Commit Graph

439 Commits

Author SHA1 Message Date
Rob Crittenden
b5af99c51d Fix the UI indicators for mandatory fields.
The source and target groups weren't highlighted but the entire block of
checkboxes was and it looked absolutely horrible.
2007-12-12 15:18:28 -05:00
Mark McLoughlin
6976f92862 Refactor krbinstance and dsinstance creation steps
Creation steps are currently done with:

  self.start_creation(2, "Create foo")
  self.step("do foo")
  self.foo()
  self.step("do bar")
  self.bar()
  self.done_creation()

This patch refactors that into the much more
straightforward:

  self.step("do foo", self.foo)
  self.step("do bar", self.bar)
  self.start_creation("Create foo")

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
c049d2d821 Don't template files which don't contain variables
The following files hav no template variables, so don't
bother templating them:

  - memberof-conf.ldif
  - referint-conf.ldif
  - dna-conf.ldif
  - certmap.conf.template

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
065827d6e1 Refactor dsinstance ldap modify code
Just a patch to refactor lots of similar code in
dsinstance and krbinstance using a simple helper
method.

Note, there are some differences:
  - Some code used to call ldapmodify without -h 127.0.0.1
  - Some of the code used to just print an error rather than
    using logging.critical()
  - Some code used to log some extra debug

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
7ba901d777 Only update key/value files if necessary
update_key_val_in_file() shouldn't try and write to
a file if the key is already set to the given value
in the file

Rationale here is that if we write these files out
while building a system image, ipa-server-install
shouldn't need to re-write them and, therefore,
they don't need to be writable.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
2a036abe7a More ipautil fixing
Recently, dsinstance and krbinstance was fixed to
not import * from ipautil; do the same for the
rest of ipaserver.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Mark McLoughlin
a39f1cb2cb Fix ldif to work with ldapmodify in openldap-2.4.x
It seems that in openldap-2.4.x ldapmodify has gotten somewhat
more picky about the ldif it accepts. See here for more details:

