summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Add LDAP schema for certificate store.Jan Cholasta2014-07-304-0/+11
* Add LDAP schema for wrapped cryptographic keys.Jan Cholasta2014-07-301-0/+7
* Fix trust flags in HTTP and DS NSS databases.Jan Cholasta2014-07-305-17/+54
* Allow specifying trust flags in NSSDatabase and CertDB method trust_root_cert.Jan Cholasta2014-07-301-4/+6
* Remove certificate "External CA cert" from /etc/pki/nssdb on client uninstall.Jan Cholasta2014-07-301-3/+7
* Do not treat the IPA RA cert as CA cert in DS NSS database.Jan Cholasta2014-07-302-10/+27
* Allow IPA master hosts to read and update IPA master information.Jan Cholasta2014-07-302-0/+42
* Check that renewed certificates coming from LDAP are actually renewed.Jan Cholasta2014-07-301-6/+32
* Do not use ldapi in certificate renewal scripts.Jan Cholasta2014-07-304-82/+107
* Remove master ACIs when deleting a replica.Jan Cholasta2014-07-301-0/+43
* Pick new CA renewal master when deleting a replica.Jan Cholasta2014-07-302-3/+20
* Load sysupgrade.state on demand.Jan Cholasta2014-07-301-1/+9
* Alert user when externally signed CA is about to expire.Jan Cholasta2014-07-301-1/+6
* Add CA certificate management tool ipa-cacert-manage.Jan Cholasta2014-07-306-2/+376
* Add permissions for CA certificate renewal.Jan Cholasta2014-07-302-0/+27
* Add method for verifying CA certificates to NSSDatabase.Jan Cholasta2014-07-301-0/+23
* Move external cert validation from ipa-server-install to installutils.Jan Cholasta2014-07-302-42/+53
* Provide additional functions to ipapython.certmonger.Jan Cholasta2014-07-301-0/+28
* Add method for setting CA renewal master in LDAP to CAInstance.Jan Cholasta2014-07-301-3/+38
* Track CA certificate using dogtag-ipa-ca-renew-agent.Jan Cholasta2014-07-302-9/+30
* Automatically update CA certificate in LDAP on renewal.Jan Cholasta2014-07-301-0/+28
* Allow IPA master hosts to update CA certificate in LDAP.Jan Cholasta2014-07-301-0/+2
* Support CA certificate renewal in dogtag-ipa-ca-renew-agent.Jan Cholasta2014-07-301-2/+47
* Add function for checking if certificate is self-signed to ipalib.x509.Jan Cholasta2014-07-301-0/+6
* test_ipagetkeytab: Fix assertion in negative testPetr Viktorin2014-07-301-4/+2
* Do not crash client basedn discovery when SSF not metMartin Kosek2014-07-291-4/+4
* Verify otptoken timespan is validDavid Kupka2014-07-291-1/+30
* test group: remove group from protected group.David Kupka2014-07-291-0/+67
* Fix group-remove-member crash when group is removed from a protected groupDavid Kupka2014-07-291-1/+1
* Exclude attributelevelrights from --raw result processing in baseldap.Jan Cholasta2014-07-291-3/+7
* Check if /root/ipa.csr exists when installing server with external CA.Jan Cholasta2014-07-281-2/+14
* FIX: named_enable_dnssec should verify if DNS is installedMartin Basti2014-07-281-0/+5
* Fix DNS upgrade plugin should check if DNS container existsMartin Basti2014-07-281-0/+4
* Update API.txtPetr Viktorin2014-07-281-2/+2
* ipalib: idrange: Make non-implemented range types fail the validationTomas Babej2014-07-281-2/+3
* webui: add bounce url to reset_password.htmlPetr Vobornik2014-07-281-0/+24
* webui: remove remaining action-button-disabled occurrencesPetr Vobornik2014-07-282-39/+5
* webui: replace action_buttons with action_widgetPetr Vobornik2014-07-285-133/+88
* webui: detach facet nodesPetr Vobornik2014-07-282-0/+10
* webui: internet explorer fixesPetr Vobornik2014-07-282-2/+8
* webui: fix nested items creation in dropdown listPetr Vobornik2014-07-281-6/+8
* webui: support wildcard attribute level rightsPetr Vobornik2014-07-281-9/+15
* baseldap: return 'none' attr level right as unicode stringPetr Vobornik2014-07-251-1/+1
* Add TOTP watermark supportNathaniel McCallum2014-07-252-74/+88
* Allow hashed passwords in DSMartin Kosek2014-07-252-2/+7
* Fix ipa-getkeytab for pre-4.0 serversNathaniel McCallum2014-07-251-17/+21
* Improve password validity check.David Kupka2014-07-241-4/+31
* Do not require dogtag-pki-server-themeMartin Kosek2014-07-241-1/+0
* baseldap: Remove redundant search from LDAPAddReverseMember and LDAPRemoveRev...Tomas Babej2014-07-231-6/+0
* Always record that pkicreate has been executed.David Kupka2014-07-221-3/+10