IntenseWebs/freeipa
3
0 Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-11-02 08:59:57 -06:00
Code Issues Packages Projects Releases Wiki Activity
9,709 Commits 11 Branches 63 Tags
ce93b091d2ffbafedc721551f437631eed0e5a86
Commit Graph
9709 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jan Cholasta ce93b091d2 backup: use in-server API in ipa-backup and ipa-restore 
Use in-server API so that the commands don't try to fetch API schema and
fail.

https://fedorahosted.org/freeipa/ticket/5995

Reviewed-By: Milan Kubik <mkubik@redhat.com>
 2016-06-30 11:04:05 +02:00
Jan Cholasta 8d5272e687 schema: properly fix Flag arguments on the client 
The previous fix in commit a77e21cbca made
some Bool arguments appear as Flag on the client. This change fixes that.

https://fedorahosted.org/freeipa/ticket/6009

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-30 11:02:20 +02:00
Pavel Vomacka aaf65e9c56 Add certificate widget to ID override user details page. 
Add possibility to add, remove, view, get and download custom certificates on ID override user page.

https://fedorahosted.org/freeipa/ticket/5926

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 16:46:12 +02:00
Lenka Doudova f37c3af0db Tests: Fix failing ipatests/test_ipalib/test_errors.py 
Some strings in the testsuite are unicode which wasn't reflected in the tests. This patch fixes the problem by changing concerned strings to unicode.

Reviewed-By: Ganna Kaihorodova <gkaihoro@redhat.com>
 2016-06-29 16:45:13 +02:00
Pavel Vomacka 31a13c9e98 Add button for dns_update_system_records command 
Part of: https://fedorahosted.org/freeipa/ticket/5905

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
Reviewed-By: Petr Spacek <pspacek@redhat.com>
 2016-06-29 16:33:42 +02:00
Florence Blanc-Renaud 3c40d3aa9e Do not allow installation in FIPS mode 
https://fedorahosted.org/freeipa/ticket/5761

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
 2016-06-29 16:17:27 +02:00
Pavel Vomacka d7898ac2eb Add new custom command multivalued widget 
Add general class for multivalued widget which uses special commands which
are performed immediately.

Part of: https://fedorahosted.org/freeipa/ticket/5108

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 2f048224d2 Updated certificates table 
All certificates which are not issued by IPA CA are grey and not clickable. That's
because these certificates are not maintained by IPA CA.

Part of: https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 82e69e4300 Add new certificates widget to the service details page 
https://fedorahosted.org/freeipa/ticket/5108
https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 79ec965a96 Add new certificates widget to the host details page. Also extends evaluator and add support for adapters. 
https://fedorahosted.org/freeipa/ticket/5108
https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 0b72571c5a Add new certificates widget to the user details page 
https://fedorahosted.org/freeipa/ticket/5108
https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 55a0baf1c3 Add certificate widget 
The certificate widget is used for each certificate in certs_widget. It allows to
view, get, download, revoke and restore certificate.

https://fedorahosted.org/freeipa/ticket/5108
https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 6d3622c600 Add widget for showing multiple certificates 
Certs widget is based on multivalued widget and adds ability to add new certificate
and delete it. Each line is cert_widget.

https://fedorahosted.org/freeipa/ticket/5108
https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 3056f349b9 Remove old useless actions - get and view 
These two actions are not available any more. So that code is never called.

https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 260a00b81f Changed the way how to handle remove hold and revoke actions 
Method calling in actions is moved to another function - these calls may be used
by another functions, not only by actions.

https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 06a9a84876 Refactored certificate view and remove hold dialog 
Removed old layout created using html tables. Now table layout is made by div
and modern css styling.

https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka e7a55ef30b Add Object adapter 
Object adapter changes data to more useful format. Single value is reachable
as single value, property with more values is transformed to array.

https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 044d3c25de Add ability to turn off activity icon 
By specifying correct attribute when creating command it turn off showing activity icon
when webui waits for response from the server.

https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka 3d61aca623 Add working widget 
This widget can be used as notification that some other widget is working.
It shows spinner and cover the other widget by specified color.

https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka f243bd2d65 Extends functionality of DropdownWidget 
Adds methods which are able to enable and disable options according to the name of option
and methods which set or get whole item list.

https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
Pavel Vomacka e3e83272c9 Add support for custom menu in multivalued widget 
Every single widget which is in multivalued widget can now have custom action menu
and the delete button is included in this custom action menu.

Part of this ticket:
https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-29 15:41:58 +02:00
David Kupka 573819eb07 test: cert: Reflect change in behavior in tests 
Command cert-find with parameter sizelimit set to 0 no longer returns 0
certificates but returns all.

