summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix output for commands that do not return entries.Pavel Zuna2010-03-262-5/+26
| | | | | | | | | | | | I also changed the default value of the print_all argument in textui.print_entry from False to True. It think it makes more sense this way, because: 1) if order is None, it will still print something 2) if order is not None, it will print what's in order first and then the rest 3) commands that care about the print_all argument have to set it in any case, those that don't care usually want to print everything
* Fix cut-and-paste error in pwpolicy pluginRob Crittenden2010-03-231-2/+2
|
* Do a better query so we can optimize seeing if a cospriority is uniqueRob Crittenden2010-03-231-7/+11
|
* Update Polish and Chinese translationsJohn Dennis2010-03-222-322/+389
|
* update Polish translationsJohn Dennis2010-03-221-83/+886
|
* Use ldap2.make_*dn* methods in pwpolicy plugin.Pavel Zuna2010-03-221-1/+5
| | | | Fixes #572423.
* Add INTERNAL flag to frontend plugins. If set, the plugin won't show in UI.Pavel Zuna2010-03-222-1/+6
|
* Use GSSAPI auth for the ipa-replica-manage list and del commands.Rob Crittenden2010-03-194-5/+76
| | | | | | | | | | | | This creates a new role, replicaadmin, so a non-DM user can do limited management of replication agreements. Note that with cn=config if an unauthorized user performs a search an error is not returned, no entries are returned. This makes it difficult to determine if there are simply no replication agreements or we aren't allowed to see them. Once the ipaldap.py module gets replaced by ldap2 we can use Get Effective Rights to easily tell the difference.
* Raise an error if no modifications were performed in an update.Rob Crittenden2010-03-191-2/+0
| | | | | | | This will alert the user that nothing was done and is handy when used with --attr=''. This can be used to delete a non-required attribute but can be set to any valid attribute, present or not. We should alert the user if they attempt to delete a non-existant value.
* Provide mechanism in ipautil.run() to not log all arguments.Rob Crittenden2010-03-192-2/+44
| | | | | | | This is primarily designed to not log passwords but it could have other uses. 567867
* Add option to enable pam_mkhomedirs in the IPA client installerrcrit2010-03-192-5/+15
|
* Fix the client and client-rpms make targetsrcrit2010-03-192-2/+4
|
* Ensure that the group policy priority is unique.Rob Crittenden2010-03-192-18/+89
| | | | | | We use CoS to determine the order in which group policy is applied. The behavior in CoS is undefined for multiple entries with the same cospriority.
* Better customize the message regarding the CA based on the install options.Rob Crittenden2010-03-191-5/+10
| | | | | | | | | | There are now 3 cases: - Install a dogtag CA and issue server certs using that - Install a selfsign CA and issue server certs using that - Install using either dogtag or selfsign and use the provided PKCS#12 files for the server certs. The installed CA will still be used by the cert plugin to issue any server certs.
* Make CA PKCS#12 location arg for ipa-replica-prepare, default /root/cacert.p12Rob Crittenden2010-03-192-3/+10
| | | | | pki-silent puts a copy of the root CA into /root/tmp-ca.p12. Rename this to /root/cacert.p12.
* Initialize the api so imports work, trust all CAs included in the PKCS#12.Rob Crittenden2010-03-191-1/+9
|
* Fix a number of bugs in the pwpolicy pluginRob Crittenden2010-03-191-8/+22
| | | | | | | | | | This fixes: - Consistent usage of priority vs cospriority in options - Fixes bug introduced with recent patch where global policy couldn't be updated - Doesn't allow cospriority to be removed for groups (#570536) - returns the priority with group policy so it can be displayed - Properly unicode encode group names for display
* Include params in Method.output_paramsRob Crittenden2010-03-191-0/+9
| | | | | | | | Method overrides the Command get_output_params() method and only returns the object params, not anything defined within the method itself. Return those as well so they are displayed in output. Some care needs to be taken to avoid returning duplicate values. In the case of duplicates the value in obj.params wins.
* Catch modifications with no updates and raise an errorRob Crittenden2010-03-172-2/+11
| | | | 569848
* Retrieve the LDAP schema using kerberos credentials.Rob Crittenden2010-03-173-8/+41
| | | | This is required so we can disable anonymous access in 389-ds.
