Commit Graph

366 Commits

Author SHA1 Message Date
John Dennis
f36872383c add aci's for radius 2007-11-10 12:04:43 -05:00
John Dennis
84275328a0 radius now does kerberos auth, reads client entries from LDAP 2007-11-10 00:09:07 -05:00
John Dennis
80c4ed7af2 remove offensive use of rpm
add the radiusprofile to the list of objectclasses used when creating a user
2007-11-06 16:26:10 -05:00
Karl MacMillan
8e48393c61 Introduce service base class and clean up ipa-server-install
1) Add a base class for all of the instance objects.
2) Normalize usage of logging.
3) General cleanups of ipa-server-install.
4) Make better use of httpinstance.
5) Add webguiinstance.
6) Improve progress reporting during installation.

Works Here (TM), but it would be nice to get someone else
to test since this moves code around a bit.
0001-01-01 00:00:00 +00:00
Karl MacMillan
957a70e560 Prevent gzip from requesting confirmation.
The current manpage installation gzips the files in
place and requests confirmation before overwriting
existing files. Add -f to prevent prompting. We
should consider not gzipping the files in place.
0001-01-01 00:00:00 +00:00
Karl MacMillan
de15549f8e Make it possible to force the running of autogen.
With the change to run autogen on make all if there
was no makefile present, it became impossible to
force the running of autogen when that is needed. Fix
that by adding a bootstrap-autogen target that checks
the existing of Makefiles and reverting the autogen
target to always run autogen.
0001-01-01 00:00:00 +00:00
John Dennis
8cfd270f34 merge initial radius work 2007-11-03 12:22:20 -04:00
Karl MacMillan
8f4362f2f2 Enable referential integrity plugin. 0001-01-01 00:00:00 +00:00
Rob Crittenden
010fb65bfd define Self-Service as editting your own record.
This has the side-effect of removing the realm from Loggin in as. This
can be changed by using user_name instead of display_name in master.kid.
2007-11-02 17:41:24 -04:00
Rob Crittenden
9d24003528 Distinguish between active and inactive users on the Find People page. 2007-11-02 11:42:38 -04:00
Rob Crittenden
c54826653f 'make all' needs to depend on autogen.sh but we don't want to re-run it
on every iteration. This lets the top-level 'make install' work properly.
2007-11-02 11:34:02 -04:00
Rob Crittenden
dc01ea0fe6 groups come back as a list where the first element is the number of
groups returned. Skip that element.
2007-11-02 11:35:50 -04:00
Karl MacMillan
36e43aed1b NTP configuration for client and server.
Configure ipa servers as an ntp server and clients
to (by default) us the ipa server as an ntp server.

Also corrected the messages about which ports should
be opened.
0001-01-01 00:00:00 +00:00
Rob Crittenden
6a0ca23577 Update the UI look and feel 2007-11-01 16:15:32 -04:00
Simo Sorce
77a105688c Fix ticket #70 2007-11-01 13:56:03 -04:00
Rob Crittenden
10917161a7 Use proper method of retrieving attributes 2007-11-01 13:21:13 -04:00
Rob Crittenden
a51dd58278 TurboGears log files and log rotation
The error log is rotated weekly on Sunday. 4 backups are saved.

The access log is not stored since it would be a duplicate of the
Apache logs. It can be enabled if desired.

