Commit Graph

548 Commits

Author SHA1 Message Date
Rob Crittenden
b5af99c51d Fix the UI indicators for mandatory fields.
The source and target groups weren't highlighted but the entire block of
checkboxes was and it looked absolutely horrible.
2007-12-12 15:18:28 -05:00
Mark McLoughlin
6976f92862 Refactor krbinstance and dsinstance creation steps
Creation steps are currently done with:

  self.start_creation(2, "Create foo")
  self.step("do foo")
  self.foo()
  self.step("do bar")
  self.bar()
  self.done_creation()

This patch refactors that into the much more
straightforward:

  self.step("do foo", self.foo)
  self.step("do bar", self.bar)
  self.start_creation("Create foo")

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
c049d2d821 Don't template files which don't contain variables
The following files hav no template variables, so don't
bother templating them:

  - memberof-conf.ldif
  - referint-conf.ldif
  - dna-conf.ldif
  - certmap.conf.template

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
065827d6e1 Refactor dsinstance ldap modify code
Just a patch to refactor lots of similar code in
dsinstance and krbinstance using a simple helper
method.

Note, there are some differences:
  - Some code used to call ldapmodify without -h 127.0.0.1
  - Some of the code used to just print an error rather than
    using logging.critical()
  - Some code used to log some extra debug

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
7ba901d777 Only update key/value files if necessary
update_key_val_in_file() shouldn't try and write to
a file if the key is already set to the given value
in the file

Rationale here is that if we write these files out
while building a system image, ipa-server-install
shouldn't need to re-write them and, therefore,
they don't need to be writable.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
2a036abe7a More ipautil fixing
Recently, dsinstance and krbinstance was fixed to
not import * from ipautil; do the same for the
rest of ipaserver.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
a39f1cb2cb Fix ldif to work with ldapmodify in openldap-2.4.x
It seems that in openldap-2.4.x ldapmodify has gotten somewhat
more picky about the ldif it accepts. See here for more details:

  https://bugzilla.redhat.com/422251

Not sure whether ldapmodify will be fixed, but for now just
fix the ldif.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
2dd8c346f3 Fix ipa-python packaging
Latest Fedora 9 python distutils generates .egg-info files;
follow the recommendation at:

