summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add default success/failure output logging.Rob Crittenden2011-02-147-16/+24
| | | | | | | | | | Request logging on the server only happened if you added verbose=True or debug=True to the IPA config file. We should log the basics at least: who, what, result. Move a lot of entries from info to debug logging as well. Related to ticket 873
* Add permission/privilege for updating IPA configuration.Rob Crittenden2011-02-142-0/+19
| | | | ticket 950
* Move tools that are really only applicable to be run on the serverRob Crittenden2011-02-141-8/+8
| | | | | | | This moves a bunch of tools that only make sense to run on the actual server from the admintools subpackage to the server subpackage. ticket 947
* Ignore case when removing group members.Rob Crittenden2011-02-142-1/+120
| | | | ticket 944
* Fix checking for arguments in DNS pluginsJakub Hrozek2011-02-141-1/+1
| | | | https://fedorahosted.org/freeipa/ticket/956
* Handle bad DM password in ipa-host-net-manage & ipa-copmat-manage.Rob Crittenden2011-02-142-2/+6
| | | | | | | This was resulting in a traceback because while conn was not None it wasn't connected either. ticket 920
* Fixed add service dialog box.Endi S. Dewata2011-02-113-25/+29
| | | | | | Previously the add service dialog box shows a 'Principal:' label with no text field next to it. It now has been removed. The dialog box has been widened to avoid line wrapping of the buttons.
* remove deprecated record typesAdam Young2011-02-111-3/+3
|
* allow null keys for showAdam Young2011-02-111-4/+8
| | | | https://fedorahosted.org/freeipa/ticket/951
* column formatting Allow optional formatting for columns Provide Data formate ↵Adam Young2011-02-113-6/+49
| | | | | | for host modificaiton date format
* target section without radio buttons ACI target section refactored into an ↵Adam Young2011-02-114-287/+325
| | | | array of widget-like objects. The radio buttons have been replaced by a select box. THe select is not visible on the details page.
* Convert json strings to unicode when they are unmarshalled.Rob Crittenden2011-02-114-32/+15
| | | | | | | | | This patch removes some individual work-arounds of converting strings to unicode, they only masked the problem. String values are not passed to the validator or normalizers so things like adding the realm automatically to services weren't happening. ticket 941
* Fix migration pageJakub Hrozek2011-02-111-1/+1
|
* Don't include error.kw in the error response in the JSON server.Rob Crittenden2011-02-111-1/+0
| | | | | | | This can include a full exception which cannot be marshalled. This value contains duplicate information and isn't used by the client. ticket 905
* ipa-dns-install does not exit on errorMartin Kosek2011-02-111-12/+17
| | | | | | | This patch fixes behavior of ipa-dns-install, which does not exit when an invalid configuration of /etc/hosts is detected. https://fedorahosted.org/freeipa/ticket/736
* Extend API validatorMartin Kosek2011-02-111-21/+56
| | | | | | | | | | | | | makeapi script is used to check if ipalib API is consistent with the known state in API.txt. When the API is changed, major API version should be updated. However, when new options/arguments/outputs were added to an ipalib command, `makeapi --validate' call did not capture this. This patch fixes this issue and ensures that also the last command in API.txt is checked (it was not before this patch). https://fedorahosted.org/freeipa/ticket/868
* Ensure that file ownership doesn't change when config is updated.Rob Crittenden2011-02-111-0/+4
| | | | | | | | | Out of the blue update_file() and set_directive() changed file ownership to root:root when it updated some files. This was causing dogtag to break. So grab the owner before opening the file and reset it after closing. ticket 928
* Add pyOpenSSL as a BuildRequiresRob Crittenden2011-02-111-0/+1
|
* Rename ipa.spec.in to freeipa.spec.in in BUILD.txt.Rob Crittenden2011-02-101-1/+1
| | | | | | This is the shortcut to installing the build-deps. ticket 859
* Provide a way to display CLI-LDAP relationJan Zeleny2011-02-101-1/+26
| | | | | | | | | | | Since some LDAP attributes have their cli_name value defined, so they can be more user friendly, it can be difficult for user to find out which attributes do the parameteres given to CLI really represent. This patch provides new command, which will take another IPA command as and argument and display attributes which given command takes and what LDAP attributes are they mapped to. https://fedorahosted.org/freeipa/ticket/447
* Update API.txt with updated usercertificate in service-findRob Crittenden2011-02-101-4/+3
|
* Fix return codes for ipactlMartin Kosek2011-02-101-14/+10
| | | | | | | This patch fixes ipactl to return non-zero value when something goes wrong. https://fedorahosted.org/freeipa/ticket/894
* Disable replication version plugin by default.Rob Crittenden2011-02-104-2/+29
| | | | | | | | | | | | | | | | The 389-ds replication plugin may not be installed on all platforms and our replication version plugin will cause 389-ds to not start if it is loaded and the replication plugin is not. So disable by default. When a replica is prepared we check for the replication plugin. If it exists we will enable the replication version plugin. Likewise on installation of a replica we check for existence of the repliation plugin and if it is there then we enable the version plugin before replication begins. ticket 918
* Fix test failures caused by the performance patch.Rob Crittenden2011-02-103-8/+21
| | | | | | It isn't safe to assume there is an environment or mode in any given object. Only skip the extra work if the object explicitly has production in it.
