summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* optional uidAdam Young2011-06-274-1/+29
| | | | Make the uid field optional
* Fixed DNS records page title.Endi S. Dewata2011-06-271-0/+1
| | | | | The DNS records are presented as a facet in the DNS zone details page, so the page title should say DNS Zone.
* identify target as section for permissionsAdam Young2011-06-271-0/+1
|
* Fixed entity labels.Endi S. Dewata2011-06-2718-427/+65
| | | | | | | | | | | | | | | | The entity labels in the following locations have been fixed: - search facet title: plural - details facet title: singular - association facet title: singular - breadcrumb: plural - adder dialog title: singular - deleter dialog title: plural Some entity labels have been changed into the correct plural form. Unused file install/ui/test/data/i18n_messages.json has been removed. Ticket #1249 Ticket #1387
* Added singular entity labels.Endi S. Dewata2011-06-2725-4/+57
| | | | | | | | | | | | | | | A new attribute label_singular has been added to all entities which contains the singular form of the entity label in lower cases except for acronyms (e.g. HBAC) or proper nouns (e.g. Kerberos). In the Web UI, this label can be capitalized using CSS text-transform. The existing 'label' attribute is intentionally left unchanged due to inconsistencies in the current values. It contains mostly the plural form of capitalized entity label, but some are singular. Also, it seems currently there is no comparable capitalization method on the server-side. So more work is needed before the label can be changed. Ticket #1249
* oneliner correct typo in ipasudorunas_groupJr Aquino2011-06-261-1/+1
| | | | https://fedorahosted.org/freeipa/ticket/1326
* Verify that the hostname is fully-qualified before accessing the service ↵Jan Cholasta2011-06-242-8/+10
| | | | | | | | | information in ipactl. Fail gracefully if the supplied hostname isn't fully-qualified in ipa-server-install. ticket 1035
* Slight performance improvement by not doing some checking in production modeRob Crittenden2011-06-231-6/+12
| | | | | | These changes save a few hundred ms but every little bit helps. ticket 1023
* Added record count into association facet tabs.Endi S. Dewata2011-06-245-71/+88
| | | | | | The details and association facets have been modified to show the number of records in each association in the corresponding facet tab. Ticket #1386
* Make dogtag an optional (and default un-) installed component in a replica.Rob Crittenden2011-06-2312-133/+437
| | | | | | | | | | | | | | A dogtag replica file is created as usual. When the replica is installed dogtag is optional and not installed by default. Adding the --setup-ca option will configure it when the replica is installed. A new tool ipa-ca-install will configure dogtag if it wasn't configured when the replica was initially installed. This moves a fair bit of code out of ipa-replica-install into installutils and cainstance to avoid duplication. https://fedorahosted.org/freeipa/ticket/1251
* automountkey detailsAdam Young2011-06-234-16/+102
| | | | | | Adds hooks for navigation to the show page due to the unusual way that keys are accessed. https://fedorahosted.org/freeipa/ticket/1257
* Let the framework be able to override the hostname.Rob Crittenden2011-06-238-24/+32
| | | | | | | | | | | | | | | | | | The hostname is passed in during the server installation. We should use this hostname for the resulting server as well. It was being discarded and we always used the system hostname value. Important changes: - configure ipa_hostname in sssd on masters - set PKI_HOSTNAME so the hostname is passed to dogtag installer - set the hostname when doing ldapi binds This also reorders some things in the dogtag installer to eliminate an unnecessary restart. We were restarting the service twice in a row with very little time in between and this could result in a slew of reported errors, though the server installed ok. ticket 1052
* Added navigation breadcrumb.Endi S. Dewata2011-06-237-70/+86
| | | | | | | | Navigation breadcrumb has been added to the facet header. The breadcrumb will appear on details, association, and automount facets. Ticket #1323
* Converted entity header into facet header.Endi S. Dewata2011-06-2312-500/+348
| | | | | | | | | | | The content and the size of entity header changes depending on the facet being displayed, so the entity header has been converted into a facet header to allow better control via CSS. The DNS record facet has been updated to use the same styling and support scrolling. To help styling and testing, all buttons have been assigned a name.