* Update Ukrainian translationsJohn Dennis2010-03-171-26/+208
|
* Handle the case where the DS group exists but the user does notRob Crittenden2010-03-161-0/+9
| | | | | | | | If the group exists but the user doesn't then useradd blows up trying to create the user and group. So test to see if the group exists and if it does pass along the -g argument to useradd. Resolves #502960
* Proper use of set up vs setup (verb vs noun)Rob Crittenden2010-03-161-3/+3
| | | | Resolves #529787
* Fix typo in automount doc message.Rob Crittenden2010-03-162-12/+180
| | | | | | Update the po to pick up this change too. 573979
* Add Ukrainian translationsJohn Dennis2010-03-164-6/+1497
|
* remove .pot target from Makefile.inJohn Dennis2010-03-161-3/+0
| | | | | | We want to manually make the .pot file, we shouldn't have anything in the Makefile which will cause the .pot file to be rebuilt because of dependencies.
* Finish deferred translation mechanismJason Gerard DeRose2010-03-166-41/+560
|
* Update Spanish translationsJohn Dennis2010-03-091-75/+900
|
* Add Chinese Simplified (zh_CN) translationJohn Dennis2010-03-094-0/+1607
|
* Provide more detailed NotFound error messages from baseldap classes.Pavel Zuna2010-03-091-7/+55
|
* localize doc stringsJohn Dennis2010-03-0820-56/+61
| | | | | | | | | | | | A number of doc strings were not localized, wrap them in _(). Some messages were not localized, wrap them in _() Fix a couple of failing tests: The method name in RPC should not be unicode. The doc attribute must use the .msg attribute for comparison. Also clean up imports of _() The import should come from ipalib or ipalib.text, not ugettext from request.
* Don't create /var/log/ipa_error.log since we aren't using TurboGears any more.Rob Crittenden2010-03-081-4/+4
|
* When raising an error about a required attribute, use cli_name not name.Rob Crittenden2010-03-071-1/+1
| | | | name is an LDAP attribute and may not be easily identifiable (e.g. sn).
* Don't calculate min/max lifetime if None is passed in.Rob Crittenden2010-03-071-2/+2
| | | | | | | | None is passed if the option is set with --minlife=''. This is a valid use case to delete a non-required attribute. In this case we simply don't do the math on None and things work as expected. 569847
* fix bug 570392, command help tracebackJohn Dennis2010-03-051-1/+1
| | | | | | | | | | | | | | | | | | | As a consequence of using doc=_('some message') the _() method was returning a Gettext instance, thus when optparse was handed the help text it received a Gettext instance instead of a basestring. optparse tried to operate on the Gettext instance as if it were a basestring and since it wasn't threw an exception. The fix is to promote (e.g. cast) the option.doc to unicode. If the option.doc was a str it becomes unicode, if it was unicode nothing happens, if it was Gettext (or any other object implementing the __unicode__() method) object is converted to unicode via the objects rules. By the way, while debugging this I discovered strings which were not localized, sometimes option.doc would be a str and sometimes a Gettext object. In a subsequent patch I'll fix all those unlocalized doc strings, but I don't want to bury this fix along with a load of string fixes.
* Fix JSON binary encode and decode errorsJohn Dennis2010-03-041-2/+99
| | | | | | | | | Traverse the objects passed to JSON for encoding and decoding. When binary data is seen during encode replace the binary data with a dict {'__base64__' : base64_encoding_of_binary_value}. On decode if a dict is seen whose single key is '__base64__' replace that dict with the base64 decoded value of the key's value.
* Install Contributors.txtJohn Dennis2010-03-041-6/+6
|
* Rework contributors list from Simo's inputJohn Dennis2010-03-041-11/+12
|
* update POTJohn Dennis2010-03-021-72/+867
|
* Make the CA a required component and configured by default.Rob Crittenden2010-03-022-26/+12
| | | | | | | | To install IPA without dogtag use the --selfsign option. The --ca option is now deprecated. 552995
* Add the popt auto-help/usage macro for enhanced help output.Rob Crittenden2010-03-023-3/+6
|
* Update available options and descriptions in client man pagesRob Crittenden2010-03-023-14/+50
|
* Fixed ipa.spec.in to include share/ipa/wsgi.py*Jason Gerard DeRose2010-03-011-1/+4
|
* Run ipaserver under mod_wsgiJason Gerard DeRose2010-03-015-269/+59
|
* Consolidate to single WSGI entry pointJason Gerard DeRose2010-03-018-83/+276
|
* More Kannada translationsJohn Dennis2010-03-011-131/+138
|
* full Spanish translations as of 20100225John Dennis2010-03-011-20/+21
|
* Code cleanup: remove unused stuff, take 1.Pavel Zuna2010-03-0113-245/+12
|
* Add more Spanish translationsJohn Dennis2010-02-261-83/+83
|
* Fix unicode failures in Env tests and dn failures in XML-RPC testsRob Crittenden2010-02-2610-54/+55
|