Had to move the call to daemonize() in ipa-webgui so that the
fork is done before TurboGears is initialized. Otherwise the log
files end up getting closed.
2007-11-01 11:55:53 -04:00
Rob Crittenden
d9f809746b Completely remove an attribute 2007-10-31 17:11:55 -04:00
Karl MacMillan
83592ebada Added tag milestone_4_1 for changeset 77f4aaa4e4bd 0001-01-01 00:00:00 +00:00
Karl MacMillan
c0ae2b2f85 Removed tag mileston_4_1 0001-01-01 00:00:00 +00:00
Karl MacMillan
a7d1987ec3 Added tag mileston_4_1 for changeset bda291e79a4f 0001-01-01 00:00:00 +00:00
Karl MacMillan
29c0668e98 Bump versions for release. 0001-01-01 00:00:00 +00:00
Simo Sorce
51a5130227 Properly increment kvno and keep recent key material around
This is necessary for services that need to be able to respond
to requests from client that acquired a service ticket just before
a password change.
2007-10-31 10:52:44 -04:00
Karl MacMillan
45346ee3ab Remove multi-value set/add in ipa-usermod.
Calling --add multiple times will accomplish the same
thing without the need for handling splits on ",".
0001-01-01 00:00:00 +00:00
Karl MacMillan
27f0aab667 Rename memberOf to group_members in xml-rpc interface. 0001-01-01 00:00:00 +00:00
Karl MacMillan
3b66d27383 Allow set/add/del to be called multiple times.
Allow the --set/add/del options to be called multiple
times during the same invocation. Also add more robust
checking of errors.
0001-01-01 00:00:00 +00:00
Rob Crittenden
303d5ebad9 Have the GUI use memberOf() instead of looping through the member DNs
Fix a bug in the local transport version of memberOf()
2007-10-31 10:08:16 -04:00
Rob Crittenden
1d6e88565c Add memberOf API call to the XML-RPC interface
Make find-groups use memberOf to have a prettier dispaly of members
2007-10-30 15:07:02 -04:00
Rob Crittenden
402274af4b Allow adding, setting, deleting arbitrary attributes 2007-10-31 09:32:25 -04:00
Pete Rowley
1871e8dbf6 Add user self service aci 2007-10-29 14:52:19 -07:00
Karl MacMillan
4f4f947283 Update server deps to include acl and freeipa-admintools. 0001-01-01 00:00:00 +00:00
Rob Crittenden
ed387e2ebb Add inetUser to the admin user so memberOf will work 2007-10-30 14:42:19 -04:00
Rob Crittenden
3c8cfd94bd Create LDAP indeces on installation for fields the web GUI searches against 2007-10-30 13:41:41 -04:00
Rob Crittenden
c116f8d739 Install the delegation tools 2007-10-29 14:16:44 -04:00
Rob Crittenden
6f5b692b5c Fix minor spelling issue 2007-10-29 14:15:21 -04:00
Rob Crittenden
e40c583b12 Create configuration for MIT Windows kerberos client and install into
http://hostname/config so users can point their MIT client at the IPA
server and automatically fetch the configuration.
2007-10-29 12:00:48 -04:00
Kevin McCarthy
859291a706 Add delete user and group to webgui.
NOTE: this doesn't handle referential integrity.
2007-10-23 16:46:50 -07:00
Rob Crittenden
28641544e7 Set the user password when adding a user 2007-10-26 12:35:32 -04:00
Kevin McCarthy
1d746c9fc2 Rename the form fields parameter to be clearer:
user -> user_fields
group -> group_fields
delegate -> delegate_fields
2007-10-25 09:18:45 -07:00
Kevin McCarthy
358d279a53 webgui side of custom fields. 2007-10-24 16:04:17 -07:00
Mark McLoughlin
6e6237e54a Fix host_name buglet in ipa-server-install
This patch fixes a couple of buglets with read_ip_address():

  1) It writes host_name to /etc/hosts, but isn't currently
     being passed host_name

  2) It doesn't return the IP address even though the caller
     expects it

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-02-21 15:23:29 +00:00
Mark McLoughlin
d01da9a566 Change the layout of the dist dir
Rather than lumping everything together into the dist/ dir,
this patch separates them out into sources/, rpms/ and srpms/.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-02-21 15:23:29 +00:00
Mark McLoughlin
893e4b24dc imported patch freeipa-require-python-krbv.patch 2008-02-21 15:23:29 +00:00
Mark McLoughlin
5ec9a55278 Cleanup freeipa-python requires
We don't need the elaborate python requires, since a requires
for e.g. "python-abi = 2.5" is automatically added.

We also don't need the elaborate build requires, since all
it does is query the currently installed version of python
and require that you have it's appropriate python-devel
installed. But if python-devel is installed at all, this
should hold true.

(Also, IMHO the .spec files should be removed from mercurial
since they are automatically generated)

Signed-off-by: Mark McLouglin <markmc@redhat.com>
2008-02-21 15:23:29 +00:00
Mark McLoughlin
c317660a55 Create repodata during "make dist"
This patch just makes "make dist" build the yum repodata.

Note, that since the repodata is at the toplevel, if this
dist/ dir is uploaded to freeipa.org/downloads, people's
yum configs will continue to work.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
2008-02-21 15:23:29 +00:00
Karl MacMillan
263fba1468 Handle selinux failure
Ignore errors if setsebool fails and print a warning.
0001-01-01 00:00:00 +00:00
Karl MacMillan
2703be51c8 Print warning about NTP
After looking into setting up ntpd on the IPA servers I decided it
was better just to warn admins. There are just too many valid setups
for time synchronization for us to try to get this right. Additionally,
just installing ntp and accepting the default config will result in
a configuration that is perfectly valid for IPA.

This patch checks if ntpd is running and suggests enabling it if it
is not - for client and server. It also adds some suggested next
steps to the server installation.
0001-01-01 00:00:00 +00:00
Rob Crittenden
f5cc36507b Add dependency on python-krbV 2007-10-24 15:39:05 -04:00
Rob Crittenden
0d80589bcb Command-line delegation tools with man pages 2007-10-24 13:10:23 -04:00
Kevin McCarthy
60d46ac660 Fix devel mode for the webgui. 2007-10-23 09:02:55 -07:00