summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Make data type of certificates more obvious/predictable internally.Rob Crittenden2011-06-2113-182/+184
| | | | | | | | | | | | | | | | | | | For the most part certificates will be treated as being in DER format. When we load a certificate we will generally accept it in any format but will convert it to DER before proceeding in normalize_certificate(). This also re-arranges a bit of code to pull some certificate-specific functions out of ipalib/plugins/service.py into ipalib/x509.py. This also tries to use variable names to indicate what format the certificate is in at any given point: dercert: DER cert: PEM nsscert: a python-nss Certificate object rawcert: unknown format ticket 32
* tooltips for host addAdam Young2011-06-222-2/+4
| | | | | https://fedorahosted.org/freeipa/ticket/1363 https://fedorahosted.org/freeipa/ticket/1361
* Do lazy LDAP schema retrieval in json handler.Rob Crittenden2011-06-211-0/+1
| | | | | | | It was possible to get to this point without a schema if the first handled request resulted in a Kerberos error. https://fedorahosted.org/freeipa/ticket/1354
* Fixed problem with navigation tabs on reload.Endi S. Dewata2011-06-211-6/+8
| | | | | | | The navigation have been fixed to show the correct active tabs after browser reload. Ticket #1362
* The IP address provided to ipa-server-install must be localRob Crittenden2011-06-202-3/+6
| | | | | | | Compare the configured interfaces with the supplied IP address and optional netmask to determine if the interface is available. https://fedorahosted.org/freeipa/ticket/1175
* On a master configure sssd to only talk to the local master.Rob Crittenden2011-06-211-1/+5
| | | | | | | | Otherwise it is possible for sssd to pick a different master to communicate with via the DNS SRV records and if the remote master goes down the local one will have problems as well. ticket https://fedorahosted.org/freeipa/ticket/1187
* entity select for password policy http://fedorahosted.org/freeipa/ticket/1110Adam Young2011-06-211-1/+8
|
* ipaddress for host addAdam Young2011-06-204-23/+58
| | | | updated label triggered an API change
* editable entity_selectAdam Young2011-06-202-3/+62
| | | | | | | | jsl fixes https://fedorahosted.org/freeipa/ticket/1043 remove redundant call to focus.
* no redirect on unknown error If the error name is indicates a server wide ↵Adam Young2011-06-201-9/+22
| | | | | | | | error, do not attempt to redirect. this variation has a whitelist of errors on which to redirect. https://fedorahosted.org/freeipa/ticket/1281
* DNS installation fails when domain and host domain mismatchMartin Kosek2011-06-191-0/+9
| | | | | | | | Create DNS domain for IPA server hostname first so that it's forward record can be added. This results in 2 forward DNS zones created when server hostname doesn't equal server domain. https://fedorahosted.org/freeipa/ticket/1194
* entity select undoAdam Young2011-06-201-2/+2
| | | | | | | Tests for dirty after the RPC call has completed and the select has updated Passes the original value to the RPC completion, so it isn't lost upon RPC completion https://fedorahosted.org/freeipa/ticket/1340
* Removed FreeWay font files.Endi S. Dewata2011-06-206-22/+64
| | | | | The CSS files in install/html and install/migration have been modified to use the Overpass font.