More precise ConversionError is returned when parameter is not
convertible to its type.

https://fedorahosted.org/freeipa/ticket/5381
https://fedorahosted.org/freeipa/ticket/4739

Reviewed-By: Petr Spacek <pspacek@redhat.com>
 2016-06-29 14:49:08 +02:00
Petr Spacek 954f6095fd DNS: Remove unnecessary DNS check from installer 
Previously we were checking content of DNS before actually adding DNS
records for replicas. This is causing cycle in logic and adds weird
corner cases to the installer which can blow up on DNS timeout or so.

The check was completely unnecessary because the installer knows IP
addresses and name of the machine. Removal of the check makes
the installer more reliable.

https://fedorahosted.org/freeipa/ticket/5962

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2016-06-29 14:19:59 +02:00
Petr Spacek 7be50ea715 Use NSS for name->resolution in IPA installer 
This fixes scenarios where IPA server is not able to resolve own name
and option --ip-address was not specified by the user.

This partially reverts changes from commit
dc405005f5

https://fedorahosted.org/freeipa/ticket/5962

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2016-06-29 14:19:59 +02:00
Petr Spacek 1802f7a225 client-install: do not fail if DNS times out during DNS update generation 
https://fedorahosted.org/freeipa/ticket/5962

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2016-06-29 14:19:59 +02:00
David Kupka 95191e1612 test: automember: Fix expected exception message 
https://fedorahosted.org/freeipa/ticket/4739

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-29 10:49:37 +02:00
Stanislav Laznicka 427bbf6c0d The LDAP*ReverseMember shouldn't imply --all is always specified 
The LDAP*ReverseMember methods would always return the whole LDAP
object even though --all is not specified.
Also had to fix some tests as objectClass will not be returned by
default now.

https://fedorahosted.org/freeipa/ticket/5892

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-29 10:44:30 +02:00
Stanislav Laznicka 30d054a573 Revert "Removed dead code from LDAP{Remove,Add}ReverseMember" 
While the code was really dead, it should serve a purpose elsewhere.
This reverts commit c56d65b064.

https://fedorahosted.org/freeipa/ticket/5892

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-29 10:44:30 +02:00
Jan Cholasta a77e21cbca schema: fix Flag arguments on the client 
Fix Flag arguments appearing as Bool on the client.

https://fedorahosted.org/freeipa/ticket/6009

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-29 10:20:00 +02:00
Fraser Tweedale 6e4e522e52 cert-find: fix 'issuer' option 
The 'issuer' option of cert-find was recently changed from Str to
DNParam, however, 'ra.find' expects a string and throws when it
receives a DN.

When constructing the dict that gets passed to 'ra.find', turn
DNParams into strings.

Part of: https://fedorahosted.org/freeipa/ticket/5381

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-29 09:54:18 +02:00
Fraser Tweedale 0078e7a919 ipa-certupdate: track lightweight CA certificates 
Enhance the ipa-certupdate program to add Certmonger tracking
requests for lightweight CA certificates.

Also update the dogtag-ipa-ca-renew-agent-submit to not store or
retrieve lightweight CA certificates, becaues Dogtag clones observe
renewals and update their NSSDBs on their own, and allow the helper
to request non-self-signed certificates.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-29 08:52:29 +02:00
Fraser Tweedale b720aa94e9 Update lightweight CA serial after renewal 
For CA replicas to pick up renewed lightweight CA signing
certificates, the authoritySerial attribute can be updated with the
new serial number.

Update the renew_ca_cert script, which is executed by Certmonger
after writing a renewed CA certificate to the NSSDB, to update the
authoritySerial attribute if the certificate belongs to a
lightweight CA.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-29 08:52:29 +02:00
Fraser Tweedale 67f13c82d8 Skip CS.cfg update if cert nickname not known 
After CA certificate renewal, the ``renew_ca_cert`` helper updates
certificate data in CS.cfg.  An unrecognised nickname will raise
``KeyError``.  To allow the helper to be used for arbitrary
certificates (e.g. lightweight CAs), do not fail if the nickname is
unrecognised - just skip the update.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-29 08:52:29 +02:00
Fraser Tweedale f0b1e37d2e ipaldap: turn LDAP filter utility functions into class methods 
The LDAP filter utilities do not use any instance attributes, so
collectively turn them into class methods to promote reuse.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-29 08:52:29 +02:00
Fraser Tweedale 45daffa22f Set default OCSP URI on install and upgrade 
Dogtag has been updated to support a default OCSP URI when the
profile includes AuthInfoAccess with URI method but does not specify
the URI (instead of constructing one based on Dogtag's hostname and
port).

