Rob Crittenden
b7438c3da2
Use XML rather than string routines to handle response from dogtag Remove trailing CR/LF from the password file
2009-04-28 17:16:18 -04:00
David O'Brien
763c7ef914
trivial update to standardize terms in docstring
2009-04-28 13:32:01 -04:00
Rob Crittenden
bbbac4b24f
Fix bind zone installer
2009-04-27 15:44:26 -04:00
Rob Crittenden
d5290a60f9
Utilities for dealing with dogtag
2009-04-24 16:22:38 -04:00
Rob Crittenden
298d5fbce4
Import the RequiresRoot error and make note to replace this at some point
2009-04-24 16:22:22 -04:00
Pavel Zuna
7d0bd4b895
Rename errors2.py to errors.py. Modify all affected files.
2009-04-23 10:29:14 -04:00
Pavel Zuna
596d410471
Make LDAP entry output slightly nicer, don't print u's in front of unicode strings etc.
2009-04-23 10:25:51 -04:00
Pavel Zuna
5fa7c76f72
Fix filter generator in ldapapi. Shouldn't produce invalid filters anymore.
2009-04-23 10:23:28 -04:00
Pavel Zuna
32ad0ab011
Throw AlreadyGroupMember instead of EmptyModlist when trying to re-add member to a group.
2009-04-22 15:18:51 -04:00
Pavel Zuna
4e48e1fbf7
Introduce AlreadyGroupMember exception, raised when a member is attempted to be re-added to a group.
2009-04-22 15:18:47 -04:00
Pavel Zuna
9943b80841
Change ldap2.__handle_errors into the global _handle_errors function.
2009-04-22 15:17:32 -04:00
Pavel Zuna
58c10898c7
Make it possible to construct partial match filters using make_filter_* methods. Add missing _sasl_auth variable.
2009-04-22 15:17:28 -04:00
Pavel Zuna
af82879009
Add user plugin port with some bugs fixed to the new LDAP backend.
2009-04-22 15:16:51 -04:00
Pavel Zuna
9ecbd845d4
Add conditional (env.use_ldap2 is True) modifications required by new LDAP backend.
2009-04-22 15:14:24 -04:00
Pavel Zuna
ff0819b189
Add new env variables. 'container_dns' for DNS plugin, 'use_ldap2' for new LDAP backend debugging.
2009-04-22 15:12:39 -04:00
Rob Crittenden
cf8ed7b77a
Convert the RA plugin to use nsslib and remove the configure methods
2009-04-20 14:01:24 -04:00
Rob Crittenden
9182c10b03
Issue DS and Apache server certs during CA installation.
...
Notes:
- will create a CA instance (pki-ca) if it doesn't exist
- maintains support for a self-signed CA
- A signing cert is still not created so Firefox autoconfig still won't work
2009-04-20 14:01:00 -04:00
Rob Crittenden
fdf03cb07b
Remove unwanted white space
2009-04-20 13:59:41 -04:00
Rob Crittenden
64fa3dd4c3
Finish work replacing the errors module with errors2
...
Once this is committed we can start the process of renaming errors2 as errors.
I thought that combinig this into one commit would be more difficult to
review.
2009-04-20 13:58:26 -04:00
Rob Crittenden
a9387b48e6
Handle GSSAPI exceptions more gracefully
2009-04-20 13:44:08 -04:00
Rob Crittenden
e6171404bf
Make parentmap a autofill variable and add tests when parentmap is not passed
2009-04-13 15:22:49 -04:00
Rob Crittenden
8821d8cac3
Fill in default values for os and platform
2009-04-13 14:54:16 -04:00
Rob Crittenden
44afa977a8
The new admin tool 'ipa' uses a different configuration file, create it.
2009-04-13 14:53:08 -04:00
Rob Crittenden
ab73041174
Renaming the backend ldap plugin to ldapapi.py to prevent module import issues
2009-04-06 13:52:32 -04:00
Pavel Zuna
82bc30d17e
Use full OID for LDAP SYNTAX identification. Don't convert Booleans and Integers into respective python types as their ranges might not match. Rename module-scope functions.
2009-04-06 11:23:25 -04:00
root
dc3547cd7b
Add new LDAP backend plugin.
