freeipa.git/tests, branch 30gatepo FreeIPA project Forbid overlapping primary and secondary rid ranges 2012-10-19T07:02:50+00:00 Tomas Babej tbabej@redhat.com 2012-10-15T10:28:16+00:00 27a8f93178292a013c6bd0438951ed6ac661b5d0 Commands ipa idrange-add / idrange-mod no longer allows the user to enter primary or secondary rid range such that has non-zero intersection with primary or secondary rid range of another existing id range, as this could cause collision. Unit tests added to test_range_plugin.py https://fedorahosted.org/freeipa/ticket/3086 
Commands ipa idrange-add / idrange-mod no longer allows the user
to enter primary or secondary rid range such that has non-zero
intersection with primary or secondary rid range of another
existing id range, as this could cause collision.

Unit tests added to test_range_plugin.py

https://fedorahosted.org/freeipa/ticket/3086
Add instructions support to PublicError 2012-10-11T20:30:58+00:00 Alexander Bokovoy abokovoy@redhat.com 2012-10-12T09:13:59+00:00 88262a75ffe7a25640333dcc4da2100830cae821 When long additional text should follow the error message, one can supply instructions parameter to a class derived from PublicError. This will cause following text added to the error message: Additional instructions: <additional text> `instructions' optional parameter could be a list or anything that coerces into unicode(). List entries will be joined with '\n'. https://fedorahosted.org/freeipa/ticket/3167 
When long additional text should follow the error message, one can
supply instructions parameter to a class derived from PublicError.

This will cause following text added to the error message:

    Additional instructions:
    <additional text>

`instructions' optional parameter could be a list or anything that coerces
into unicode(). List entries will be joined with '\n'.

https://fedorahosted.org/freeipa/ticket/3167
Restrict admins group modifications 2012-10-03T11:22:46+00:00 Tomas Babej tbabej@redhat.com 2012-09-25T12:14:57+00:00 682edbf2152aa2dce2f6350226bffc6ebc2526c1 Group-mod command no longer allows --rename and/or --external changes made to the admins group. In such cases, ProtectedEntryError is being raised. https://fedorahosted.org/freeipa/ticket/3098 
Group-mod command no longer allows --rename and/or --external
changes made to the admins group. In such cases, ProtectedEntryError
is being raised.

https://fedorahosted.org/freeipa/ticket/3098
Improve user addition to default group in user-add 2012-10-03T07:39:15+00:00 Tomas Babej tbabej@redhat.com 2012-09-25T10:20:49+00:00 0edeb9b01d7fe11c8a00ab1a986ec7429b8aadbb On adding new user, user-add tries to make it a member of default user group. This, however, can raise AlreadyGroupMember when the user is already member of this group due to automember rule or default group configured. This patch makes sure AlreadyGroupMember exception is caught in such cases. https://fedorahosted.org/freeipa/ticket/3097 
On adding new user, user-add tries to make it a member of default
user group. This, however, can raise AlreadyGroupMember when the
user is already member of this group due to automember rule or
default group configured. This patch makes sure AlreadyGroupMember
exception is caught in such cases.

https://fedorahosted.org/freeipa/ticket/3097
Only use service PAC type as an override 2012-10-03T06:53:41+00:00 Martin Kosek mkosek@redhat.com 2012-10-02T15:06:10+00:00 43f4ca710bfcf2e4076f95b70e8cfc292becec7f PAC type (ipakrbauthzdata attribute) was being filled for all new service automatically. However, the PAC type attribute was designed to serve only as an override to default PAC type configured in IPA config. With PAC type set in all services, users would have to update all services to get new PAC types configured in IPA config. Do not set PAC type for new services. Add new NONE value meaning that we do not want any PAC for the service (empty/missing attribute means that the default PAC type list from IPA config is read). https://fedorahosted.org/freeipa/ticket/2184 
PAC type (ipakrbauthzdata attribute) was being filled for all new
service automatically. However, the PAC type attribute was designed
to serve only as an override to default PAC type configured in
IPA config. With PAC type set in all services, users would have
to update all services to get new PAC types configured in IPA config.

Do not set PAC type for new services. Add new NONE value meaning that
we do not want any PAC for the service (empty/missing attribute means
that the default PAC type list from IPA config is read).

https://fedorahosted.org/freeipa/ticket/2184
Improve StrEnum validation error message 2012-10-01T11:39:22+00:00 Martin Kosek mkosek@redhat.com 2012-09-27T12:18:02+00:00 988ea368272822f2153563ad34554240e3377d60 Do not print list of possible values as "%r" but simply as a list of quoted values which should make it easier to read for users. Also add a special case when there is just one allowed value. https://fedorahosted.org/freeipa/ticket/2869 
Do not print list of possible values as "%r" but simply as a list
of quoted values which should make it easier to read for users.
Also add a special case when there is just one allowed value.

https://fedorahosted.org/freeipa/ticket/2869
Validate SELinux users in config-mod 2012-09-27T08:43:39+00:00 Martin Kosek mkosek@redhat.com 2012-09-25T11:46:56+00:00 256024db0a1cd2fb39445f9760bc8a49abb7f15c config-mod is capable of changing default SELinux user map order and a default SELinux user. Validate the new config values to prevent bogus default SELinux users to be assigned to IPA users. https://fedorahosted.org/freeipa/ticket/2993 
config-mod is capable of changing default SELinux user map order
and a default SELinux user. Validate the new config values to
prevent bogus default SELinux users to be assigned to IPA users.

https://fedorahosted.org/freeipa/ticket/2993
Always handle NotFound error in dnsrecord-mod 2012-09-24T11:55:17+00:00 Petr Viktorin pviktori@redhat.com 2012-09-14T16:05:12+00:00 0b254e8b1e60b46ce29fecedbc088921a526fbd8 When there were no updated attrs when modifying a nonexistent DNS record, the error was not handled and caused an internal server error later (old_entry was used uninitialized). https://fedorahosted.org/freeipa/ticket/3055 
When there were no updated attrs when modifying a nonexistent DNS record,
the error was not handled and caused an internal server error later (old_entry
was used uninitialized).

https://fedorahosted.org/freeipa/ticket/3055
Use default reverse zone consistently 2012-09-19T15:32:02+00:00 Martin Kosek mkosek@redhat.com 2012-09-05T07:56:27+00:00 ef7b8ab764420baa4e959c0bf060e390b314c18f When a new reverse zone is to be generated based on an IP address without a network prefix length, we need to use some default value. While netaddr library default ones (32b for IPv4 and 128b for IPv6) are not very sensible we should use the defaults already applied in installers. That is 24b for IPv6 and 64 for IPv6. Test case has been added to cover the new default. https://fedorahosted.org/freeipa/ticket/2461 
When a new reverse zone is to be generated based on an IP address without
a network prefix length, we need to use some default value. While netaddr
library default ones (32b for IPv4 and 128b for IPv6) are not very sensible
we should use the defaults already applied in installers. That is 24b for
IPv6 and 64 for IPv6.

Test case has been added to cover the new default.

https://fedorahosted.org/freeipa/ticket/2461
Fix various typos. 2012-09-18T06:45:28+00:00 Yuri Chornoivan yurchor@ukr.net 2012-09-16T16:35:56+00:00 8bbb42b4102b62b215ece59b8b6561af13891e9e https://fedorahosted.org/freeipa/ticket/3089 
https://fedorahosted.org/freeipa/ticket/3089