden 936b84f569 Include and use policy icon in the UI 
430954
 2008-02-20 10:53:31 -05:00
Rob Crittenden b5272bd8e0 Objects used by new CSS layout. 2008-02-20 10:45:00 -05:00
Rob Crittenden da24953f9a Warn if a user tries to install a replica on the wrong target machine 
432691
 2008-02-19 10:46:22 -05:00
Rob Crittenden e31d33619d Add some error handling for LDAP connection issues 
Verify the DM password earlier in the process

433368
 2008-02-19 10:20:13 -05:00
Rob Crittenden 7e5f1514b2 Only show Delete button for admins, editors and don't let user delete them self 
Resolves 433382
 2008-02-18 22:41:28 -05:00
Rob Crittenden 80a4e94e5b Verify current domain with user during installation 
Use that domain when creating replicas

Resolves 432066
 2008-02-15 20:47:29 -05:00
Rob Crittenden c47248c5d8 Update of CSS from Máirín Duffy including some per-object images 2008-02-19 16:43:32 -05:00
Rob Crittenden 65960a2e58 Use the proper access methods in IPA policy subcontroller. 
Resolves 433062
 2008-02-18 17:41:58 -05:00
Rob Crittenden f82b3b0b28 Handle input range properly and catch KeyboardInterrupt and exit gracefully 
433496
 2008-02-20 09:32:25 -05:00
Rob Crittenden 3817577525 Handle a ctrl-C gracefully while getting the new password 
Resolves 433053
 2008-02-20 09:26:34 -05:00
Rob Crittenden 346f73057f memberOf attribute should not be replicated 
Resolves 430017
 2008-02-18 15:22:36 -05:00
Rob Crittenden 3ad8a2bd1b Import internationalization for kid templates patch from Masato Taruishi 2008-02-19 22:45:11 -05:00
Rob Crittenden 1aa8729644 Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 11:09:06 -05:00
Rob Crittenden eef18e5c38 Display the path to the PKCS#12 password file at the end of installation 2008-02-19 11:40:27 -05:00
Rob Crittenden 73a674ed49 Fix bug that prevented single-character fields 
Fix bug in exception handling where we were sending the wrong thing as detail.
Basically we were catching an LDAP error, generating an IPAError from it,
 catching that, then setting the detail of the 2nd exception to another IPAError
 rather than the root exception. This caused anything looking at e.detail to
 crap out

Resolves 432136
 2008-02-11 16:32:54 -05:00
Rob Crittenden 5b1e7e3a5f Don't create a backup of the PKCS#12 cert on replicas 
Name the file created by ipa-replica-prepare after the FQDN of the target

Resolves 432904
 2008-02-14 17:39:06 -08:00
Rob Crittenden 1380d9d9de Fix incorrect form label 
Resolves 432731
 2008-02-14 16:04:53 -08:00
Rob Crittenden 0300952ec7 Use ldap_explode_dn instead of ldap_str2dn so we can use python-ldap 2.2.0 2008-02-11 09:42:47 -05:00
Rob Crittenden 5be3defccf Gracefully handle sys.exit() in python 2.4 2008-02-11 09:41:14 -05:00
Rob Crittenden 5f86f5a5fd Generate the multi-value entries needed when redirecting to the edit_user 
page. This avoids a Nonetype error.

