| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1628
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We need an indicator to see if a keytab has been set on host and
service entries. We also need a way to know if a one-time password is
set on a host.
This adds an ACI that grants search on userPassword and
krbPrincipalKey so we can do an existence search on them. This way
we can tell if the attribute is set and create a fake attribute
accordingly.
When a userPassword is set on a host a keytab is generated against
that password so we always set has_keytab to False if a password
exists. This is fine because when keytab gets generated for the
host the password is removed (hence one-time).
This adds has_keytab/has_password to the user, host and service plugins.
ticket https://fedorahosted.org/freeipa/ticket/1538
|
|
|
|
|
|
|
| |
The 389-ds team is in the process of exposing slapi_rwlock which we
will switch to when it is available.
https://fedorahosted.org/freeipa/ticket/1630
|
|
|
|
|
|
| |
If the user wants the output they can pass the --debug flag to ipactl.
https://fedorahosted.org/freeipa/ticket/1402
|
|
|
|
|
|
|
|
|
|
| |
Since the Add/Delete links in the association table are disabled when
the category is set to 'all', it's no longer necessary to check the
category before showing the add/delete dialogs and modify the category
before adding entries. Thus, the IPA.rule_association_table_widget is
no longer needed.
Ticket #1692
|
|
|
|
| |
ticket 1572
|
|
|
|
| |
ticket 1664
|
|
|
|
|
|
|
|
| |
Added brief explanations for the various Sudo components in the
top level doc. Added doc entries for RunAs User and RunAs
Group.
https://fedorahosted.org/freeipa/ticket/1657
|
|
|
|
|
|
|
|
|
|
| |
The association table widget and facet have been modified to accept
titles for the add and delete dialogs. The table and facet definitions
have been modified to specify the appropriate titles.
Some unused code have been removed.
Ticket #1629
|
|
|
|
| |
ticket 1655, 1656
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1013
|
|
|
|
| |
This was an oversight for previous logging patch, ticket 1598
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1639
|
|
|
|
|
|
|
| |
This also fixes command logging in general, it wasn't working in most
cases as a regression in ticket 1322.
https://fedorahosted.org/freeipa/ticket/1598
|
|
|
|
| |
ticket 1570
|
|
|
|
|
|
|
|
|
| |
Do not fail import operation with DuplicateEntry when imported
maps/keys conflict with maps/keys pre-created by
automountlocation-add command. Currently, this applies for map
'auto.direct' and key '/-'.
https://fedorahosted.org/freeipa/ticket/1551
|
|
|
|
|
|
| |
The title of page dirty dialog has been changed to 'Unsaved Changes'.
Ticket #1653
|
|
|
|
|
|
|
|
| |
The 'Hide already enrolled' has been removed from the enrollment
dialog because it is checked by default and entries that are already
enrolled cannot be enrolled again.
Ticket #1638
|
|
|
|
|
|
| |
ipa-server-install meet the length requirement.
ticket 1621
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix automountkey-mod so that automountkey attribute is correctly
updated. Add this test case to the unit tests.
Make automountkey required for automountkey-mod, otherwise it would
cause internal server error.
Make --newinfo optional so that automountkey may be just renamed
without changing its info attribute.
https://fedorahosted.org/freeipa/ticket/1528
|
|
|
|
| |
ticket 1580
|
|
|
|
| |
ticket https://fedorahosted.org/freeipa/ticket/1390
|
|
|
|
|
|
|
| |
The dialog box for resetting user password has been modified to use
the standard layout.
Ticket #1641
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
ticket 1650 (https://fedorahosted.org/freeipa/ticket/1650) has
an extensive discussion of the issues, please refer to that.
