| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
A table has been added into sudo rule details page for managing
sudo options.
Ticket #1447
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1465
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1446
|
|
|
|
| |
Ticket #1456
|
|
|
|
|
|
|
|
|
| |
previsouly was checked on key down, but that does the check too soon.
Next attempt was on blur, but that had numerous problems. This now checkes when the add button is clicked.
works for entity_select widget, too
Checks upon form submission
https://fedorahosted.org/freeipa/ticket/1437
|
| |
|
|
|
|
|
|
|
| |
The update() in HBAC/Sudo details facet has been fixed to call the
callback function which will show the dirty dialog properly.
Ticket #1439
|
|
|
|
|
|
|
| |
The self-service navigation has been fixed to include the root
of the navigation path.
Ticket #1445
|
|
|
|
|
|
|
|
| |
shows dialog if there are any HBAC deny rules. Dialog provides option to navigate to the HBAC page. Deny rules have their rule type value show up in red.
Only shows up fro administrators, not for self service users.
https://fedorahosted.org/freeipa/ticket/1421
|
|
|
|
|
|
|
|
| |
The HBAC/Sudo rules associations in users, groups, hosts and host
groups have been fixed to use the correct associator and method
names.
Ticket #1438
|
| |
|
|
|
|
|
|
| |
validate integers whether meta comes from metadata or param_info
https://fedorahosted.org/freeipa/ticket/1415
|
|
|
|
|
|
|
|
|
|
|
| |
The object_name attribute was used as both an identifier and a
label which sometimes require different values (e.g. hbacrule
vs. HBAC rule). The code that uses object_name as an identifier
has been changed to use the 'name' attribute instead. The values
of the object_name attribute have been fixed to become proper
labels.
Ticket #1217
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1416
|
|
|
|
|
|
|
|
|
|
| |
If we set the callback before calling connect() then if the connection
tries a network family type and fails, it will try other family types.
If this happens then the callback set on the first socket will be lost
when a new socket is created. There is no way to query for the callback
in an existing socket.
https://fedorahosted.org/freeipa/ticket/1349
|
|
|
|
|
|
|
| |
New arrow icons have been added to replace the plus/minus sign icons
for expanding/collapsing details sections.
Ticket #1422
|
|
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1111
reset() now hides both the link and the label
calucalating should_link is now a function that can be overloaded.
|
|
|
|
|
|
|
|
|
| |
The following invalid associations have been removed:
- group's memberindirect netgroup and role
- hostgroup's memberofindirect host
Ticket #1366
Ticket #1367
|
|
|
|
|
|
|
|
| |
The entitlement buttons are located serveral levels underneath
facet-controls, so the CSS selector has been fixed to extend beyond
facet-controls' immediate children.
Ticket #1419
|
|
|
|
|
|
|
|
|
| |
The IPA.user_status_widget has been modified such that it checks
the facet dirty status and asks the admin to either Update or Reset
the changes. Then the widget shows a dialog to confirm whether
the admin wants to activate/deactivate the user.
Ticket #1395
|
| |
|
|
|
|
|
|
| |
Hard-coded messages in the UI have been replaced with I18n messages.
Ticket #1396
|
|
|
|
|
|
| |
Images that are no longer used have been removed.
Ticket #990
|
| |
|
|
|
|
|
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1403
https://fedorahosted.org/freeipa/ticket/1404
https://fedorahosted.org/freeipa/ticket/1405
https://fedorahosted.org/freeipa/ticket/1406
fields and sections for config screen
Using multivalue controls for object classes
|
|
|
|
| |
Thereis not metatdata defined pkey for config, so we need to short circuit the logic that uses the metatdata pkey to look up the key from the hashurl.
|
|
|
|
|
|
|
|
|
| |
Instead of looking for a match on the entity name, use the nesting structure
of containing entites to grab their pkeys.
Code review fixes
https://fedorahosted.org/freeipa/ticket/674
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
about the current entity in the URL hash params
https://fedorahosted.org/freeipa/ticket/674
decrement depth for hidden tabs.
