IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-09-03 20:52:56 -05:00
Code Issues Packages Projects Releases Wiki Activity
475 Commits 11 Branches 63 Tags
ca8e71d9381fb61368e5666c4d560ae9417fdf97
Commit Graph
73 Commits
Author SHA1 Message Date
Rob Crittenden 00489597d8 Rework input validation to more closely match what we require in the UI 2007-12-07 17:07:03 -05:00
Rob Crittenden 5e4a162954 Fix delegation in the UI and add a missing aci that allows writes. 
Make ipa-deldelegation more user-friendly.
 2007-12-07 16:08:12 -05:00
Rob Crittenden 0c0cc370cf Fix spelling 2007-12-10 15:01:30 -05:00
Rob Crittenden 62b8091a83 Notify the user when the search results have been truncated 2007-12-05 15:25:05 -05:00
rcritten@redhat.com c32a960cae Compatibility changes to work on RHEL 5 with python 2.4 2007-11-30 15:53:02 -05:00
Rob Crittenden 72595ab1a5 delete_group() takes a DN, not a CN. Also do slightly better error reporting. 2007-11-30 12:04:16 -05:00
Rob Crittenden ab67029d94 Add utility to lock user accounts. Remove lock capability from ipa-deluser 
Fix bootstrap.ldif to add new Class of Service entries properly
Include some man pages that weren't being installed
 2007-11-26 22:28:53 -05:00
Karl MacMillan edc7af1446 Add xml-rpc interface for getting keytabs. 
Warning: this lacks any sort of authorization.
 -
Karl MacMillan 9038bf71dd Move packages to ipa from freeipa. -
Karl MacMillan b202b6cc31 Bump the version numbers for release. Also remove 
specific version check on freeradius. Packages aren't
available and the freeradius support isn't ready
anyway.
 -
Rob Crittenden f42f1f44c8 Enable group inactivation by using the Class of Service plugin. 
This adds 2 new groups: activated and inactivated.

If you, or a group you are a member of, is in inactivated then you are too.

If you, or a group you are a member of, is in the activated group, then you
are too.

In a fight between activated and inactivated, activated wins.

The DNs for doing this matching is case and white space sensitive.

The goal is to never have to actually set nsAccountLock in a user directly
but move them between these groups.