  https://bugzilla.redhat.com/422251

Not sure whether ldapmodify will be fixed, but for now just
fix the ldif.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2007-12-13 09:31:28 +00:00
Karl MacMillan
b3c39632ea Merge. -
Simo Sorce
c39d6d3be8 Merge in Rob aci patch (resolve conflict) 2007-12-12 16:42:19 -05:00
Simo Sorce
cecbca1a84 Separate out ACIs that affect radius 2007-12-12 14:16:52 -05:00
Simo Sorce
87bc5c4d63 Handle add/removing and stopping restarting daemons in update/remove 2007-12-12 13:58:55 -05:00
Karl MacMillan
913201a919 Fix spec file to grab certinstall. -
Simo Sorce
88c0c7f321 from ipa.ipautil import * --> from ipa import ipautil 2007-12-12 13:15:56 -05:00
Simo Sorce
d76886ff4f - Better access control, make sure not even admins can read out passwords
- Insure admins can't locked out by mistake by inclusion in disabled groups
- Fix also minor error in krbinstance.py
2007-12-11 21:56:36 -05:00
Karl MacMillan
cf595511ff Move radius server components into a separate package. -
Karl MacMillan
c9160e0233 Fix minor typo in unauthorized page. -
Rob Crittenden
6390db3502 Add automatic browser configuration for kerberos SSO using javascript.
This uses the UniversalPreferencesWrite function to set the browser
preferences to allow negotiation and ticket forwarding in the IPA domain.
A self-signed certificate is generated to sign the javascript.
2007-12-12 09:36:32 -05:00
Karl MacMillan
1c3849eb57 User provided certs. -
Karl MacMillan
8792559f74 Remove radiusinstance from ipa-server-install. -
Karl MacMillan
7561d7c42d Remove radius from main install script and add
ipa-radius-install.
-
Karl MacMillan
148a55811d Return a proper error code from ipa-webgui so that
the init script can indicate when the service
fails to start.
-
Rob Crittenden
23ffab533f Make the old entry option in update_*, check for empty parameters and
fix some problems reported by pychecker.
2007-12-11 17:34:15 -05:00
Rob Crittenden
5c217ce31a Change from "Common Name" to "Full Name" 2007-12-11 15:14:29 -05:00
Rob Crittenden
10ac6c3c61 Enable searching for multiple things at once 2007-12-11 15:06:01 -05:00
Simo Sorce
5215b21ea4 merge with upstream 2007-12-11 14:19:10 -05:00
Simo Sorce
4f0b215414 Make sure we don't keep around old keys.
Fixes problem changing passwords seen only on servers where
re-installations where performed (and old secrets piled up)
2007-12-11 12:25:58 -05:00
Simo Sorce
01131e2a37 Make sure we don't keep around old keys.
Fixes problem changing passwords seen only on servers where
re-installations where performed (and old secrets piled up)
2007-12-11 12:25:58 -05:00
Simo Sorce
75493763f6 iMerge with upstream 2007-12-11 11:00:24 -05:00
Simo Sorce
0614024566 Minor fix 2007-12-11 10:59:07 -05:00
Rob Crittenden
ca8e71d938 Move the sort arrow to the left of the column title and don't overlap the text 2007-12-10 21:55:12 -05:00
Rob Crittenden
f169641aae Use title case for field labels 2007-12-10 17:44:04 -05:00
Rob Crittenden
2675f35fdf Tie the logging module to 'PythonOption IPADebug' in /etc/httpd/conf.d/ipa.conf 2007-12-11 09:56:37 -05:00
Simo Sorce
441e9206b5 We need the OpenSSL Crypto lib for the DES and MD4 functions to generate NT
and LM hashes.
2007-12-07 19:59:27 -05:00
Simo Sorce
647063253e Fix kdec.length or we may try to double free() or free() uninitiualized data. 2007-12-07 18:09:49 -05:00
Simo Sorce
0b51e32699 merge from upstream 2007-12-07 17:38:15 -05:00
Simo Sorce
11559e9a69 we *may* require it, it depend on the ditro in F8 cahing daemon configuration has been
incorporated in the default bind install.
2007-12-07 17:36:14 -05:00
Rob Crittenden
5e4a162954 Fix delegation in the UI and add a missing aci that allows writes.
Make ipa-deldelegation more user-friendly.
2007-12-07 16:08:12 -05:00
Rob Crittenden
b75d735b7e Add default e-mail domain to the IPA configuration 2007-12-10 11:53:00 -05:00
Rob Crittenden
c95550a164 Remove some debugging statements 2007-12-10 11:54:42 -05:00
Rob Crittenden
059e8f00ef Add principal management templates 2007-12-10 09:58:18 -05:00
Rob Crittenden
40ff6f21db Prompt user before downloading a keytab that this will create a new secret,
breaking any existing keytabs for that principal.
2007-12-06 11:56:14 -05:00
Rob Crittenden
592329af18 Use more common names for first and last name labels 2007-12-10 11:55:52 -05:00
Rob Crittenden
b3fa02225a Add back in some CSS that was removed in the big UI update.
This adds back required field colors and colored error and warning msgs.
2007-12-05 16:15:52 -05:00
Rob Crittenden
03fe2a8d6a Increase default max password lifetime from 10 to 90 days 2007-12-03 18:09:14 -05:00
Karl MacMillan
6243410bdd Install principal edit page files. -
Karl MacMillan
abdbc50683 Import correct httpinstance.py -
Karl MacMillan
4e377ad7e8 Fix message about no spaces in password - spaces work
fine with ssl setup shell script removed.
-
Rob Crittenden
99c676702b The uid_hidden field needs to be retained until after validation succeeds
otherwise if it ever fails, uid_hidden will be lost which can cause uid
to not be set which cascades into lots of other errors.
2007-12-06 17:00:38 -05:00
Rob Crittenden
04cccd4426 Improve the error message when an entry is not found.
We used to return the entire argument string ala:

('dc=freeipa,dc=org', 2, 'uid=foo', ['*'])

This adds a regex to try to print anything after = in the filter.
Not perfect but better.
2007-12-06 16:48:26 -05:00
Rob Crittenden
2a2d866552 Make uid an editable field in the Edit UI so we can do RDN changes
Fix group RDN changes
Remove a copy/paste error in the group UI update that caused 2 updates
Fix variable name so groups don't get user objectclasses
Remove color CSS for field backgrounds as they override disabled field display
2007-12-06 15:36:42 -05:00