IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-08-10 04:58:03 -05:00
Code Issues Packages Projects Releases Wiki Activity
10,914 Commits 11 Branches 63 Tags
e2b9ea2fd58b98edbb8d6aec97aadeea7cf11dcb
Commit Graph
380 Commits
Author SHA1 Message Date
Jr Aquino d781dbd045 17-2 Managed netgroups should be invisible https://fedorahosted.org/freeipa/ticket/963 2011-02-16 17:52:21 -05:00
Martin Kosek e5d57d237b HBAC plugin inconsistent output 
This patch adds a proper summary text to HBAC command which is
then printed out in CLI. Now, HBAC plugin output is consistent
with other plugins.

https://fedorahosted.org/freeipa/ticket/596
 2011-02-16 10:39:16 -05:00
Jakub Hrozek a9dc175bc5 Validate MX records 
https://fedorahosted.org/freeipa/ticket/967
 2011-02-16 09:56:29 -05:00
Endi S. Dewata eb8f091c9b Fixed association facets. 
The association config has been removed because it incorrectly assumes there is only one association between two entities. Now each association is defined separately using association facets.

The service.py has been modified to specify the correct relationships. The API.txt has been updated.

https://fedorahosted.org/freeipa/ticket/960
 2011-02-15 17:45:46 -05:00
Rob Crittenden edcdd87bc8 A privilege cannot be a member of a permission, remove it from metadata 
ticket 970
 2011-02-15 13:39:49 -05:00
Rob Crittenden dab452442d The --out option wasn't working at all with cert-show. 
Also fix some related problems in write_certificate(), handle
either a DER or base64-formatted incoming certificate and don't
explode if the filename is None.

ticket 954
 2011-02-14 16:43:48 -05:00
Jakub Hrozek 04597f4e36 Remove obsolete record types from DNS 
https://fedorahosted.org/freeipa/ticket/923
 2011-02-14 14:50:57 -05:00
Rob Crittenden 779f8da2f0 API fix for dns -> dnsrecord change in permission plugin 2011-02-14 11:48:12 -05:00
Rob Crittenden 456101bd29 Update API.txt with updated usercertificate in service-find 2011-02-10 14:51:39 -05:00
Rob Crittenden 121da04579 Add the entitlement API to API.txt 
It was missed because the whole module was skipped if python-rhsm wasn't
loaded.

ticket 919
 2011-02-10 11:16:58 -05:00
Pavel Zuna ab7e702487 Set minimum for Kerberos policy max life and max renew. 
Fix #847
 2011-02-10 11:16:57 -05:00
Rob Crittenden 0188158a76 Use correct LDAP attributes for city and state. 
Also add a unit test for address.

Ticket 889
 2011-02-02 16:53:32 -05:00
Martin Kosek 0353a2be67 Typos in freeIPA messages 
This patch fixes several reported typos in IPA messages and
in comments.

Contributors file has been updated + the original author of the
patch reporting the typos was added.

https://fedorahosted.org/freeipa/ticket/848
 2011-02-02 15:38:50 -05:00
Jakub Hrozek 0dce1bc9e1 Add an address for a nameserver when a new zone is created during install 
https://fedorahosted.org/freeipa/ticket/881
 2011-01-31 22:15:45 -05:00
Rob Crittenden bf4f77d985 Rename permissions and privileges to be more readable. 
This also drops description from permissions since it seems redundant and
fixes up the help text a little.

ticket 792
 2011-01-31 13:17:38 -05:00
Jakub Hrozek 92c57946e1 Fix API.txt 2011-01-28 11:44:38 -05:00
Jakub Hrozek 0a6b1c4bce Enforce that all NS records are resolvable 
Bind cannot load a zone if any of its name server records is not
resolvable.

https://fedorahosted.org/freeipa/ticket/838
 2011-01-28 11:44:38 -05:00
Jakub Hrozek 682ca8658a Add example of DNS SRV record and a simple validator 
https://fedorahosted.org/freeipa/ticket/846
 2011-01-28 11:44:38 -05:00
Jakub Hrozek a641f1f23d Delete the whole DNS record with no parameters 
Error out when deleting a nonexistent DNS record

Also fixes the DNS unit tests.

https://fedorahosted.org/freeipa/ticket/816
https://fedorahosted.org/freeipa/ticket/829
 2011-01-28 11:44:38 -05:00
Jan Zeleny 884f43f0db Add support for account unlocking 
This patch adds command ipa user-unlock and some LDAP modifications
which are required by Kerberos for unlocking to work.

Ticket:
https://fedorahosted.org/freeipa/ticket/344
 2011-01-28 10:23:02 -05:00
Adam Young b871b90ef0 api version update 2011-01-26 10:12:04 -05:00
Jakub Hrozek 70a9e04f04 Enforce uniqueness on (key,info) pairs in automount keys 
https://fedorahosted.org/freeipa/ticket/293
 2011-01-25 11:13:10 -05:00
Endi S. Dewata 9319385c7e Removed 'name' from 'Sudo Command Group name'. 2011-01-24 13:33:00 -05:00
Rob Crittenden 8cc46af050 Remove del-all from dnsrecord_del from API.txt 
This was from an unpushed patch I had in my tree.
 2011-01-21 16:03:22 -05:00
Rob Crittenden 5f0c52ab97 Add new option to dns_del and always ask permission options to API.txt 2011-01-21 15:13:58 -05:00
Simo Sorce 835436df15 Provide API to check if IPA DNS is enabled on some server 
Fixes: https://fedorahosted.org/freeipa/ticket/600
 2011-01-19 20:23:42 -05:00
Adam Young cbd121333a update API removal of idnssoamaximum from dns APIs broke the build. THis fixes it. 2011-01-18 14:43:19 -05:00
Simo Sorce f8c7afd15c Remove old DNS plugin commands from API validation 2011-01-14 17:26:48 -05:00
Simo Sorce 81311a9f4e Fix API validation 2011-01-14 15:42:40 -05:00
Rob Crittenden c69d8084c1 Add API version and have server reject incompatible clients. 
This patch contains 2 parts.

The first part is a small utility to create and validate the current
API. To do this it needs to load ipalib which on a fresh system
introduces a few problems, namely that it relies on a python plugin
to set the default encoding to utf8. For our purposes we can skip that.
It is also important that any optional plugins be loadable so the
API can be examined.

The second part is a version exchange between the client and server.
The version has a major and a minor version. The major verion is
updated whenever existing API changes. The minor version is updated when
new API is added. A request will be rejected if either the major versions
don't match or if the client major version is higher than then server
major version (though by implication new API would return a command not
found if allowed to proceed).

To determine the API version of the server from a client use the ping
command.

ticket 584
 2011-01-14 14:26:22 -05:00