* Set minimum version of sssd to 1.5.1Rob Crittenden2011-02-101-1/+4
| | | | ticket 926
* nscd should be disabled before sssd is configured/started.Rob Crittenden2011-02-101-22/+22
| | | | | | | | | | | If not then sssd spits out a warning message: sssd: nscd socket was detected. As nscd caching capabilities may conflict with SSSD, it is recommended to not run nscd in parallel with SSSD Stop nscd before configuring sssd so we don't confuse our users. ticket 743
* Fix prompt for confirmation of fixed values wrapping around terminal.Rob Crittenden2011-02-101-1/+1
| | | | ticket 940
* Remove certificate as service a search option.Rob Crittenden2011-02-101-0/+1
| | | | ticket 912
* Remove unnecessary BuildRequires from the specfile.Jan Cholasta2011-02-101-2/+0
|
* Display error messages for failed manageby in service-add/remove-host.Pavel Zuna2011-02-102-4/+3
| | | | Fix #830
* Make main selfservice aci visible to the selfservice plugin.Rob Crittenden2011-02-101-2/+2
| | | | ticket 934
* Add the entitlement API to API.txtRob Crittenden2011-02-102-5/+69
| | | | | | | It was missed because the whole module was skipped if python-rhsm wasn't loaded. ticket 919
* Update krbtpolicy doc to inform that restarting krb5kdc might be needed.Pavel Zuna2011-02-101-0/+19
| | | | Fix #844
* Fix crash in DNS installer.Pavel Zuna2011-02-101-3/+3
| | | | Fix #927
* Update config doc to reflect that 0 is not allowed for search time limit.Pavel Zuna2011-02-101-2/+2
| | | | Fix #837
* Set minimum for Kerberos policy max life and max renew.Pavel Zuna2011-02-102-2/+4
| | | | Fix #847
* Fix of a small typoJan Zeleny2011-02-101-1/+1
|
* Become IPA v2 beta 2 (2.0.0.pre2)Rob Crittenden2011-02-101-1/+1
|
* Moved add dialog into search facet.Endi S. Dewata2011-02-0917-344/+354
| | | | | Previously the add dialog is added into entity. The dialog is only used by the search facet, so it's now moved into the search facet.
* Cross brower adjustments for the action-panel.System Administrator2011-02-091-10/+25
|
* Read-only text widget's save() should return null.Endi S. Dewata2011-02-071-1/+2
|
* Refresh state data before removing the dirsrv user, fixes uninstall.Rob Crittenden2011-02-071-0/+1
| | | | | | | | | The state is read only at initialization time. This works ok when individual services remove their state data but when worked upon again at the top-level it still has the full state in memory, so when the state file is re-written all of the data that was removed is re-added. ticket 916
* Hide initial status.Endi S. Dewata2011-02-073-7/+14
| | | | | | Previously all certificate & Kerberos key statuses (valid, missing and revoked) will appear briefly at the same time during page load. This has been fixed by setting the initial style to hidden.
* Removed unused code.Endi S. Dewata2011-02-072-405/+25
|
* Restructuring details page.Endi S. Dewata2011-02-0715-336/+322
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously the IPA.details_list_section can only be used with widgets that generates <dd> tag because it uses the following structure: <dl> <dt>Telephone Number:</dt> <span name="teleponenumber"> <dd>111-1111</dd> <dd>222-2222</dd> </span> </dl> The <dd> tag was previously used to handle multi-valued attributes. Since multi-valued attributes are now handled by the recently added IPA.multivalued_text_widget, the structure can be changed as follows: <dl> <dt>Telephone Number:</dt> <dd> <span name="telephonenumber"> <div>111-1111</div> <div>222-2222</div> </span> </dd> </dl> This allows IPA.details_list_section to be used with any widgets without requiring the <dd> tag.
* removed duplicate postionAdam Young2011-02-041-1/+0
| | | | olny need to specify once
* Added multi-valued text widget.Endi S. Dewata2011-02-036-51/+360
| | | | | | | | | | | | | | | | | | A multi-valued text widget has been created to replace the old IPA.details_field. The old code was designed to handle all data types, and it uses one <dd> tag for each value, so the code is still incomplete and complex. The new code was designed to handle only multi-valued text attributes, and it uses one <dd> tag for all values, so it's easier to maintain. There are already other widgets that can be used to handle other data types. The new code supports line-level undo and line-out for removal like the old code, but there are some changes: - Undoing a newly added line will remove the entire line. - Editing the value of a removed line will cancel the removal. - It provides 'undo all' link to reset the entire attribute. The old code will be cleaned up in a subsequent patch.
* faviconAdam Young2011-02-032-0/+1
| | | | adds a favicon that is the freeipa cube
* Fixed CSS error.Endi S. Dewata2011-02-031-2/+1
|
* Update minimum version of 389-ds-base, mod_nss and selinux-policy.Rob Crittenden2011-02-031-4/+9
| | | | | | * Set min version of 389-ds-base to 1.2.8 * Set min version of mod_nss 1.0.8-10 * Set min version of selinux-policy to 3.9.7-27