Resolves 432106
 2008-02-08 17:34:23 -05:00
Rob Crittenden 1a38b6dfdf Install principalshow.kid 2008-02-08 17:49:49 -05:00
Rob Crittenden 6e0bda98e3 Missed a place to translate the realm name into an instance name 
Catch SystemExit exceptions otherwise a trace will be shown with python 2.4
 2008-02-08 15:10:26 -05:00
Rob Crittenden 9e3963acd5 Include some missing man pages 2008-02-08 16:06:15 -05:00
Rob Crittenden a5da8d1523 Include some missing utilities in the Makefile 2008-02-08 15:55:13 -05:00
Rob Crittenden 802483813a Always do a chkconfig --add/--del on install/uninstall 
This makes a from-tree installation work. We also do this in the rpm spec file.
Contributed by Pieter D.J. Krul
 2008-02-08 15:17:20 -05:00
Rob Crittenden 7fe8e88e72 Switch 'below' to 'above' to point to the right location of the CA on the page 2008-02-07 11:32:30 -05:00
Rob Crittenden c50ebd9657 Don't set blank values so we don't end up with empty attributes 
Resolves 429895
 2008-01-30 09:31:03 -05:00
Rob Crittenden 97d9c235dd Set the license uniformly to GPLv2 only. 2008-02-04 15:15:52 -05:00
Rob Crittenden 217019e9de Create /var/run/<process>.pid to play nicers with the start scripts 
Need to start ipa_webgui as root and drop privs in order to write in /var/run
 2008-02-06 11:02:05 -05:00
Rob Crittenden ef5b4391de Fix broken attempt to return 0 on success, 1 on failure 2008-02-06 09:05:47 -05:00
Rob Crittenden 6935d94c14 Fix two typos 2008-02-05 16:50:12 -05:00
Rob Crittenden 07b1aef252 Return 1 on error, 0 on success 2008-02-05 13:55:06 -05:00
Rob Crittenden 5a96618f5d Use file to store the current CA serial number 
No longer create a PKCS#12 file that contains the CA
No longer send the entire CA to each replica, generate the SSL certs on master
Fix number of bugs in ipa-replica-install and prepare
Produce status output during replica creation
 2008-02-05 12:23:53 -05:00
Rob Crittenden 25057816a5 Remove = sign between [set|add|del]attr=attr=value to improve readability. 2008-02-04 13:52:04 -05:00
Rob Crittenden 96216539a7 Add --usage as a command-line option. 
Resolves 431283
 2008-02-01 22:22:34 -05:00
Rob Crittenden 0e3ecf6270 Marked with wrong license. IPA is GPLv2. 2008-01-31 16:49:01 -05:00
Rob Crittenden 15e2abaa25 Use orig_user_dict to get krbprincipalname when changing passwords. 
Add an extra exception handler so we don't return a 500 on errors.
 2008-01-31 17:38:21 -05:00
Rob Crittenden 1b988fff82 Ensure that the ipa_webgui error log exists and has correct permissions. 
Resolves 431089
 2008-01-31 14:21:07 -05:00
Rob Crittenden 5834ada3e9 Add option to list common attributes for use with --setattr,--addattr,--delattr 2008-01-31 11:24:52 -05:00
Rob Crittenden 64cce8f82e Handle the --usage option by actually displaying the usage 
Fix some missing options in --usage
Remove a few debugging statements
Resolves 430704
 2008-01-31 10:52:05 -05:00
Rob Crittenden ae5cb78ab8 Use proper string validation routine. 
Resolves 430709
 2008-01-31 10:59:38 -05:00
Rob Crittenden 00e3a81266 Use correct variable for domain when restoring a file. 
Resolves 430724
 2008-01-31 10:24:22 -05:00
Rob Crittenden 94a3a5c038 Fix discrepencies between built-in help and the man page. 
Resolves bz 429814
 2008-01-25 13:49:08 -05:00
Rob Crittenden 473eb9992e Enable logging so we can catch startup errors either in the console or 
the error log.
Add a foreground and debug flag
Resolves 430011
 2008-01-30 11:55:33 -05:00
Rob Crittenden d73dd8b427 Put user-modifiable files into /etc/ipa/html so they can be marked as 
config(noreplace).
Resolves 430004
