summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add compatibility function for older libkrb5Simo Sorce2015-05-301-1/+60
| | | | | | | | | | | | | | Before krb5 1.13 the krb5_salttype_to_string() function was returning incorrect names (display names of some kind instead of the names used by the rest of the library to map saltname to the salt type integer number). This patch adds a function that checks at runtime if we have a working function and uses a fallback map updated to the salt types known up to 1.12, this allows us to use the library provided function in following releases where new salt types may emerge. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Milan Kubik <mkubik@redhat.com>
* install: Move ipa-server-upgrade code into a moduleJan Cholasta2015-05-293-66/+74
| | | | | | https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Martin Basti <mbasti@redhat.com>
* install: Move ipa-replica-install code into a moduleJan Cholasta2015-05-293-596/+652
| | | | | | https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Martin Basti <mbasti@redhat.com>
* install: Move ipa-server-install code into a moduleJan Cholasta2015-05-293-1042/+1239
| | | | | | https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Martin Basti <mbasti@redhat.com>
* install: Make a package out of ipaserver.install.serverJan Cholasta2015-05-294-0/+7
| | | | | | | | | | Until ipa-server-install, ipa-replica-install and ipa-server-upgrade are merged into a single code base, keep their respective bits in separate modules in the package. https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Martin Basti <mbasti@redhat.com>
* Detect default encsalts kadmin password changeSimo Sorce2015-05-277-0/+231
| | | | | | | | | | | | | | | | | | | When kadmin tries to change a password it will get the allowed keysalts from the password policy. Failure to provide them will result in kadmin using the defaults specified in the kdc.conf file or hardcoded defaults (the default salt is then of type NORMAL). This patch provides the supported values that have been read out of the appropriate LDAP attribute when we read the server configuration. Then at actual password change, check if kadmin is handing us back the exact list of supported encsalts we sent it, and in that case replace it with the real default encsalts. Fixes https://fedorahosted.org/freeipa/ticket/4914 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Martin Babinsky <mbabinsk@redhat.com>
* KRA: get the right dogtag version during server uninstallMartin Babinsky2015-05-261-1/+1
| | | | | | | | | Ensure that the correct version of dogtag is passed from API object to the KRA uninstaller during IPA server uninstall. https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* server-find and server-show commandsPetr Vobornik2015-05-264-2/+119
| | | | | | | | | | | ipa server-find ipa server-show FQDN These commands display a list of IPA servers stored in cn=masters,cn=ipa,cn=etc,$SUFFIX https://fedorahosted.org/freeipa/ticket/4302 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* Add Domain Level featureTomas Babej2015-05-2617-14/+280
| | | | | | | https://fedorahosted.org/freeipa/ticket/5018 Reviewed-By: Jan Cholasta <jcholast@redhat.com> Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
* Server Upgrade: fix remove statementMartin Basti2015-05-261-3/+4
| | | | | | | | | If value does not exists then do not update entry. Otherwise, together with nonexistent entry, the LDAP decode error will be raised. https://fedorahosted.org/freeipa/ticket/4904 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Fix: use DS socket check only for upgradeMartin Basti2015-05-262-17/+33
| | | | | | | | | | | To detect if DS server is running, use the slapd socket for upgrade, and the LDAP port for installation. Without enabled LDAPi socket checking doesnt work. https://fedorahosted.org/freeipa/ticket/4904 Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
* install part - manage topology in shared treeLudwig Krispenz2015-05-267-1/+47
| | | | | | https://fedorahosted.org/freeipa/ticket/4302 Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
* ds plugin - manage replication topology in the shared treeLudwig Krispenz2015-05-2614-0/+4079
| | | | | | | Implementation of ticket: https://fedorahosted.org/freeipa/ticket/4302 Design page: http://www.freeipa.org/page/V4/Manage_replication_topology Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* replica-manage: Properly delete nested entriesTomas Babej2015-05-262-3/+3
| | | | | | | | | | | Bad ordering of LDAP entries during replica removal resulted in a failure to delete replica and its services from cn=masters,cn=ipa,cn=etc,$SUFFIX. This patch enforces the correct ordering of entries resulting in proper removal of services before the host entry itself. https://fedorahosted.org/freeipa/ticket/5019 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Fix typo in ipa-server-upgrade man pageMartin Kosek2015-05-261-1/+1
|
* Server Upgrade: Move code from ipa-upgradeconfig to separate moduleMartin Basti2015-05-253-1420/+1383
| | | | | | | | | This also prevent the script ipa-upgradeconfig execute upgrading. Upgrade of services is called from ipa-server-upgrade https://fedorahosted.org/freeipa/ticket/4904 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* merge KRA installation machinery to a single moduleMartin Babinsky2015-05-254-100/+118
