| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
If an option is not selectable from the action panel, hide it until it is selectable
addresses https://fedorahosted.org/freeipa/ticket/747
|
|
|
|
|
|
|
| |
If the pkey is null, send an empty array.
If the pkey is not null, send and array of length 1 with the pkey in it.
Addresses: https://fedorahosted.org/freeipa/ticket/767
|
|
|
|
| |
following from first patch: 1 primary key set in span as opposed to appended, so it only appears once. 2. call hide for the network activity icon only in success or failure functions, not multiple times
|
| |
|
|
|
|
| |
ticket 763
|
|
|
|
|
|
|
|
|
| |
Don't allow the time limit to be set in the API. Also add a failsafe
in the ldap driver because such bad things happen if this value is 0.
I think it literally spends 0 time on the request and just returns
immediately.
ticket 752
|
|
|
|
|
|
| |
converting function of the form ipa_<name> to IPA.<name> to remove them from the global namespace.
https://fedorahosted.org/freeipa/ticket/212
|
|
|
|
|
| |
The StrEnum class has been modified to accept str value and convert
it into unicode. This is to fix encoding issue on F14.
|
|
|
|
|
| |
The <li> tag used for status icon has been replaced with <div>
tag shaped like a circle. The size can be adjusted using CSS.
|
|
|
|
| |
Static viewing was broken due to recent hbac changes.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The labels for the following fields in Host details page have been
changed:
- fqdn: Fully Qualified Host Name
- serverhostname: Host Name
The ipa_details_field_create_input() and _ipa_create_text_input()
has been converted into methods in ipa_details_field class. The code
has been modified to display read-only fields as labels instead
of disabled text fields.
The attributelevelrights in host test data files have been updated.
|
| |
|
| |
|
| |
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/730
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/432
|
|
|
|
|
|
|
| |
This patch increases robustness in PRE MOD password SLAPI module
by ensuring that an uninitialized pointer is not dereferenced.
https://fedorahosted.org/freeipa/ticket/719
|
|
|
|
|
|
|
|
| |
Omiting return value of calloc in ipa_pwd_extop.c could lead to
memory access issues when memory is full. This patch adds return
value check.
https://fedorahosted.org/freeipa/ticket/717
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/742
|
|
|
|
|
|
|
| |
This patch fixes a situation where an uninitialized pointer
is passed to free().
https://fedorahosted.org/freeipa/ticket/713
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
krb5_get_default_realm() and asprintf() return values were ignored.
This could lead to unhandled error issues or memory access
issues.
This patch adds return value checks to all such functions.
As a consequence, one new return value has been added to man page.
https://fedorahosted.org/freeipa/ticket/720
|
|
|
|
|
|
|
|
|
|
|
|
| |
krb5_init_context return value was not checked. This could lead
to unhandled error issues.
This patch moves the Kerberos context initialization to the
branch where it is needed and handles the error value in a way
that allows program exit in a standard way deallocating all
resources.
https://fedorahosted.org/freeipa/ticket/721
|
|
|
|
|
|
|
| |
Fix "--realm" parameter processing in ipa-rmkeytab. Also make sure
that memory allocated in this process is also freed.
https://fedorahosted.org/freeipa/ticket/711
|
|
|
|
|
|
|
|
| |
In some cases recently freed memory was used/freed again. This
patch introduces more consistency between functions
join_ldap/join_krb5 when dealing with affected variables.
https://fedorahosted.org/freeipa/ticket/709
|
|
|
|
| |
This was removed in several places where it should still be visible
|
|
|
|
|
|
| |
A section has been added to the SUDO command details page for managing
the association with SUDO command groups. New test data has been added
as well.
|
|
|
|
|
|
| |
All references to hbac in the UI have been replaced with hbacrule.
This is to match the hbacrule plugin. The test data and templates
have been renamed as well.
|
|
|
|
|
|
|
|
| |
The table widget now can be enabled/disabled. When disabled, the
checkboxes and links/buttons are grayed out and non functional.
The radio buttons in HBAC and SUDO details page have been modified
to enable/disable the corresponding tables.
|
|
|
|
|
|
|
| |
The radio buttons under the Run Commands section in the SUDO details
page have been changed from allow/deny/specified into all/specified,
and moved under the Allow commands subsection, matching the correct
usage of the cmdcategory attribute.
|
|
|
|
|
|
|
|
|
|
|
| |
The output problem was a missing label for failed managedby.
This also fixes a call to print_entry that was missing the flags argument.
Add a flag to specify whether a group can be a member of itself, defaulting
to False.
ticket 708
|
|
|
|
|
|
|
|
|
| |
Without this it is possible to prepare a replica for a host that doesn't
exist in DNS. The result when this replica file is installed is that
replication will fail because the master won't be able to communicate
to the replica by name.
ticket 680
|
| |
|
|
|
|
| |
ticket 739
|
|
|
|
|
|
|
|
|
| |
Flag parameters are always autofill by definition, causing unexpected
search results. This patch retypes them to Bool for search commands,
so that users have to/can enter the desired value manually.
Ticket #689
Ticket #701
|
|
|
|
| |
minor tweak to the header and gradient for the header
|
|
|
|
| |
ticket 314
|
|
|
|
| |
ticket 734
|
|
|
|
|
|
|
|
|
|
|
|
| |
We collected the failures but didn't report it back. This changes the
API of most delete commands so rather than returning a boolean it returns
a dict with the only current key as failed.
This also adds a new parameter flag, suppress_empty. This will try to
not print values that are empty if included. This makes the output of
the delete commands a bit prettier.
ticket 687
|
|
|
|
|
|
|
|
|
|
|
| |
It is possible to create an ACI with attributes and then try to set that
to None via a mod command later. We need to catch this and raise an exception.
If all attributes are set to None in an aci then the attr target is removed
from the ACI. This could result in an illegal ACI if there are no other
targets. Having no targets is a legal state, just not a legal final state.
ticket 647
|
|
|
|
|
| |
fixes issues from
https://fedorahosted.org/freeipa/ticket/507
|
|
|
|
| |
tweak the tabs padding
|
| |
|
|
|
|
|
| |
self service defaults to write permission, the only acceptable one.
By removing the checkbox, we stop sending invalid permissions
|
| |
|
| |
|
|
|
|
|
| |
Not sure if this is an openldap-client, pem-nss or python-ldap problem yet
but the installation is failing.
|
| |
|