2009-04-03 14:08:13 -04:00
root
6ca80e312a
Add 'container_hbac' env variable.
2009-04-03 14:07:30 -04:00
Rob Crittenden
484eff1016
Implement an installer for the Dogtag certificate system.
...
The CA is currently not automatically installed. You have to pass in the
--ca flag to install it.
What works:
- installation
- unistallation
- cert/ra plugins can issue and retrieve server certs
What doesn't work:
- self-signed CA is still created and issues Apache and DS certs
- dogtag and python-nss not in rpm requires
- requires that CS be in the "pre" install state from pkicreate
2009-04-03 14:06:09 -04:00
Jason Gerard DeRose
a6294ba041
Renamed remaining plugins still using f_* b_* convention
2009-04-01 10:34:57 -04:00
Rob Crittenden
0c63ed3f5e
Fill in the ACIs and taskgroups for most of the plugins.
...
This adds:
group administration
host administration
host group administration
delegation administration
service administration
automount administration
netgroup administration
2009-04-01 10:33:43 -04:00
Rob Crittenden
c00281a9f9
Name update files so they can be easily sorted.
...
We want to process some updates in a particular order (schema, structural).
Using an init-inspired ordering mechanism.
2009-03-25 11:03:07 -04:00
Rob Crittenden
d6814f3aae
Implement a few new targets for ACIs
...
Also switch to the StrEnum parameter type for some options so we let the
framework do the enforcement
2009-03-25 11:03:03 -04:00
Rob Crittenden
fcfcc76524
Translate variables on all lines and sort files to be updated
...
Only the dn and the first line of any entry that was spread across
multiple lines were getting passed through the template engine.
If we are given a directory to process, sort the files in that directory
so the order can be predicted. Some updates rely on others.
2009-03-25 11:02:59 -04:00
Rob Crittenden
7d19cee7fc
DNA is now configured using an update file
2009-03-25 11:02:55 -04:00
Rob Crittenden
cf09aab18b
Allow a search using only the exact search filter
2009-03-25 11:02:52 -04:00
Rob Crittenden
1b1f9af01c
Add a 'showall' command so one can pick from a list of tasks to add to a role
2009-03-25 11:02:49 -04:00
Rob Crittenden
5aed824a6c
Use tuples instead of lists for class variables
2009-03-25 11:02:47 -04:00
Rob Crittenden
233a4cb5fd
Raise a more specific error when a user lacks the proper permissions.
...
The info part of the message will contain details on what permission
failed on what attribute.
2009-03-25 11:02:44 -04:00
Rob Crittenden
65e6259075
Always print the dn first when printing an entry
2009-03-25 11:02:42 -04:00
Rob Crittenden
a8a2664190
Add new type List that converts delimited values into a tuple
2009-03-20 09:29:44 -04:00
Rob Crittenden
c39a29e0cf
Converted to use new baseclass, remove the one with the f_ prefix
2009-03-20 09:28:26 -04:00
Rob Crittenden
ad4819ff66
Add tests for posix groups
2009-03-20 09:28:23 -04:00
Rob Crittenden
b627f50121
Convert to use the new basegroup framework
2009-03-20 09:28:18 -04:00
Rob Crittenden
9bc1419ac0
Convert to use the new basegroup framework
2009-03-20 09:28:16 -04:00
Rob Crittenden
33df0a3915
Convert to use the new basegroup framework
2009-03-20 09:28:14 -04:00
Rob Crittenden
1445a36026
Modify the taskgroup plugin to use the new group baseclass and add tests
2009-03-20 09:28:12 -04:00
Rob Crittenden
a55c5d6bcd
New plugin to handle role groups
...
Role groups will be part of the ACI system. It will let one create broad
categories of permissions. Things like: helpdesk, user admin, group admin,
whatever.
2009-03-20 09:28:09 -04:00
Rob Crittenden
5e2e3fd17d
Add generic base class that will most of the heavy lifting for groups
2009-03-20 09:28:06 -04:00
Rob Crittenden
2f17ebebba
Fix build breakage and install rolegroup.update
2009-03-20 08:49:33 -04:00
Rob Crittenden
8d796eedee
kw is supposed to contain just lower-case values
2009-03-19 16:02:12 -04:00
