Commit Graph

13106 Commits

Author SHA1 Message Date
Rob Crittenden
83dd26c6e3 Remove non-existent files from Makefile targets 2007-11-13 17:24:00 -05:00
Rob Crittenden
eecbaf91e2 Use the dna plugin to automatically assign uid
Set gid to the group "ipausers"
Add the user to this default group
2007-11-13 15:03:20 -05:00
Rob Crittenden
79544637d6 The e-mail field should not be required. 2007-11-13 15:49:06 -05:00
Rob Crittenden
5011f64243 Restrict access to some parts of the UI to those in the admins group 2007-11-13 11:15:07 -05:00
Rob Crittenden
cd489f0a73 Allow a user or group to change an attribute in its RDN
Add secretary to the list of indexes otherwise RDN changing could be slow
Port --addattr, --setattr and --delattr from usermod to groupmod
2007-11-12 23:11:55 -05:00
Rob Crittenden
99b84bfd01 Handle ldap.UNWILLING_TO_PERFORM more gracefully 2007-11-09 16:34:52 -05:00
Rob Crittenden
f7358533d0 Add the capability to completely delete a user from the database. The
default remains to inactivate them.
2007-11-09 15:45:11 -05:00
Rob Crittenden
d9194cdd09 Don't continue if a kerberos credentials cache is not available
forked-model detection was incorrect.
Both of these return an error instead of raising one
2007-11-09 14:55:41 -05:00
Rob Crittenden
b7506a5ea6 Fix editing groups when cn is a single-valued field
Fix some error messages that were printing the entire detail message
2007-11-09 14:01:28 -05:00
Rob Crittenden
705d68ddcb Require uniqueness in the name/comment field of delegations
Fix error reporting in the UI to include the detailed message
Sort delegations by name when displaying them
Update the name field from "Name" to "Delegation Name"
2007-11-09 13:58:36 -05:00
Rob Crittenden
6f03dde1ab Underline columns on sort results page so users will know it is a link
Restore the CSS to display the up/down arrow on sort columns
2007-11-12 15:14:35 -05:00
Rob Crittenden
547e6e920e Redirect to the FQDN otherwise kerberos auth may fail 2007-11-12 14:47:48 -05:00
Rob Crittenden
e1ca8c235c Initial support for policy editing
More work is needed as the values are currently hardcoded and not saved
2007-11-12 14:19:05 -05:00
Rob Crittenden
e9dfbfa773 Enable multi-value field support for some attributes on the edit pages
Better error reporting in the GUI
Include a document describing how multi-valued fields work
2007-11-08 22:12:42 -05:00
Karl MacMillan
3b66d27383 Allow set/add/del to be called multiple times.
Allow the --set/add/del options to be called multiple
times during the same invocation. Also add more robust
checking of errors.
0001-01-01 00:00:00 +00:00
Rob Crittenden
303d5ebad9 Have the GUI use memberOf() instead of looping through the member DNs
Fix a bug in the local transport version of memberOf()
2007-10-31 10:08:16 -04:00
Rob Crittenden
1d6e88565c Add memberOf API call to the XML-RPC interface
Make find-groups use memberOf to have a prettier dispaly of members
2007-10-30 15:07:02 -04:00
Rob Crittenden
402274af4b Allow adding, setting, deleting arbitrary attributes 2007-10-31 09:32:25 -04:00
Pete Rowley
1871e8dbf6 Add user self service aci 2007-10-29 14:52:19 -07:00
Karl MacMillan
39dcd194ca Allow setting of lib directory to correct non-rpm builds on x86_64.
With this patch you will need to run:
  make autogen LIBDIR=/usr/lib64
Also works for 'make all'.
0001-01-01 00:00:00 +00:00
Karl MacMillan
4f4f947283 Update server deps to include acl and freeipa-admintools. 0001-01-01 00:00:00 +00:00
Rob Crittenden
ed387e2ebb Add inetUser to the admin user so memberOf will work 2007-10-30 14:42:19 -04:00
Rob Crittenden
3c8cfd94bd Create LDAP indeces on installation for fields the web GUI searches against 2007-10-30 13:41:41 -04:00
Rob Crittenden
c116f8d739 Install the delegation tools 2007-10-29 14:16:44 -04:00
Rob Crittenden
6f5b692b5c Fix minor spelling issue 2007-10-29 14:15:21 -04:00
Rob Crittenden
e40c583b12 Create configuration for MIT Windows kerberos client and install into
http://hostname/config so users can point their MIT client at the IPA
server and automatically fetch the configuration.
2007-10-29 12:00:48 -04:00
Kevin McCarthy
859291a706 Add delete user and group to webgui.
NOTE: this doesn't handle referential integrity.
2007-10-23 16:46:50 -07:00
Rob Crittenden
28641544e7 Set the user password when adding a user 2007-10-26 12:35:32 -04:00
Kevin McCarthy
1d746c9fc2 Rename the form fields parameter to be clearer:
user -> user_fields
group -> group_fields
delegate -> delegate_fields
2007-10-25 09:18:45 -07:00
Kevin McCarthy
358d279a53 webgui side of custom fields. 2007-10-24 16:04:17 -07:00
Mark McLoughlin
6e6237e54a Fix host_name buglet in ipa-server-install
This patch fixes a couple of buglets with read_ip_address():