We need to decide where in the CLI this will happen. Right it is split
between ipa-deluser and ipa-usermod. To inactivate groups for now just
add the group to inactivate or active.
 2007-11-20 22:45:29 -05:00
Rob Crittenden 1967aafa39 Implement the password policy UI and finish IPA policy UI 
This includes a default password policy
Custom fields are now read from LDAP. The format is a list of
  dicts with keys: label, field, required.
The LDAP-based configuration now specifies:
    ipaUserSearchFields: uid,givenName,sn,telephoneNumber,ou,title
    ipaGroupSearchFields: cn,description
    ipaSearchTimeLimit: 2
    ipaSearchRecordsLimit: 0
    ipaCustomFields:
    ipaHomesRootDir: /home
    ipaDefaultLoginShell: /bin/sh
    ipaDefaultPrimaryGroup: ipausers
    ipaMaxUsernameLength: 8
    ipaPwdExpAdvNotify: 4
This could use some optimization.
 2007-11-16 12:59:32 -05:00
Rob Crittenden 0a3ed69746 Completely remove attributes when delattr argument in ipa-groupmod 2007-11-15 14:44:09 -05:00
Rob Crittenden b01c468e8c Completely remove attributes when delattr argument 2007-11-15 14:39:54 -05:00
Rob Crittenden 49aa82e932 Use same labels as UI for ipa-finduser and ipa-findgroup 
Add -a option to ipa-findgroup to print all attributes
 2007-11-15 14:20:50 -05:00
Rob Crittenden bfcc044db2 If unable to connect to the XML-RPC server print a more useful error msg. 2007-11-15 10:27:59 -05:00
Rob Crittenden cd489f0a73 Allow a user or group to change an attribute in its RDN 
Add secretary to the list of indexes otherwise RDN changing could be slow
Port --addattr, --setattr and --delattr from usermod to groupmod
 2007-11-12 23:11:55 -05:00
Rob Crittenden f7358533d0 Add the capability to completely delete a user from the database. The 
default remains to inactivate them.
 2007-11-09 15:45:11 -05:00
Rob Crittenden 705d68ddcb Require uniqueness in the name/comment field of delegations 
Fix error reporting in the UI to include the detailed message
Sort delegations by name when displaying them
Update the name field from "Name" to "Delegation Name"
 2007-11-09 13:58:36 -05:00
Karl MacMillan 957a70e560 Prevent gzip from requesting confirmation. 
The current manpage installation gzips the files in
place and requests confirmation before overwriting
existing files. Add -f to prevent prompting. We
should consider not gzipping the files in place.
 -
Rob Crittenden 10917161a7 Use proper method of retrieving attributes 2007-11-01 13:21:13 -04:00
Karl MacMillan 29c0668e98 Bump versions for release. -
Karl MacMillan 45346ee3ab Remove multi-value set/add in ipa-usermod. 
Calling --add multiple times will accomplish the same
thing without the need for handling splits on ",".
 -
Karl MacMillan 27f0aab667 Rename memberOf to group_members in xml-rpc interface. -
Karl MacMillan 3b66d27383 Allow set/add/del to be called multiple times. 
Allow the --set/add/del options to be called multiple
times during the same invocation. Also add more robust
checking of errors.
 -
Rob Crittenden 1d6e88565c Add memberOf API call to the XML-RPC interface 
Make find-groups use memberOf to have a prettier dispaly of members
 2007-10-30 15:07:02 -04:00
Rob Crittenden 402274af4b Allow adding, setting, deleting arbitrary attributes 2007-10-31 09:32:25 -04:00
Rob Crittenden c116f8d739 Install the delegation tools 2007-10-29 14:16:44 -04:00
Rob Crittenden 6f5b692b5c Fix minor spelling issue 2007-10-29 14:15:21 -04:00
Mark McLoughlin 893e4b24dc imported patch freeipa-require-python-krbv.patch 2008-02-21 15:23:29 +00:00
Rob Crittenden 0d80589bcb Command-line delegation tools with man pages 2007-10-24 13:10:23 -04:00
Rob Crittenden 6b0587726a Actually return a value to the shell 2007-10-19 09:59:07 -04:00
Rob Crittenden 53166669e7 Make distclean work again 2007-10-19 09:53:27 -04:00
Rob Crittenden 91ab2d3893 Add unique exit status to the ipa-find* tools when nothing is found 2007-10-16 12:19:43 -04:00
Rob Crittenden a4143789da Add option -a to print all attributes 
Make sure we don't print out binary data
Remvoe any trailing white space when printing to avoid extra newlines
 2007-10-11 10:00:01 -04:00
Rob Crittenden 0a935d5be3 First draft of man pages for the admin tools 2007-10-11 10:49:32 -04:00
Kevin McCarthy 2b38769b50 Combine get_user/group by dn/cn into get_entry_by_cn/dn. 
Also a couple double-escaping fixes I missed in the last patch.
 2007-10-09 09:26:16 -07:00
rcritten@redhat.com 6aa72b44e4 Do group operations based on the group DN, not the CN 
Add new class of errors for connections
Raise an exception if a connection cannot be made due to missing ccache
 2007-10-02 16:56:51 -04:00
Simo Sorce cfac4acf9f Rely more on kerberos. 
Don't read ipa.conf to get the realm, the kerberos libs do that for you.
Use the krbPrincipalName to change passwords
Make it possible to specify the principal at user creation.
Mail is not a required attribute so far, don't require it.
 2007-10-01 17:33:16 -04:00
rcritten@redhat.com 7b96973711 Give ipa-adduser, ipa-addgroup and ipa-usermod an interactive mode 
Add ipa-passwd tool
Add simple field validation package
This patch adds a package requirement, python-krbV. This is needed to
 determine the current user based on their kerberos ticket.
 2007-09-21 10:24:36 -04:00
rcritten@redhat.com 2035297e22 Add a missing exception catcher 2007-09-24 15:22:17 -04:00
Simo Sorce fbfefe6b0e Merge conflicts between rob and kevin patches 2007-09-20 16:58:54 -04:00
Kevin McCarthy f17071533a Implement asynchronous search for groups. 
Use the filter generation code to search on multiple fields.
 2007-09-19 08:42:34 -07:00
Simo Sorce 5898ae527a In the TCP case there is an extra (redundant) lenght 
field before the packet data, address the problem.
 2007-09-12 11:51:16 -04:00
rcritten@redhat.com ed6ab17c9c Add function to allow user's to set/reset their kerberos password 
Remove some unused calls to retrieve the current realm
 2007-09-11 02:48:53 -04:00
Karl MacMillan d0c856d547 Reset version numbers for next milestone. -
Karl MacMillan d15ad0f26a Update version numbers for release. -
rcritten@redhat.com 2377e8bcb0 Add group command-line tools to the Makefile 
Updated installation instructions
 2007-09-07 17:49:44 -04:00
rcritten@redhat.com 9b30f46744 Enable LDAP SASL authentication using a forwarded kerberos ticket 
Handle both SASL auth and proxied authentication
Refactor LDAP connection code to be simpler
Other small bug fixes
 2007-09-05 13:14:23 -04:00
Kevin McCarthy c85c8eede3 Add 'test' target to makefiles. Hook up ipautil tests to run. 2007-09-04 10:22:45 -07:00