* service host entity select Use the entity select widget for add serviceAdam Young2011-06-201-2/+3
|
* hide automount tabs.Adam Young2011-06-202-5/+7
| | | | | | the tabs are required for natigation, but they should not be visible, as the breadcrub provides the navigation for them instead. Moved the automount tabs up one level so that it uses the two level style
* entity select widget for manager https://fedorahosted.org/freeipa/ticket/1149Adam Young2011-06-201-2/+9
|
* Improve IP address handling in the host-add command.Jan Cholasta2011-06-191-15/+36
| | | | | | | IP addresses are more strictly checked. Netmasks can be specified and are used in DNS PTR record creation. ticket 1234
* Multi-process build problemsMartin Kosek2011-06-192-3/+3
| | | | | | | | Fix a problem when a target missed a version-update requirement. This caused build problems, especially in a parallel build environment. https://fedorahosted.org/freeipa/ticket/1215
* Improve IP address handling in IPA option parserMartin Kosek2011-06-195-10/+15
| | | | | | | | | | | Implements a way to pass match_local and parse_netmask parameters to IP option checker. Now, there is just one common option type "ip" with new optional attributes "ip_local" and "ip_netmask" which can be used to pass IP address validation parameters. https://fedorahosted.org/freeipa/ticket/1333
* Storing page number in URL.Endi S. Dewata2011-06-173-57/+85
| | | | | | | | The association facet has been modified to store the current page number in the browser's URL. This way page changes are stored in browser's history allowing the back button to work properly. Ticket #1264
* Require an imported certificate's issuer to match our issuer.Rob Crittenden2011-06-167-37/+228
| | | | | | | | | | The goal is to not import foreign certificates. This caused a bunch of tests to fail because we had a hardcoded server certificate. Instead a developer will need to run make-testcert to create a server certificate generated by the local CA to test against. ticket 1134
* Don't add empty tuple to entry_attrs['externalhost']Jr Aquino2011-06-161-1/+2
| | | | https://fedorahosted.org/freeipa/ticket/1339
* Raise DuplicateEntry Error when adding a duplicate sudo optionJr Aquino2011-06-165-31/+62
| | | | | | | | | | | | https://fedorahosted.org/freeipa/ticket/1276 https://fedorahosted.org/freeipa/ticket/1277 https://fedorahosted.org/freeipa/ticket/1308 Added new Exception: AttrValueNotFound Fixed XML Test for Sudorule remove_option 1276 (Raise AttrValueNotFound when trying to remove a non-existent option from Sudo rule) 1277 (Raise DuplicateEntry Error when adding a duplicate sudo option) 1308 (Make sudooption a required option for sudorule_remove_option)
* Fix doc for sudorule runasuser commandsMartin Kosek2011-06-171-2/+2
| | | | https://fedorahosted.org/freeipa/ticket/1324
* Merged direct and indirect association facetsEndi S. Dewata2011-06-164-11/+93
| | | | | | | | The direct and indirect associations are now displayed in the same facet. The type of association to be displayed can be selected using radio buttons. Ticket #1338
* test dirty onchangeAdam Young2011-06-162-9/+9
| | | | | | instead of blindly setting dirty, check if the filed has a different value than it originally did. https://fedorahosted.org/freeipa/ticket/1337
* test dirty multivalue test the multivalue widgets for changes before showing ↵Adam Young2011-06-161-1/+22
| | | | the undo link. https://fedorahosted.org/freeipa/ticket/1337
* test dirty textareaAdam Young2011-06-161-1/+1
| | | | runs the testdirty check before setting the undo tag for a textarea
* test for dirtyAdam Young2011-06-161-1/+47
| | | | | | instead of always setting dirty, we do the original test, and then set the flag and show the link. https://fedorahosted.org/freeipa/ticket/1337
* Fixed self-service links.Endi S. Dewata2011-06-1614-177/+98
| | | | | | | | | | | | In self-service mode the user's association facets have been modified such that the entries are not linked since the only available entity is the user entity. A 'link' parameter has been added to IPA.association_facet and IPA.column to control whether to link the entries. The link_handler() method can be used to define how to handle the link. Ticket #1072
* Renamed associate.js to association.js.Endi S. Dewata2011-06-169-8/+8
|
* Fixed paging for indirect members.Endi S. Dewata2011-06-152-69/+1
| | | | | Since ticket #1273 has been fixed, the indirect members can be shown using the regular association facet which supports paging.
* no redirect on searchAdam Young2011-06-152-4/+13
| | | | https://fedorahosted.org/freeipa/ticket/1281
* Fixed build break.Endi S. Dewata2011-06-152-3/+16
| | | | | The Makefile.am freeipa.spec.in have been updated according to the recent file changes.