This patch does the following:
* does not count fuzzy translations when computing translation
statistics via the "msg-stats" make target in install/po
* adds a new make target called "pull-po" which pulls updated po files
from Transifex (configure.ac includes some trailing whitespace fixes)
* turns off the generation of fuzzy translation suggestions during the
message merge phase.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
After updating po's current translation status is:
ipa.pot has 1329 messages. There are 21 po translation files.
as: 0/1329 0.0% 1329 untranslated, 0 fuzzy
bn_IN: 13/1329 1.0% 1316 untranslated, 0 fuzzy
zh_CN: 133/1329 10.0% 1196 untranslated, 0 fuzzy
zh_TW: 0/1329 0.0% 1329 untranslated, 0 fuzzy
nl: 1/1329 0.1% 1328 untranslated, 0 fuzzy
fr: 0/1329 0.0% 1329 untranslated, 0 fuzzy
de: 27/1329 2.0% 1302 untranslated, 0 fuzzy
el: 0/1329 0.0% 1329 untranslated, 0 fuzzy
gu: 0/1329 0.0% 1329 untranslated, 0 fuzzy
id: 89/1329 6.7% 1240 untranslated, 0 fuzzy
ja_JP: 0/1329 0.0% 1329 untranslated, 0 fuzzy
ja: 0/1329 0.0% 1329 untranslated, 0 fuzzy
kn: 243/1329 18.3% 1086 untranslated, 0 fuzzy
fa: 0/1329 0.0% 1329 untranslated, 0 fuzzy
pl: 492/1329 37.0% 837 untranslated, 0 fuzzy
pt_BR: 0/1329 0.0% 1329 untranslated, 0 fuzzy
pt: 0/1329 0.0% 1329 untranslated, 0 fuzzy
ru: 162/1329 12.2% 1167 untranslated, 0 fuzzy
es: 1329/1329 100.0% 0 untranslated, 0 fuzzy
sv: 0/1329 0.0% 1329 untranslated, 0 fuzzy
uk: 1329/1329 100.0% 0 untranslated, 0 fuzzy
|
|
|
|
|
|
|
| |
Our LINGUAS file and the set of po files have diverged from what's on
Transifex. We should update the LINGUAS file to match the set of
translations on Transifex and add po files currently on Transifex but
not in our git repo to our git repo.
|
|
|
|
|
|
|
|
|
| |
dns.py at line 976 has an invalid i18n string and cannot be processed
during message extraction causing message catalog generation to fail.
The format parameters are trapped inside the i18n string. Also it's
not necessary to promote the i18n string literal to unicode via the u
prefix because the _() function returns unicode.
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1549
https://fedorahosted.org/freeipa/ticket/1550
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1571
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We have a larger goal of replacing all DN creation via string
formatting/concatenation with DN object operations because string
operations are not a safe way to form a DN nor to compare a DN. This
work needs to be broken into smaller chunks for easier review and
testing.
Addressing the unit tests first makes sense because we don't want to
be modifying both the core code and the tests used to verify the core
code simultaneously. If we modify the unittests first with existing
core code and no regressions are found then we can move on to
modifying parts of the core code with the belief the unittests can
validate the changes in the core code. Also by doing the unittests
first we also help to validate the DN objects are working correctly
(although they do have an extensive unittest).
The fundamental changes are:
* replace string substitution & concatenation with DN object
constructor
* when comparing dn's the comparision is done after promotion
to a DN object, then two DN objects are compared
* when a list of string dn's are to be compared a new list is
formed where each string dn is replaced by a DN object
* because the unittest framework accepts a complex data structure of
expected values where dn's are represeted as strings the unittest
needs to express the expected value of a dn as a callable object
(e.g. a lambda expression) which promotes the dn string to a DN
object in order to do the comparision.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The DN unittest was lacking a test for i18n. The unittest was
updated to store "Hello" in Arabic with both utf-8 and unicode
and verify the values could be properly retrieved and converted
to dn string syntax.
During the testing a few problems were discovered and corrected.
* passing in utf-8 caused an ASCII decode error becuase of Python's
silly default encoding of ASCII. The fix was to explictly use
the utf-8 codec.
* there were a couple of places where encode/decode were not
called correctly.
