| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
The logging level for these messages was decreaed so that they
do not show up in ipa-advise output.
Reset the log level to INFO and configure ipa-advise to not display
INFO messages from xmlclient by default.
Partially reverts commit efe5a96725d3ddcd05b03a1ca9df5597eee693be
https://fedorahosted.org/freeipa/ticket/4135
Reviewed-By: Tomáš Babej <tbabej@redhat.com>
|
| |
|
|
|
|
|
|
|
| |
root_ssh_key_filename
Expand paths beginning with a tilde, such as the default ~/.ssh/id_rsa,
to the home directory.
https://fedorahosted.org/freeipa/ticket/4115
|
| |
|
|
|
|
|
|
|
|
|
| |
When ipa-lockout plugin is started during FreeIPA server installation,
the default realm may not be available and plugin should then not end
with failure.
Similarly to other plugins, start in degraded mode in this situation.
Operation is fully restored during the final services restart.
https://fedorahosted.org/freeipa/ticket/4085
|
| |
|
|
|
|
|
|
|
|
| |
krbPwdPolicyReference is no longer filled default users. Instead, plugins
fallback to hardcoded global policy reference.
Fix ipa-lockout plugin to fallback to it instead of failing to apply
the policy.
https://fedorahosted.org/freeipa/ticket/4085
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/4139
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/4139
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/4139
|
| |
|
|
| |
Tested-by: Timo Aaltonen <tjaalton@ubuntu.com>
|
| |
|
|
|
|
|
|
|
| |
The working directory will be provided directly
by bind-dyndb-ldap package.
This partially reverts commit 689382dc833e687d30349b10a8fd7dc740d54d08.
https://fedorahosted.org/freeipa/ticket/3967
|
| |
|
|
|
|
| |
This drastically improves performance of retro changelog trimming.
https://fedorahosted.org/freeipa/ticket/3967
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/4094
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/4094
|
| | |
|
| |
|
|
| |
Fixes https://fedorahosted.org/freeipa/ticket/4116
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The checks for existing host and existing replication agreement
set a flag that caused an exit() if any of them failed.
Between these checks there was an unrelated check, DNS resolution.
If the host and DNS checks both failed, this made it look like
the DNS check was the cause of failed install. Especially if the user
ignored the DNS check in unattended mode, the output was confusing.
Remove the flag and fail directly.
Do the replication agreement check first; fixing this with
ipa-replica-manage del will also remove the host entry.
Also, use the logger for error messages so they appear in the log
file as well as on the console.
https://fedorahosted.org/freeipa/ticket/3889
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/2937
|
| |
|
|
|
|
|
|
|
| |
The two classes had very similar __call__ methods, but the JSON
server lacked error handling.
Create a common class for the __call__ method.
https://fedorahosted.org/freeipa/ticket/4069
|
| |
|
|
|
|
|
|
| |
Use "kdestroy -A" command to destroy all CCACHEs, both the primary
and the non-primary ones to make sure that the non-primary ones are
not used later.
https://fedorahosted.org/freeipa/ticket/4084
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Stock httpd no longer uses systemd EnvironmentFile option which is
making FreeIPA's KRB5CCNAME setting ineffective. This can lead in hard
to debug problems during subsequent ipa-server-install's where HTTP
may use a stale CCACHE in the default kernel keyring CCACHE.
Avoid forcing custom CCACHE and switch to system one, just make sure
that it is properly cleaned by kdestroy run as "apache" user during
FreeIPA server installation process.
https://fedorahosted.org/freeipa/ticket/4084
|
| |
|
|
|
|
|
|
| |
Run function can now run the specified command as different user by
setting the both real and effective UID and GID for executed process.
Add both the missing run function attribute doc strings as well as
a doc string for the runas attribute.
|
| |
|
|
|
|
|
| |
LDAP protocol doesn't allow deleting non-leaf entries. One needs to
remove all leaves first before removing the tree node.
https://fedorahosted.org/freeipa/ticket/4126
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Add Web UI counterpart of following CLI commands:
* trust-fetch-domains Refresh list of the domains associated with the trust
* trustdomain-del Remove infromation about the domain associated with the trust.
* trustdomain-disable Disable use of IPA resources by the domain of the trust
* trustdomain-enable Allow use of IPA resources by the domain of the trust
* trustdomain-find Search domains of the trust
https://fedorahosted.org/freeipa/ticket/4119
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This commit changes how fonts are used.
- remove usage of bundled fonts and only system fonts are used instead
- by using alias in httpd conf
- by using local("Font Name") directive in font-face
- removed usage of overpass font
- redefined Open Sans font-face declarations. Note: upstream is doing the
same change so we will be fine on upgrade.
- introduce variable.less for variable definitions and overrides. This file
will be very useful when we upgrade to newer RCUE so we will be able to
redefine their and bootstrap's variables.
Fixes: https://fedorahosted.org/freeipa/ticket/2861
|
| | |
|
| | |
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/4018
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/2811
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
| |
https://fedorahosted.org/freeipa/ticket/3904
|
| |
|
|
|
|
| |
as well
https://fedorahosted.org/freeipa/ticket/3904
|