 2008-01-30 09:58:15 -05:00
Rob Crittenden aad14c5d54 Missed closing quote 2008-01-29 11:33:44 -05:00
Rob Crittenden 71e39eccd8 Remove reference to radius that wasn't used and was causing program to fail. 
Resolves 429853
 2008-01-29 10:08:58 -05:00
Rob Crittenden 946ef21426 Include some additional information when installing IPA. 
Remove 8080 as a port that needs to be opened
bz 430088
 2008-01-25 17:08:36 -05:00
Rob Crittenden 5c58015fbe Fix misspelling of the word indices. 2008-01-25 13:29:49 -05:00
Rob Crittenden 9827ffedb7 Use consistent naming for tools. 
Resolves 430243
 2008-01-25 11:23:12 -05:00
Rob Crittenden f4ef672dd6 Listen only on the localhost interface 
Resolves bz 430191
 2008-01-25 10:17:37 -05:00
Rob Crittenden 34b56238d2 Dropped the last 's' in the sessions cache directory 2008-01-24 22:31:22 -05:00
Rob Crittenden 3d911a7beb Major mistake on my part by adding sessions to the wrong place. This broke 
ipa_webgui.
 2008-01-24 17:39:54 -05:00
Rob Crittenden 6bf366fc9a Missed one replacement of pyasn1 -> python-pyasn1 2008-01-24 14:54:41 -05:00
Rob Crittenden 3accc13db9 Include --prefix in all invocations of autogen.sh. 
Resolves bz 430002
 2008-01-24 14:40:54 -05:00
Rob Crittenden 00e20c2003 Use Fedora package names for PyKerberos (python-kerberos) and pyasn1 
(python-pyasn1) for the specfile Requires.
 2008-01-24 13:44:38 -05:00
Rob Crittenden 3594157f54 Add a copy of the LICENSE and populate some README's 2008-01-23 10:30:18 -05:00
Rob Crittenden 3302dc7446 Enable server-side sessions. It is currently using files for sessions. 2008-01-23 09:45:46 -05:00
Rob Crittenden 042fb11fa1 Fix issues reported by rpmlint. 
- Removing shebangs (#!) from a bunch of python libraries
- Don't use a variable name in init scripts for the lock file
- Keep the init script name consistent with the binary name, so renamed
  ipa-kpasswd.init to ipa_kpasswd.init
- Add status option to the init scripts
- Move most python scripts out of /usr/share/ipa and into the python
  site-packages directories (ipaserver and ipaclient)
- Remove unnecessary sys.path.append("/usr/share/ipa")
- Fix the license string in the spec files
- Rename ipa-webgui to ipa_webgui everywhere
- Fix a couple of issues reported by pychecker in ipa-python
 2008-01-18 16:20:36 -05:00
Rob Crittenden aaa3cfd58c Fix case where a question was being asked in unattended mode. 
Catch permission errors on install.
Initialize srv so the error message works if the user presses enter
 2008-01-17 16:36:05 -05:00
Rob Crittenden f45ded96a6 Add cyrus-sasl-gssapi as a requirement. 2008-01-16 10:26:53 -05:00
Rob Crittenden c7f3c746cc Backup system state in ipa-server-install 
This patch adds a sysrestore module which allows ipa-server-install
code to backup any system state so that it can be restored again
with e.g. ipa-server-install --uninstall.

The idea is that any files ipa-server-install modifies gets backed
up to /var/cache/ipa/sysrestore/ while any "meta" state, like
whether a service is enabled with chkconfig, is saved to
/var/cache/ipa/sysrestore.state.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
 2008-01-14 12:43:26 -05:00
Rob Crittenden 29c42e853a Find and delete service principals from the command-line. 2008-01-11 12:52:41 -05:00
Rob Crittenden 42d5ddc559 Service principal deletion 2008-01-11 11:44:23 -05:00
Rob Crittenden 58071a759a Remove registration of get_keytab 2008-01-03 09:29:58 -05:00
Rob Crittenden bbe1fdd8e9 Run ipa-webgui as apache and not as root 2008-01-11 13:05:44 -05:00
Rob Crittenden b51a147a6b Fix help text of -a argument 2008-01-11 13:01:39 -05:00