* the internal attr and value members of the AVA class were renamed
to explicitly show they are stored as unicode.
Of course the unittest was updated as well.
|
|
|
|
| |
Add dn.insert() and update unittest
|
|
|
|
|
|
|
| |
The IPA.combobox_widget has been modified to use the 'change' event
to capture the selected value from the drop-down list.
Ticket #1654
|
|
|
|
|
|
|
| |
The IPA.user_status_widget has been modified to show/hide the link for
activating/deactivating users according to the attributelevelrights.
Ticket #1625
|
|
|
|
|
|
|
| |
The browser configuration pages have been modified to improve the
content and appearance.
Ticket #1624
|
|
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1597
https://fedorahosted.org/freeipa/ticket/1592
Added option to show multiple errors in error dialog.
|
| |
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1632
|
|
|
|
|
|
|
| |
The panel for selection buttons (i.e. ">>" and "<<") has been re-
positioned to avoid being covered by the adder-dialog-right panel.
Ticket #1626
|
|
|
|
|
|
|
|
| |
The general link style defined in ipa.css was overriden by a more
specific rule in jquery-ui.css. So the style has been modified to
include the more specific rule.
Ticket #1623
|
|
|
|
|
|
|
|
|
|
|
|
| |
Pull the new translations for Spanish (es) and Ukrainian (uk)
Update the LINGUAS file to add comment showing the friendly
name for the language abbreviation.
The make target msg-stats which produces a report about the state
of the translations no longer maintained it's column alignment
due to larger numbers so the formating was tweaked to maintain
column alignment.
|
|
|
|
|
|
|
| |
Bump minimal pki-ca version in spec file to get fix for ipa
cert-request command.
https://fedorahosted.org/freeipa/ticket/1578
|
|
|
|
|
|
|
|
|
| |
Bump minimal 389-ds-base version in spec file to get in recent
Directory Server bug fixes.
https://fedorahosted.org/freeipa/ticket/1513
https://fedorahosted.org/freeipa/ticket/1525
https://fedorahosted.org/freeipa/ticket/1552
|
|
|
|
|
|
|
|
| |
Enable GSSAPI credentials delegation in xmlrpc-c/curl to fix client
enrollment. The unconditional GSSAPI was previously dropped from
curl because of CVE-2011-2192.
https://fedorahosted.org/freeipa/ticket/1452
|
|
|
|
|
|
| |
The 3rd level tabs were partially covered by the content panel, so
only the top portion can be clicked. The content panel has been
repositioned to avoid the problem.
|
|
|
|
|
|
|
| |
Some of the images that were previously deleted are actually needed
by ipa_error.css and ipa_migration.css, so they have been restored.
Ticket #1564
|
|
|
|
|
|
|
|
|
|
| |
As network configuration file is created as temporary file, it has stricter permissions than
we need for the target system configuration file. Ensure permissions are properly reset before
installing file.
If permissions are not re-set, system may have no networking enabled after reboot.
https://fedorahosted.org/freeipa/ticket/1606
|
|
|
|
|
|
|
| |
The DNS zone adder dialog has been modified to use radio buttons to
select whether to enter a zone name or a reverse zone IP network.
Ticket #1575
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The host adder dialog has been modified to show separate fields for
hostname and DNS zone. The hostname is a text field and the DNS zone
is an editable drop-down list. The fields will have the following
behavior:
- If the user types a dot into the hostname field, the cursor will
automatically move into the DNS zone field.
- If the user pastes an FQDN into the hostname field, the value will
automatically be split into hostname and DNS zone.
- If the user selects a value from the drop-down list, it will only
change the DNS zone, not the hostname.
Ticket #1457
|
|
|
|
|
|
|
|
|
|
|
| |
The IE does not resend the request body during negotiation, so after
after a successful authentication the server could not find the JSON
request to parse.
The Web UI has been modified to detect this error and resend the
initialization request.
Ticket #1540
|