| | | | | | | | | This is a prerequisite to further refactoring of KRA install/uninstall functionality in all IPA install scripts. https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* ipaserver/dcerpc: Ensure LSA pipe has session key before using itAlexander Bokovoy2015-05-251-5/+14
| | | | | | | | | | | | | | | | | | With Samba 4.2 there is a bug that prevents Samba to consider Kerberos credentials used by IPA httpd process when talking to smbd. As result, LSA RPC connection is seen as anonymous by Samba client code and we cannot derive session key to use for encrypting trust secrets before transmitting them. Additionally, rewrite of the SMB protocol support in Samba caused previously working logic of choosing DCE RPC binding string to fail. We need to try a different set of priorities until they fail or succeed. Requires Samba fixes from https://bugzilla.redhat.com/show_bug.cgi?id=1219832 Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1219834 Reviewed-By: Tomas Babej <tbabej@redhat.com>
* Added vault plugin.Endi S. Dewata2015-05-259-2/+865
| | | | | | | | | A new plugin has been added to manage vaults. Test scripts have also been added to verify the functionality. https://fedorahosted.org/freeipa/ticket/3872 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* git ignore ipaplatform/__init__.pyPetr Vobornik2015-05-221-0/+1
| | | | | | | | This file is generated in `make version-update` added in 9f049ca14403f3696d54d186e6b1b15181f055df Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* Server Upgrade: Fix: execute schema updateMartin Basti2015-05-221-1/+5
| | | | | | | | Accidentaly schema upgrade has not been executed. https://fedorahosted.org/freeipa/ticket/4904 Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
* Server Upgrade: wait until DS is readyMartin Basti2015-05-222-5/+17
| | | | | | | | | | | During server upgrade we should wait until DS is ready after restart, otherwise connection error is raised. Instead of 389 port, the DS socket is checked. https://fedorahosted.org/freeipa/ticket/4904 Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
* Uid uniqueness: fix: exclude compat tree from uniquenessMartin Basti2015-05-221-0/+2
| | | | | | Without this commit it is not possible to move user to staged area. Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* client-install: Fix kinits with non-default Kerberos config fileJan Cholasta2015-05-212-4/+22
| | | | | | https://fedorahosted.org/freeipa/ticket/4808 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* do not check for directory manager password during KRA uninstallMartin Babinsky2015-05-201-17/+17
| | | | | | | | | | ipa-kra-install validates and asks for directory manager password during uninstallation phase. Since this password is never used during service uninstall, the uninstaller will not perform these checks anymore. https://fedorahosted.org/freeipa/ticket/5028 Reviewed-By: Martin Basti <mbasti@redhat.com>
* webui: datetime widget with datepickerPetr Vobornik2015-05-203-5/+276
| | | | | | | | | | | | | | | | | Datetime widget was transform from a simple text input to 3 separate inputs: - date with bootstrap-datepicker - hour - minute e.g.: Validity end [ 2015-05-18 ] [23]:[01] UTC Vendor [ abc ] Editation of seconds is not supported. https://fedorahosted.org/freeipa/ticket/4347 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* webui: add boostrap-datepicker filesPetr Vobornik2015-05-206-1/+29
| | | | | | https://fedorahosted.org/freeipa/ticket/4347 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* webui: option to not create user private groupPetr Vobornik2015-05-203-1/+9
| | | | | | | | | | | Web UI wa not able to create a user without a private group. New field added to user adder dialog to allow that. https://fedorahosted.org/freeipa/ticket/4986 Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Ales 'alich' Marecek <amarecek@redhat.com>
* webui: fix empty table border in FirefoxPetr Vobornik2015-05-201-1/+4
| | | | | | | | Firefox suffers from: https://bugzilla.mozilla.org/show_bug.cgi?id=409254 This is a workaround to fix it. Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
* webui: prefer search facet's deleter dialogPetr Vobornik2015-05-201-5/+8
| | | | | | | | | | | | | | Deleter dialog in search facet is now chosen in order as follows: - facet's, defined as spec, e.g.: deleter_dialog: { $factory: IPA.user.deleter_dialog } - entity's, the same but it entity spec - default, which is IPA.search_deleter_dialog Previous didn't allow to override entity dialog with facet one and also definition by spec was not allowed. Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: stageusers, display page elements based on user statePetr Vobornik2015-05-207-29/+222
| | | | | Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: update stageuser/user pages based on action in diffrent user search pagePetr Vobornik2015-05-202-0/+37
| | | | | Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: extend user deleter dialog with --permanent and --preserve optionsPetr Vobornik2015-05-201-1/+57
| | | | | Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: stageuser pluginPetr Vobornik2015-05-207-2/+406
| | | | | Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: facet policies for all facetsPetr Vobornik2015-05-204-11/+14
| | | | | | | | | | | | Now also facets other than details facet can use facet policies. Facet policies purpose is to extend facets behavior without overriding base class. This shared behavior could be reused in several other facets which may have completely different base classes. Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: allow to hide facet tabs or sidebarPetr Vobornik2015-05-201-0/+37
| | | | | Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: allow to replace facet tabs with sidebarPetr Vobornik2015-05-201-10/+75
| | | | | | | | | basically implementation of #4625 but atm there is no time to properly test #4625 in the whole UI, therefore, it will be limited only to active/stage/preserved user search page. Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: facet groups widgetPetr Vobornik2015-05-202-84/+168
| | | | | | | | | | | | | Refactoring of facet groups. This new widget has an html structure which could be used for current facet tabs but also for PatternFly two column layout with either accordion or nav-category - https://www.patternfly.org/wp-content/uploads/patternfly/tests/form.html - https://www.patternfly.org/wp-content/uploads/patternfly/tests/tab.html Will be useful for #4625. Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: custom facet groups in a facetPetr Vobornik2015-05-202-6/+39
| | | | | | | | | | | Facets use to inherit facet groups from entity. There was no option to define cross-entity facet groups for different facets which belong one entity. In other words it was not possible to have 'user search' and 'stage user search' tab in one facet group. Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: metadata validator min and max value overridesPetr Vobornik2015-05-201-2/+28
| | | | | Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: navigation: unique names on entity facet menu itemsPetr Vobornik2015-05-201-4/+17
| | | | | | | | | | | Fixes issue where it is not possible to define under the same parent: { entity: 'bar', facet: 'baz' } { entity: 'foo', facet: 'baz' } Error reporting of invalid menu item names was improved. Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: navigation: do not remember selected childs of menu itemPetr Vobornik2015-05-201-32/+21
| | | | | | | | | | Remove behavior which navigated to previously selected child if navigating to its parent. It makes navigation more consistent. Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: prefer entity fallback in menu item selectPetr Vobornik2015-05-201-5/+5
| | | | | | | | | | | | | | | | | | | While selecting menu item based on a facet which have an entity defined, prefer entity fallback over facet name fallback. It solves an issue which appears when a menu item of a different entity has the same facet name specified. In such case this menu item was selected instead of the desired one. E.g.: there are menu items: { entity: 'foo' } { entity: 'bar', facet: 'search'} Showing a foo's search facet resulted in selecting { entity: 'bar', facet: 'search'} item. Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: entity menu items navigate to main entity facetPetr Vobornik2015-05-201-3/+0
| | | | | | | I.e. remove memory from bare entity navigation Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: entity facets in facet registryPetr Vobornik2015-05-205-15/+56
| | | | | | | | | | | | | | | | | All entity facets are automatically registered as a new type in reg.facet. The type name is: <entity_name>_<facet_name> The name of facets is kept same, mainly to support the same url routes. This change allows to get facet instance by calling, e.g.: reg.facet.get('user_details') It allows to make declarative links to facet which are not yet instantiated. Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: register construction spec based on existing specPetr Vobornik2015-05-202-23/+50
| | | | | | | | Useful for declarative inheritance. E.g. base new facet on details facet with all registered preops and default spec object. Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: declare search command options in search facetPetr Vobornik2015-05-201-0/+23
| | | | | | | | | | | A search facet could be defined with an option which is always applied during entity-find command on facet refresh. e.g. ipa user-find --preserved Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: rename IPA.user_* to IPA.user.*Petr Vobornik2015-05-201-4/+4
| | | | | | | | | | | Or in other words, move all objects which belong to user module to the module. Therefore they no longer pollutes the main 'IPA' module. Therefore: require('freeipa/ipa').user == require('freeipa/user') Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* webui: update patternfly to v1.1.4Petr Vobornik2015-05-205-8/+18
| | | | | | | | Not all functionality is available. Mostly because IPA doesn't require them yet. Missing: bootstrap combobox, datatables js, PF font with icons, spinner for old IEs Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Thierry Bordaz <tbordaz@redhat.com>
* Pylint: fix false positive warning for domainMartin Basti2015-05-191-1/+1
| | | | Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
generated by cgit (git 2.34.1) at 2024-06-29 07:03:06 +0000