* Facet icon swap and tab sizingkylebaker2011-06-234-5/+35
|
* Tab and spacing on listkylebaker2011-06-235-10/+151
|
* Update test_role_plugin test to include a comma in a privilegeJohn Dennis2011-06-221-6/+10
| | | | | | | | | | | | | | | | | | | | | | Introduce a comma into a privilege name to assure we can handle commas. Commas must be escaped for some parameters, add escape_comma() utility and invoke it for the necessary parameters. Utilize a DN object to properly construct a DN and most importantly to allow equality testing beween the DN we expect and the one returned. This is necessary because a DN can be encoded according to different encoding syntaxes all of which are valid. DN objects always decode from their input. DN objects can test for equality between DN's without being affected by DN encoding. Add a equality callback for the dn in the expected dict. When the test framework tests for equality between the expected value and the returned value it will call back into a function we provide which will convert the returned dn into a DN object. An equality test is then performed between two DN objects. This is the only way to properly compare two dn's.
* Use DN class in get_primary_key_from_dn to return decoded valueJohn Dennis2011-06-221-1/+4
|
* Add backslash escape support for cvs readerJohn Dennis2011-06-222-2/+4
|
* assert_deepequal supports callback for equality testingJohn Dennis2011-06-221-1/+10
|
* Module for DN objects plus unit testJohn Dennis2011-06-222-0/+2042
|
* Fix IPA install for secure umaskMartin Kosek2011-06-214-41/+60
| | | | | | | | Make sure that IPA can be installed with root umask set to secure value 077. ipa-server-install was failing in DS configuration phase when dirsrv tried to read boot.ldif created during installation. https://fedorahosted.org/freeipa/ticket/1282
* Update translation filesRob Crittenden2011-06-2118-18126/+110008
|
* Make data type of certificates more obvious/predictable internally.Rob Crittenden2011-06-2113-182/+184
| | | | | | | | | | | | | | | | | | | For the most part certificates will be treated as being in DER format. When we load a certificate we will generally accept it in any format but will convert it to DER before proceeding in normalize_certificate(). This also re-arranges a bit of code to pull some certificate-specific functions out of ipalib/plugins/service.py into ipalib/x509.py. This also tries to use variable names to indicate what format the certificate is in at any given point: dercert: DER cert: PEM nsscert: a python-nss Certificate object rawcert: unknown format ticket 32
* tooltips for host addAdam Young2011-06-222-2/+4
| | | | | https://fedorahosted.org/freeipa/ticket/1363 https://fedorahosted.org/freeipa/ticket/1361
* Do lazy LDAP schema retrieval in json handler.Rob Crittenden2011-06-211-0/+1
| | | | | | | It was possible to get to this point without a schema if the first handled request resulted in a Kerberos error. https://fedorahosted.org/freeipa/ticket/1354
* Fixed problem with navigation tabs on reload.Endi S. Dewata2011-06-211-6/+8
| | | | | | | The navigation have been fixed to show the correct active tabs after browser reload. Ticket #1362
* The IP address provided to ipa-server-install must be localRob Crittenden2011-06-202-3/+6
| | | | | | | Compare the configured interfaces with the supplied IP address and optional netmask to determine if the interface is available. https://fedorahosted.org/freeipa/ticket/1175
* On a master configure sssd to only talk to the local master.Rob Crittenden2011-06-211-1/+5
| | | | | | | | Otherwise it is possible for sssd to pick a different master to communicate with via the DNS SRV records and if the remote master goes down the local one will have problems as well. ticket https://fedorahosted.org/freeipa/ticket/1187
* entity select for password policy http://fedorahosted.org/freeipa/ticket/1110Adam Young2011-06-211-1/+8
|
* ipaddress for host addAdam Young2011-06-204-23/+58
| | | | updated label triggered an API change
* editable entity_selectAdam Young2011-06-202-3/+62
| | | | | | | | jsl fixes https://fedorahosted.org/freeipa/ticket/1043 remove redundant call to focus.
