freeipa.git - FreeIPA project

	Commit message (Collapse)	Author	Age	Files	Lines
*	Add conditional for new SELinux capabilities available in Fedora 11	rcrit	2009-07-23	2	-11/+14
\|
*	Make --setup-dns work on replica installation	Martin Nagy	2009-07-22	4	-6/+79
\| \| \| \| \| \| \|	The ipa-replica-install script will setup the DNS if user specifies the --setup-dns option. It will only add the zone into LDAP if the cn=dns,$SUFFIX container doesn't exist. For now, however, we do not add the records.
*	Add a reverse zone with server's PTR record	Martin Nagy	2009-07-22	3	-7/+43
\| \| \| \|	Also, small cosmetic change in dns.ldif.
*	Add --setup-dns option. It will replace --setup-bind	Martin Nagy	2009-07-22	2	-11/+14
\|
*	Allow replicas of an IPA server using an internal dogtag server as the CA	Rob Crittenden	2009-07-15	9	-116/+299
\| \| \| \| \| \| \| \|	This involves creating a new CA instance on the replica and using pkisilent to create a clone of the master CA. Also generally fixes IPA to work with the latest dogtag SVN tip. A lot of changes to ports and configuration have been done recently.
*	Catch and handle HTTP exceptions (like 401, 404, etc)	Rob Crittenden	2009-07-15	1	-1/+3
\|
*	Use uppercase boolean values in dns.ldif	Martin Nagy	2009-07-15	1	-2/+2
\| \| \| \| \| \|	The newest 389 server implements syntax checking and causes problems if the boolean attribute is set to "True". The correct value should be "TRUE".
*	Require a password only once when it is passed in via a pipe	Rob Crittenden	2009-07-10	1	-21/+13
\|
*	Add a one-character option for parameters	Rob Crittenden	2009-07-10	2	-1/+12
\|
*	Let anonymous users browse the VLV index	Rob Crittenden	2009-07-10	2	-0/+10
\| \| \| \| \| \|	This is needed for automount support on Solaris http://docs.sun.com/app/docs/doc/819-5201/6n7a588i7?l=en&a=view
*	Add a return value to exceptions.	Rob Crittenden	2009-07-10	2	-4/+13
\| \| \| \| \| \| \| \|	Returning the exception value doesn't work because a shell return value is in the range of 0-255. The default return value is 1 which means "something went wrong." The only specific return value implemented so far is 2 which is "not found".
*	Add textui function to display and prompt user for selection for *-find.	Rob Crittenden	2009-07-10	2	-8/+66
\| \| \| \| \|	Since we may end up executing a *-show when an entry is selected we need to defer destroying the connection context.
*	Implement support for non-LDAP-based actions that use the LDAP ACI subsystem.	Rob Crittenden	2009-07-10	5	-6/+230
\| \| \| \| \| \| \| \| \| \| \| \|	There are some operations, like those for the certificate system, that don't need to write to the directory server. So instead we have an entry that we test against to determine whether the operation is allowed or not. This is done by attempting a write on the entry. If it would succeed then permission is granted. If not then denied. The write we attempt is actually invalid so the write itself will fail but the attempt will fail first if access is not permitted, so we can distinguish between the two without polluting the entry.
*	Configure BIND LDAP driver to use SASL authentication	Martin Nagy	2009-07-10	1	-15/+16
\| \| \| \| \|	We use /etc/named.keytab generated by ipa-server-install to authenticate against the LDAP server. Also tidy up /etc/named.conf since we're there.
*	Basic changes to get a default principal for DNS	Simo Sorce	2009-07-10	7	-2/+432
\| \| \| \| \| \| \| \|	Also moves delagation layout installation in dsinstance. This is needed to allow us to set default membership in other modules like bindinstance. Signed-off-by: Martin Nagy <mnagy@redhat.com>
*	Check error in kpasswd	Simo Sorce	2009-07-10	1	-2/+3
\|
*	Make object classes of automatically created entries lowercase.	Pavel Zuna	2009-07-10	1	-16/+16
\| \| \| \| \|	This makes them more consistent with entries created by plugins. It's a cosmetic thing, not that useful.
*	Change command names from group-del-member to group-remove-member.	Pavel Zuna	2009-07-09	6	-17/+17
\| \| \| \|	Signed-off-by: Jason Gerard DeRose <jderose@redhat.com>
*	Import explode_dn from ldap.functions for backward compatibility with older ↵	Pavel Zuna	2009-07-08	1	-2/+4
\| \| \| \| \| \|	version of python-ldap. Fix bug in add_entry_to_group. Resolves 510149
*	Add class variable to indicate whether SSL is required or not.	Rob Crittenden	2009-07-07	1	-2/+4
\| \| \| \| \|	Older python-ldap versions will crash if you call ldap.get_option() on a value that has not been set.