* Add port 9443 to replica port checkingMartin Kosek2011-06-151-6/+7
| | | | | | | Port 9443 (Agent secure port on PKI-CA) was missing. Additionaly, checked port descriptions case consistency fixed. https://fedorahosted.org/freeipa/ticket/1321
* Missing krbprincipalname when uid is not setMartin Kosek2011-06-151-0/+1
| | | | | | | | When user_add command is executed without uid parameter filled, user account is created without 'krbprincipalname' attribute. This renders the user account unusable. https://fedorahosted.org/freeipa/ticket/1279
* Return an error message when revocation reason 7 is usedRob Crittenden2011-06-151-0/+2
| | | | | | 7 is undefined as a revocation reason. https://fedorahosted.org/freeipa/ticket/1318
* Add message output summary to sudorule del, mod and find.Rob Crittenden2011-06-151-0/+5
| | | | https://fedorahosted.org/freeipa/ticket/1255
* Don't let a JSON error get lost in cascading errors.Rob Crittenden2011-06-151-5/+6
| | | | | | | If a JSON decoding error was found we were still trying to call the XML-RPC function, losing the original error. https://fedorahosted.org/freeipa/ticket/1322
* Add a list of managed hostsMartin Kosek2011-06-152-0/+38
| | | | | | | | Enhance Host plugin to provide not only "Managed By" list but also a list of managed hosts. The new list is generated only when --all option is passed. https://fedorahosted.org/freeipa/ticket/993
* Improve DNS zone creationMartin Kosek2011-06-153-21/+74
| | | | | | | | | | | | | | | When a new DNS zone is being created a local hostname is set as a nameserver of the new zone. However, when the zone is created during ipa-replica-prepare, the the current master/replica doesn't have to be an IPA server with DNS support. This would lead to DNS zones with incorrect NS records as they wouldn't point to a valid name server. Now, a list of all master servers with DNS support is retrieved during DNS zone creation and added as NS records for a new DNS zone. https://fedorahosted.org/freeipa/ticket/1261
* Add ignore lists to migrate-ds commandMartin Kosek2011-06-154-7/+67
| | | | | | | | | | | | | | When user migrates users/groups from an old DS instance, the migration may fail on unsupported object classes and/or relevant LDAP object attributes. This patch implements a support for object class and attribute ignore lists that can be used to suppress these migration issues. Additionally, a redundant "dev/null" file is removed from git repo (originally added in 26b0e8fc9809a4cd9f2f9a2281f0894e2e0f8db2). https://fedorahosted.org/freeipa/ticket/1266
* dns multiple records show multiple records that share the same dnsnameAdam Young2011-06-142-50/+63
|
* List page spacing changeskylebaker2011-06-141-8/+7
|
* Search bar style and positioning changeskylebaker2011-06-1416-25/+1039
|
* Select a server with a CA on it when submitting signing requests.Nalin Dahyabhai2011-06-141-3/+65
| | | | | | | | | | | When the RA is about to submit a signing request to a CA, check if the ca_host is actually a CA. If it isn't, and it isn't the local host, check if the local host is a CA. If that doesn't work, try to select a CA host at random. If there aren't any, just give up and pretend the ca_host is a CA so that we can fail to connect to it, as we would have before. Ticket #1252.
* Display remaining external hosts when removing from sudoruleJr Aquino2011-06-141-2/+2
| | | | | https://fedorahosted.org/freeipa/ticket/1269 https://fedorahosted.org/freeipa/ticket/1270
* Remove automountinformation as part of the DN for automount.Rob Crittenden2011-06-133-24/+79
| | | | | | | | | | | | | | | | To support multiple direct maps we added description to the DN of automount key entries. The downside of this is that to display a key you had to know the information as well, which was rather pointless if that is what you were trying to get. So now both modes are supported. It will first look for just a key in the description and fall back to including automountinformation if it needs to. Multiple direct maps are still supported and for those the info is always required. ticket 1229
* Fixed tab navigation.Endi S. Dewata2011-06-141-0/+2
| | | | | | | | The buttons were previously skipped during tab navigation because they do not have an href attribute. The IPA.button has been fixed to always provide an href attribute. Ticket #983
* Fix indirect member calculationRob Crittenden2011-06-142-47/+271
| | | | | | | | | | | | | | | | | Indirect membership is calculated by looking at each member and pulling all the memberof out of it. What was missing was doing nested searches on any members in that member group. So if group2 was a member of group1 and group3 was a member of group2 we would miss group3 as being an indirect member of group1. I updated the nesting test to do deeper nested testing. I confirmed that this test failed with the old code and works with the new. This also prevents duplicate indirect users and looping on circular membership. ticket https://fedorahosted.org/freeipa/ticket/1273
generated by cgit (git 2.34.1) at 2024-04-19 08:53:22 +0000