* no redirect on unknown error If the error name is indicates a server wide ↵Adam Young2011-06-201-9/+22
| | | | | | | | error, do not attempt to redirect. this variation has a whitelist of errors on which to redirect. https://fedorahosted.org/freeipa/ticket/1281
* DNS installation fails when domain and host domain mismatchMartin Kosek2011-06-191-0/+9
| | | | | | | | Create DNS domain for IPA server hostname first so that it's forward record can be added. This results in 2 forward DNS zones created when server hostname doesn't equal server domain. https://fedorahosted.org/freeipa/ticket/1194
* entity select undoAdam Young2011-06-201-2/+2
| | | | | | | Tests for dirty after the RPC call has completed and the select has updated Passes the original value to the RPC completion, so it isn't lost upon RPC completion https://fedorahosted.org/freeipa/ticket/1340
* Removed FreeWay font files.Endi S. Dewata2011-06-206-22/+64
| | | | | The CSS files in install/html and install/migration have been modified to use the Overpass font.
* service host entity select Use the entity select widget for add serviceAdam Young2011-06-201-2/+3
|
* hide automount tabs.Adam Young2011-06-202-5/+7
| | | | | | the tabs are required for natigation, but they should not be visible, as the breadcrub provides the navigation for them instead. Moved the automount tabs up one level so that it uses the two level style
* entity select widget for manager https://fedorahosted.org/freeipa/ticket/1149Adam Young2011-06-201-2/+9
|
* Improve IP address handling in the host-add command.Jan Cholasta2011-06-191-15/+36
| | | | | | | IP addresses are more strictly checked. Netmasks can be specified and are used in DNS PTR record creation. ticket 1234
* Multi-process build problemsMartin Kosek2011-06-192-3/+3
| | | | | | | | Fix a problem when a target missed a version-update requirement. This caused build problems, especially in a parallel build environment. https://fedorahosted.org/freeipa/ticket/1215
* Improve IP address handling in IPA option parserMartin Kosek2011-06-195-10/+15
| | | | | | | | | | | Implements a way to pass match_local and parse_netmask parameters to IP option checker. Now, there is just one common option type "ip" with new optional attributes "ip_local" and "ip_netmask" which can be used to pass IP address validation parameters. https://fedorahosted.org/freeipa/ticket/1333
* Storing page number in URL.Endi S. Dewata2011-06-173-57/+85
| | | | | | | | The association facet has been modified to store the current page number in the browser's URL. This way page changes are stored in browser's history allowing the back button to work properly. Ticket #1264
* Require an imported certificate's issuer to match our issuer.Rob Crittenden2011-06-167-37/+228
| | | | | | | | | | The goal is to not import foreign certificates. This caused a bunch of tests to fail because we had a hardcoded server certificate. Instead a developer will need to run make-testcert to create a server certificate generated by the local CA to test against. ticket 1134
* Don't add empty tuple to entry_attrs['externalhost']Jr Aquino2011-06-161-1/+2
| | | | https://fedorahosted.org/freeipa/ticket/1339
* Raise DuplicateEntry Error when adding a duplicate sudo optionJr Aquino2011-06-165-31/+62
| | | | | | | | | | | | https://fedorahosted.org/freeipa/ticket/1276 https://fedorahosted.org/freeipa/ticket/1277 https://fedorahosted.org/freeipa/ticket/1308 Added new Exception: AttrValueNotFound Fixed XML Test for Sudorule remove_option 1276 (Raise AttrValueNotFound when trying to remove a non-existent option from Sudo rule) 1277 (Raise DuplicateEntry Error when adding a duplicate sudo option) 1308 (Make sudooption a required option for sudorule_remove_option)
* Fix doc for sudorule runasuser commandsMartin Kosek2011-06-171-2/+2
| | | | https://fedorahosted.org/freeipa/ticket/1324
* Merged direct and indirect association facetsEndi S. Dewata2011-06-164-11/+93
| | | | | | | | The direct and indirect associations are now displayed in the same facet. The type of association to be displayed can be selected using radio buttons. Ticket #1338
* test dirty onchangeAdam Young2011-06-162-9/+9
| | | | | | instead of blindly setting dirty, check if the filed has a different value than it originally did. https://fedorahosted.org/freeipa/ticket/1337
* test dirty multivalue test the multivalue widgets for changes before showing ↵Adam Young2011-06-161-1/+22
| | | | the undo link. https://fedorahosted.org/freeipa/ticket/1337