Initialize state from url
useing delete for removing state
stricter attribute matching
not incrementing depth for all hidden tabs.
whitespace cleanup
|
|
|
|
|
|
|
| |
The 'private' option is kept in to maintain API compatibility, but
is hidden from the user.
ticket 1120
|
|
|
|
| |
ticket 1358
|
|
|
|
|
| |
The new_dn_string passed into this function is malloc'd. It
must be freed before we reassign the value.
|
|
|
|
|
|
|
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1382
crash in winsync if replaying a MOD and user does not exist in AD
If the AD entry is deleted before the deletion can be synced back to IPA,
and in the meantime an operation is performed on the corresponding
entry in IPA that should be synced to AD, winsync attempts to get the
AD entry and it is empty. This just means the operation will not go
through, and the entry will be deleted when the sync from AD happens.
The IPA winsync plugin needs to handle the case when the ad_entry
is NULL.
|
|
|
|
|
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1379
winsync enables disabled users in AD when the AD entry changes
This was likely broken when ipa switched from using CoS/groups for account
inactivation to using nsAccountLock directly. The code that handled the
account sync in the from AD direction was broken, but was never found before
now because it had not been used. The fix is to correctly set or remove
nsAccountLock.
|
|
|
|
|
|
|
| |
Update name server configuration file to allow any host to issue
recursive queries (allow-recursion statement).
https://fedorahosted.org/freeipa/ticket/1335
|
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/945
now matches record at the end of the string
|
| |
|
|
|
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1259
According to RFC4517 the only valid values for a boolean in LDAP are TRUE or FALSE.
This commit adds support to recognize TRUE and FALSE as valid Bool constants when converting from LDAP attribute values
and enforces TRUE or FALSE string for account locking.
|
|
|
|
|
|
|
| |
The IPA.multivalued_text_widget has been modified such that the
'undo all' will appear only if at least one of the values is dirty.
Ticket #1109
|
|
|
|
| |
overides required with optional.
|
|
|
|
| |
Make the uid field optional
|
|
|
|
|
| |
The DNS records are presented as a facet in the DNS zone details
page, so the page title should say DNS Zone.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The entity labels in the following locations have been fixed:
- search facet title: plural
- details facet title: singular
- association facet title: singular
- breadcrumb: plural
- adder dialog title: singular
- deleter dialog title: plural
Some entity labels have been changed into the correct plural form.
Unused file install/ui/test/data/i18n_messages.json has been removed.
Ticket #1249
Ticket #1387
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
A new attribute label_singular has been added to all entities which
contains the singular form of the entity label in lower cases except
for acronyms (e.g. HBAC) or proper nouns (e.g. Kerberos). In the Web
UI, this label can be capitalized using CSS text-transform.
The existing 'label' attribute is intentionally left unchanged due to
inconsistencies in the current values. It contains mostly the plural
form of capitalized entity label, but some are singular. Also, it
seems currently there is no comparable capitalization method on the
server-side. So more work is needed before the label can be changed.
Ticket #1249
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1326
|
|
|
|
|
|
|
|
|
| |
information in ipactl.
Fail gracefully if the supplied hostname isn't fully-qualified in
ipa-server-install.
ticket 1035
|
|
|
|
|
|
| |
These changes save a few hundred ms but every little bit helps.
ticket 1023
|
|
|
|
|
|
| |
The details and association facets have been modified to show the number of records in each association in the corresponding facet tab.
Ticket #1386
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
A dogtag replica file is created as usual. When the replica is installed
dogtag is optional and not installed by default. Adding the --setup-ca
option will configure it when the replica is installed.
A new tool ipa-ca-install will configure dogtag if it wasn't configured
when the replica was initially installed.
This moves a fair bit of code out of ipa-replica-install into
installutils and cainstance to avoid duplication.
https://fedorahosted.org/freeipa/ticket/1251
|
|
|
|
|
|
| |
Adds hooks for navigation to the show page due to the unusual way that keys are accessed.
https://fedorahosted.org/freeipa/ticket/1257
|