Add the pkispawn config to ensure that the OCSP URI is set before
issuing CA and system certificates, and add the config to existing
CA instances on upgrade.

Fixes: https://fedorahosted.org/freeipa/ticket/5956
Reviewed-By: Martin Basti <mbasti@redhat.com>
 2016-06-28 19:15:35 +02:00
Martin Basti 5693d19550 CA replica promotion: add proper CA DNS records 
Update 'ipa-ca' records with A/AAAA records of the newly added replica

https://fedorahosted.org/freeipa/ticket/5966

Reviewed-By: Petr Spacek <pspacek@redhat.com>
 2016-06-28 16:56:35 +02:00
Martin Basti 104040cf36 DNS Locations: cleanup of bininstance 
We don't need anymore:
* sample of zone file - list of all records required by IPa will be
provided

* NTP related params - DNS records will be updated automatically,
based on LDAP values

* CA related params - DNS records will be updated automatically based
* on LDAP values

https://fedorahosted.org/freeipa/ticket/2008

Reviewed-By: Petr Spacek <pspacek@redhat.com>
 2016-06-28 15:23:51 +02:00
David Kupka a636842889 schema: Caching on schema on client 
Store schema in per user cache. Together with schemas also information
about mapping between server and fingerprint is stored to reduce traffic.

https://fedorahosted.org/freeipa/ticket/4739

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-28 15:03:42 +02:00
David Kupka 65aa2d48ff env: Add 'server' variable to api.env 
https://fedorahosted.org/freeipa/ticket/4739

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-28 15:03:42 +02:00
Petr Spacek bf91c0f938 DNS: Fix tests for realm domains integration with DNS zone add 
We forgot to update tests after change in
22f4045f72.

https://fedorahosted.org/freeipa/ticket/5980

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-28 14:19:56 +02:00
Petr Spacek 8b12ef50e1 client: Share validator and domain name normalization with server install 
https://fedorahosted.org/freeipa/ticket/5976

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2016-06-28 14:14:32 +02:00
Jan Cholasta 5f52e0fcbf frontend: forward command calls using full name 
Forward commands to remote server using the full versioned name.

https://fedorahosted.org/freeipa/ticket/4427

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-28 13:30:49 +02:00
Jan Cholasta 8466e94440 schema: support plugin versioning 
Update API schema server and client code to support plugin versioning.

https://fedorahosted.org/freeipa/ticket/4427

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-28 13:30:49 +02:00
Jan Cholasta 4284d4fb4d plugable: support plugin versioning 
Allow multiple incompatible versions of a plugin using the same name. The
current plugins are assumed to be version '1'.

The unique identifier of plugins was changed from plugin name to plugin
name and version. By default, the highest version available at build time
is used. If the plugin is an unknown remote plugin, version of '1' is used
by default.

https://fedorahosted.org/freeipa/ticket/4427

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-28 13:30:49 +02:00
Jan Cholasta 79d1f58335 plugable: use plugin class as the key in API namespaces 
When iterating over APINameSpace objects, use plugin class rather than its
name as the key.

https://fedorahosted.org/freeipa/ticket/4427

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-28 13:30:49 +02:00
Jan Cholasta 9a21964877 misc: generate plugins result directly in the command 
Move the code that generated result of the `plugins` command from API to
the command itself.

https://fedorahosted.org/freeipa/ticket/4427

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-28 13:30:49 +02:00
Lenka Doudova 22f26cfa8e Tests: Make ID views tests reflect new krbcanonicalname attribute 
https://fedorahosted.org/freeipa/ticket/3864

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2016-06-28 10:50:25 +02:00
Martin Babinsky d0c38d86a1 test-{service,host}-plugin: only expect krbcanonicalname when all=True 
fixes incorrect assertions in tests that create, retrieve, and search for
services

https://fedorahosted.org/freeipa/ticket/3864

Reviewed-By: Lenka Doudova <ldoudova@redhat.com>
 2016-06-28 09:17:30 +02:00
Martin Babinsky a79d45ad79 test_serverroles: ensure that test API is initialized with correct ldap_uri 
This ensures that the serverroles test works also when run together with other
iaserver test suites.

https://fedorahosted.org/freeipa/ticket/6000

Reviewed-By: Lenka Doudova <ldoudova@redhat.com>
 2016-06-28 09:14:28 +02:00
Jan Cholasta f7cc15f099 schema: client-side code cleanup 
Move client-side code scattered in global functions into neat classes.

https://fedorahosted.org/freeipa/ticket/4739

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-27 16:42:42 +02:00