| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
Read access is denied to the sudo container for unauthenticated users.
This shared user can be used to provide authenticated access to the
sudo information.
https://fedorahosted.org/freeipa/ticket/998
|
|
|
|
| |
ticket 594
|
|
|
|
| |
ticket 996
|
|
|
|
| |
ticket 969
|
| |
|
|
|
|
|
| |
The order of the Add and Delete buttons has been reversed to be
consistent with those in other facets.
|
|
|
|
| |
end user can replace the logo, the banner or both
|
| |
|
| |
|
|
|
|
| |
clikcable link as the left most column confused users.
|
|
|
|
| |
classes match the styles for available.
|
| |
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/899
|
|
|
|
|
| |
The IPA.cmd() has been modified to set the error dialog box's title
properly.
|
|
|
|
|
|
|
|
| |
This patch fixes Entitlements privileges and ACIs. There were
missing descriptions or the ACIs could not be processed by
Permissino plugin because of missing prefix.
https://fedorahosted.org/freeipa/ticket/997
|
|
|
|
|
|
|
|
|
|
|
| |
Created some default roles as examples. In doing so I realized that
we were completely missing default rules for HBAC, SUDO and password
policy so I added those as well.
I ran into a problem when the updater has a default record and an add
at the same time, it should handle it better now.
ticket 585
|
|
|
|
| |
ticket 984
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/840
|
|
|
|
| |
ticket 925
|
|
|
|
| |
ticket 978
|
|
|
|
|
|
| |
text box, tyhe most likely thing that the user will want to change on the page.
https://fedorahosted.org/freeipa/ticket/983
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/974
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/490
|
| |
|
|
|
|
|
| |
Hard-coded messages through out the code have been replaced by i18n
messages obtained from json_metadata and i18n_messages.
|
| |
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/991
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This creates a new custom attribute, memberofindirect_[plugin].
Using this you can tell the difference between being an actual memberof
another entry and being a memberof as the result if inheritence. This is
particularly useful when trying to remove members of an entry, you can
only remove direct members.
I had to add a couple of short sleep calls to make things work a little
better. The memberof plugin runs as a postop and we have no way of knowing
when it has done its work. If we don't pause we may show some stale
data that memberof hasn't updated yet. .3 seconds is an arbitrary choice.
ticket 966
|
| |
|
|
|
|
| |
ticket 962
|
|
|
|
|
|
| |
The man tool I use, manedit, also excepted all dashes. Seems benign.
ticket 803
|
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/784
https://fedorahosted.org/freeipa/ticket/786
https://fedorahosted.org/freeipa/ticket/787
|
| |
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/977
|
| |
|
|
|
|
|
|
| |
The json_metadata() has been updated to return ipa.Objects and
ipa.Methods. The i18n_messages() has been updated to include other
messages that are not available from the metadata.
|
|
|
|
|
|
|
| |
Previously the user's city parameter is defined to use the 'locality'
attribute. This was a problem because the attribute would be returned
as 'l' by the directory server causing a mismatch. Now the parameter
has been changed to use the 'l' attribute.
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/831
|
|
|
|
|
|
|
|
|
|
|
| |
When enabling replication we make an SSL connection. I think the way
this goes is python-ldap -> openldap -> NSS. It may be a problem in
the openldap SSL client, maybe it isn't calling NSS_Shutdown(). In any
case if we use ldapi instead the problem goes away.
Back out the temporary code to ignore nss_shutdown errors.
ticket 965
|
|
|
|
|
|
|
|
|
|
|
| |
Many WebUI identifiers were defined in a global namespace. This is
not a good programming practice and may result in name clashes,
for example with other libraries.
This patch moves these variables to IPA namespace or its
sub-namespaces, when meaningful.
https://fedorahosted.org/freeipa/ticket/212
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When the UUID plug-in generates a value that is used in the RDN
of the entry being added, the old DN is free'd and replaced with
the new DN. The problem is that the operation in the pblock holds
a pointer to the old DN address. This can cause other plug-ins to
reference garbage, leading to incorrect results or crashes. This
was causing the attribute uniqueness plug-in to not work correctly,
resulting in duplicate netgroup entries.
The fix is to have the UUID plug-in reset the target DN after
changing the DN of the entry to be added.
ticket 963
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/935
|
| |
|
|
|
|
|
|
| |
Add the server we registered with as a fallback.
ticket 980
|
|
|
|
|
|
|
|
| |
nsaccountlock doesn't have a visible Param but we want do so
some basic validation to be sure garbage doesn't get in there so
do it in the pre_callback of add and mod.
ticket 968
|
|
|
|
|
|
|
| |
This patch ensures that PTR records added by FreeIPA are compliant with
RFC.
https://fedorahosted.org/freeipa/ticket/839
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/563
https://fedorahosted.org/freeipa/ticket/588
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/735
|
| |
|
|
|
|
|
|
|
|
| |
A link has been added into the details page to expand/collapse all
sections.
Previously each section's <div> container is identified using a long
ID. It is now identified using the section name.
|