*	Fix bug in ldap2.modify_password and make adding/removing members slightly ↵	Pavel Zuna	2009-07-07	1	-4/+4
\| \| \| \|	more efficient.
*	Add unit test for password plugin	Rob Crittenden	2009-07-07	1	-0/+71
\|
*	Fix unit tests to handle new group-{add, del}-member semantics.	Pavel Zuna	2009-07-02	5	-27/+37
\|
*	Fix bug: number of found entries was reported incorrectly in some plugins.	Pavel Zuna	2009-07-02	4	-5/+5
\|
*	Make basegroup-{add, del}-member print failed members with error descriptions.	Pavel Zuna	2009-07-02	4	-85/+116
\|
*	Fix bug: when deleting hosts, their services where deleted incorrectly	Pavel Zuna	2009-07-02	1	-3/+7
\|
*	Remove outstanding 2's from plugins.	Pavel Zuna	2009-07-02	2	-8/+8
\|
*	Add unit tests for new plugins.	Pavel Zuna	2009-07-02	9	-0/+1634
\|
*	Add utility functions for plugin unit testing.	Pavel Zuna	2009-07-02	1	-0/+12
\|
*	Remove unit tests for old plugins.	Pavel Zuna	2009-07-02	10	-1848/+0
\|
*	Add automount plugin.	Pavel Zuna	2009-07-02	1	-0/+324
\|
*	Fix minor bugs, typos, etc. discovered by unit tests in plugins.	Pavel Zuna	2009-07-02	8	-31/+51
\|
*	Fix bug in basegroup and passwd plugins (incorrect use of find_entry_by_attr).	Pavel Zuna	2009-07-02	2	-14/+12
\|
*	Rename -create/-delete commands to -add/-del respectively.	Pavel Zuna	2009-07-02	15	-65/+65
\|
*	Fix Encoder.decode test.	Pavel Zuna	2009-07-02	1	-1/+1
\|
*	Replace references to basegroup2 in taskgroup plugin.	Pavel Zuna	2009-07-02	1	-11/+11
\|
*	Rename plugins2 to plugins.	Pavel Zuna	2009-07-02	13	-214/+214
\|
*	Rename plugins2 files (remove '2' suffix').	Pavel Zuna	2009-07-02	14	-0/+0
\|
*	Remove use_ldap2 constant.	Pavel Zuna	2009-07-02	2	-16/+7
\|
*	Remove all references to use_ldap2.	Pavel Zuna	2009-07-02	14	-74/+0
\|
*	Always use new LDAP backend when creating context.	Pavel Zuna	2009-07-02	1	-4/+1
\|
*	Delete plugins using old LDAP backend.	Pavel Zuna	2009-07-02	15	-4081/+0
\|
*	Add a local implementation of httplib.SSLFile and httplib.FakeSocket	rcrit	2009-07-01	3	-4/+197
\| \| \| \| \| \| \|	Python 2.6 changed its internal implementation which makes it difficult to override in a way that is backwards compatible. 508953
*	Fix configure with newer auto* and libtool on Fedora-11	rcrit	2009-07-01	1	-0/+2
\|
*	Two new arguments for the help built-in command: topics and commands	Rob Crittenden	2009-06-15	1	-2/+7
\| \| \| \| \|	ipa help topics will show all topics (equivalent to ipa help) ipa help commands will show list of all available commands
*	Fix typo in variable name, object_classs->object_class	Rob Crittenden	2009-06-15	1	-1/+1
\|
*	Add conversion of attribute name synonyms when generating modlists.	Pavel Zuna	2009-06-15	1	-0/+28
\|
*	Change plugins2 using find_entries to support incomplete (truncated) search ↵	Pavel Zuna	2009-06-15	5	-41/+98
\| \| \| \|	results.
*	Add new set of base classes for plugins using LDAP.	Pavel Zuna	2009-06-15	1	-0/+398
\|
*	Add support for incomplete (truncated) search results.	Pavel Zuna	2009-06-15	2	-15/+30
\| \| \| \| \| \| \| \| \| \|	ldap2.find_entries now returns a tuple containing 2 values. First, a list of entries (dn, entry_attrs), Second, the truncated flag. If the truncated flag is True, search results hit a server limitation and are incomplete. This patch also removes decoding of non-string scalar python types into unicode (they are left unchanged).