  http://fedoraproject.org/wiki/Packaging/Python/Eggs

and just package everything under %{python_sitelib}/

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Karl MacMillan
b3c39632ea Merge. 0001-01-01 00:00:00 +00:00
Simo Sorce
c39d6d3be8 Merge in Rob aci patch (resolve conflict) 2007-12-12 16:42:19 -05:00
Simo Sorce
cecbca1a84 Separate out ACIs that affect radius 2007-12-12 14:16:52 -05:00
Simo Sorce
87bc5c4d63 Handle add/removing and stopping restarting daemons in update/remove 2007-12-12 13:58:55 -05:00
Karl MacMillan
913201a919 Fix spec file to grab certinstall. 0001-01-01 00:00:00 +00:00
Karl MacMillan
18992de657 Merge. 0001-01-01 00:00:00 +00:00
Simo Sorce
88c0c7f321 from ipa.ipautil import * --> from ipa import ipautil 2007-12-12 13:15:56 -05:00
Simo Sorce
d76886ff4f - Better access control, make sure not even admins can read out passwords
- Insure admins can't locked out by mistake by inclusion in disabled groups
- Fix also minor error in krbinstance.py
2007-12-11 21:56:36 -05:00
Karl MacMillan
cf595511ff Move radius server components into a separate package. 0001-01-01 00:00:00 +00:00
Karl MacMillan
5cdff99bdf Add a man page for ipa-getkeytab. 0001-01-01 00:00:00 +00:00
Karl MacMillan
c9160e0233 Fix minor typo in unauthorized page. 0001-01-01 00:00:00 +00:00
Rob Crittenden
6390db3502 Add automatic browser configuration for kerberos SSO using javascript.
This uses the UniversalPreferencesWrite function to set the browser
preferences to allow negotiation and ticket forwarding in the IPA domain.
A self-signed certificate is generated to sign the javascript.
2007-12-12 09:36:32 -05:00
Karl MacMillan
1c3849eb57 User provided certs. 0001-01-01 00:00:00 +00:00
Karl MacMillan
8792559f74 Remove radiusinstance from ipa-server-install. 0001-01-01 00:00:00 +00:00
Karl MacMillan
2892c28f56 Improve confirmation. 0001-01-01 00:00:00 +00:00
Karl MacMillan
7561d7c42d Remove radius from main install script and add
ipa-radius-install.
0001-01-01 00:00:00 +00:00
Karl MacMillan
380756ace9 Confirm before configuring the client. 0001-01-01 00:00:00 +00:00
Karl MacMillan
148a55811d Return a proper error code from ipa-webgui so that
the init script can indicate when the service
fails to start.
0001-01-01 00:00:00 +00:00
Rob Crittenden
23ffab533f Make the old entry option in update_*, check for empty parameters and
fix some problems reported by pychecker.
2007-12-11 17:34:15 -05:00
Rob Crittenden
5c217ce31a Change from "Common Name" to "Full Name" 2007-12-11 15:14:29 -05:00
Rob Crittenden
10ac6c3c61 Enable searching for multiple things at once 2007-12-11 15:06:01 -05:00
Simo Sorce
5215b21ea4 merge with upstream 2007-12-11 14:19:10 -05:00
Simo Sorce
4f0b215414 Make sure we don't keep around old keys.
Fixes problem changing passwords seen only on servers where
re-installations where performed (and old secrets piled up)
2007-12-11 12:25:58 -05:00
Simo Sorce
01131e2a37 Make sure we don't keep around old keys.
Fixes problem changing passwords seen only on servers where
re-installations where performed (and old secrets piled up)
2007-12-11 12:25:58 -05:00
Simo Sorce
75493763f6 iMerge with upstream 2007-12-11 11:00:24 -05:00
Simo Sorce
0614024566 Minor fix 2007-12-11 10:59:07 -05:00
Simo Sorce
3defaaf7ba Make admintools discover the domain using DNS calls to find the LDAP server. 2007-12-11 10:58:39 -05:00
Simo Sorce
463a0462d3 Make admintools discover the domain using DNS calls to find the LDAP server. 2007-12-11 10:58:39 -05:00
Rob Crittenden
ca8e71d938 Move the sort arrow to the left of the column title and don't overlap the text 2007-12-10 21:55:12 -05:00
Simo Sorce
a5617680ba Move dnsclient into ipa-python so that I will be able to use it in ipaconfig 2007-12-10 16:31:21 -05:00
Simo Sorce
c0b809efd5 Move dnsclient into ipa-python so that I will be able to use it in ipaconfig 2007-12-10 16:31:21 -05:00
Rob Crittenden
f169641aae Use title case for field labels 2007-12-10 17:44:04 -05:00
Rob Crittenden
f796e50000 Add simple UI for command-line programs to be able to select when
multiple entries are returned.
2007-12-10 16:12:58 -05:00
Rob Crittenden
2675f35fdf Tie the logging module to 'PythonOption IPADebug' in /etc/httpd/conf.d/ipa.conf 2007-12-11 09:56:37 -05:00
Simo Sorce
441e9206b5 We need the OpenSSL Crypto lib for the DES and MD4 functions to generate NT
and LM hashes.
2007-12-07 19:59:27 -05:00
Simo Sorce
647063253e Fix kdec.length or we may try to double free() or free() uninitiualized data. 2007-12-07 18:09:49 -05:00
Simo Sorce
0b51e32699 merge from upstream 2007-12-07 17:38:15 -05:00
Simo Sorce
11559e9a69 we *may* require it, it depend on the ditro in F8 cahing daemon configuration has been
incorporated in the default bind install.
2007-12-07 17:36:14 -05:00
Rob Crittenden
00489597d8 Rework input validation to more closely match what we require in the UI 2007-12-07 17:07:03 -05:00
Rob Crittenden
5e4a162954 Fix delegation in the UI and add a missing aci that allows writes.
Make ipa-deldelegation more user-friendly.
2007-12-07 16:08:12 -05:00
Rob Crittenden
0c0cc370cf Fix spelling 2007-12-10 15:01:30 -05:00
Rob Crittenden
b75d735b7e Add default e-mail domain to the IPA configuration 2007-12-10 11:53:00 -05:00