  1) It writes host_name to /etc/hosts, but isn't currently
     being passed host_name

  2) It doesn't return the IP address even though the caller
     expects it

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-02-21 15:23:29 +00:00
Mark McLoughlin
d01da9a566 Change the layout of the dist dir
Rather than lumping everything together into the dist/ dir,
this patch separates them out into sources/, rpms/ and srpms/.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-02-21 15:23:29 +00:00
Mark McLoughlin
893e4b24dc imported patch freeipa-require-python-krbv.patch 2008-02-21 15:23:29 +00:00
Mark McLoughlin
5ec9a55278 Cleanup freeipa-python requires
We don't need the elaborate python requires, since a requires
for e.g. "python-abi = 2.5" is automatically added.

We also don't need the elaborate build requires, since all
it does is query the currently installed version of python
and require that you have it's appropriate python-devel
installed. But if python-devel is installed at all, this
should hold true.

(Also, IMHO the .spec files should be removed from mercurial
since they are automatically generated)

Signed-off-by: Mark McLouglin <markmc@redhat.com>
2008-02-21 15:23:29 +00:00
Mark McLoughlin
c317660a55 Create repodata during "make dist"
This patch just makes "make dist" build the yum repodata.

Note, that since the repodata is at the toplevel, if this
dist/ dir is uploaded to freeipa.org/downloads, people's
yum configs will continue to work.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-02-21 15:23:29 +00:00
Karl MacMillan
263fba1468 Handle selinux failure
Ignore errors if setsebool fails and print a warning.
0001-01-01 00:00:00 +00:00
Karl MacMillan
2703be51c8 Print warning about NTP
After looking into setting up ntpd on the IPA servers I decided it
was better just to warn admins. There are just too many valid setups
for time synchronization for us to try to get this right. Additionally,
just installing ntp and accepting the default config will result in
a configuration that is perfectly valid for IPA.

This patch checks if ntpd is running and suggests enabling it if it
is not - for client and server. It also adds some suggested next
steps to the server installation.
0001-01-01 00:00:00 +00:00
Rob Crittenden
f5cc36507b Add dependency on python-krbV 2007-10-24 15:39:05 -04:00
Rob Crittenden
0d80589bcb Command-line delegation tools with man pages 2007-10-24 13:10:23 -04:00
Kevin McCarthy
60d46ac660 Fix devel mode for the webgui. 2007-10-23 09:02:55 -07:00
Rob Crittenden
04636b8ae7 Add an LDAP attribute -> label mapping function to XML-RPC layer
Move some ACI functions around in preparation for cli delegation
2007-10-22 17:06:52 -04:00
Rob Crittenden
a47f893957 update_user and update_group need to be defined differently in order
to be available to the XML-RPC interface
2007-10-22 10:09:39 -04:00
Kevin McCarthy
f881e21f7f Add add/edit/show for manager and secretary fields. 2007-10-19 15:19:28 -07:00
Karl MacMillan
1685751b1c Remove dependency between ipa-pyton and ipa-server
Current ipa-python imports and calls code from ipaserver (which is in
the ipa-server package). This makes it impossible to use the admin
tools or the ipa-python package on a system without the server bits
installed. This fixes that in a fairly minimal way.
0001-01-01 00:00:00 +00:00
Kevin McCarthy
5e651a6496 Finish the email autosuggest.
For now I've added a new API call.  The field-specific searching is
a ways off.
2007-10-18 14:33:55 -07:00
Rob Crittenden
f018c2123c Require mod_nss-1.0.7-2 or higher. This version fixes an issue when
using mod_nss with mod_proxy.
2007-10-19 11:41:59 -04:00
Rob Crittenden
ba0adcffb1 Require SSL for the XML-RPC interface 2007-10-19 10:14:30 -04:00
Karl MacMillan
086193af0a Remove the use of uuid in the directory server instance name.
The use of a uuid for the DS instance name is overkill and it is a real
pain. This patch will use ipa-realm-name instead (resulting in something
like slapd-EXAMPLE-COM). All periods are converted to "-" because the DS
can't handle periods in server ids.
0001-01-01 00:00:00 +00:00
Kevin McCarthy
c4bd800b37 Fix HTML errors on empty fields. Move roomnumber to address section. 2007-10-19 09:18:51 -07:00
Kevin McCarthy
fd8690dd63 Add a flash message to the top of the page when there are validation errors. 2007-10-19 08:59:40 -07:00