summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Allow one-character Param namesRob Crittenden2010-02-125-12/+4
| | | | This is done explicitly to support the l/localityname attribute.
* Add default automount location. Auto-create auto.direct in new locations.Pavel Zuna2010-02-122-6/+13
|
* Add fix for wehjit (ctypes) SELinux problemJason Gerard DeRose2010-02-122-3/+13
|
* Make test_i18n.py diagnostics friendlierJohn Dennis2010-02-111-5/+9
|
* Command.output_params not contains params in Command.paramsJason Gerard DeRose2010-02-112-0/+34
|
* Make sure the incoming data ins't NULL before strduping itRob Crittenden2010-02-101-1/+6
|
* SELinux fix for Apache to read CRLsRob Crittenden2010-02-101-1/+7
|
* Add 1 intital language translationJohn Dennis2010-02-102-0/+605
| | | | | | | The %{find_lang} macro in the ipa.spec file will fail if there are no language translations causing the build to fail. This patch creates an Italian translation (in honor of Simo). The Italian translation is initially fully untranslated.
* Pass target locale to msginitJohn Dennis2010-02-102-7/+37
| | | | | | | | | | | msginit should have been passed the locale because the resulting .po file is parameterized from the locale. Also, if the target locale is not specified it defaults to the current locale. If the target locale is Engish msgid's are copied to their msgstr's resulting in a fully translated .po instead of a fully untranslated .po. Add some comments to better explain some of the cryptic sed commands.
* Add i18n testJohn Dennis2010-02-102-1/+96
|
* Add support for building internationalized translations.John Dennis2010-02-098-205/+991
| | | | | | | | | | | A new directory install/po has been added which contains all the translations for all files in IPA. The build has been agumented to build these files. Also the autogen.sh script was mostly replaced by autoreconf, the preferred method. The old autogen.sh sript also had some serious bugs in the way it compared versions which caused it to run old versions of some of the tools, using standared autoreconf is much better.
* Fix logging in CLI and server (take 2)Jason Gerard DeRose2010-02-091-5/+10
|
* Add A and PTR records during ipa-replica-prepareMartin Nagy2010-02-092-1/+25
| | | | Fixes #528996
* Get rid of ipapython.config in ipa-replica-prepareMartin Nagy2010-02-093-105/+63
| | | | | | | | | | Also get rid of functions get_host_name(), get_realm_name() and get_domain_name(). They used the old ipapython.config. Instead, use the variables from api.env. We also change them to bootstrap() and finalize() correctly. Additionally, we add the dns_container_exists() function that will be used in ipa-replica-prepare (next patch).
* Add ipa-dns-install scriptMartin Nagy2010-02-093-0/+186
| | | | Unfortunately, for now there is no --uninstall option.
* Add status option to ipactlRob Crittenden2010-02-091-1/+16
| | | | Resolves #503437
* Move the HTTP/S request code to a common libraryRob Crittenden2010-02-093-93/+98
| | | | | | | | This moves code that does HTTP and HTTPS requests into a common library that can be used by both the installer and the dogtag plugin. These functions are not generic HTTP/S clients, they are designed specifically to talk to dogtag, so use accordingly.
* Fix the cert plugin testsRob Crittenden2010-02-091-8/+24
| | | | | | | | | These tests rely on the existence of a backend CA. It is easiest to test with a self-signed CA in ~/.ipa so that is what I documented. These tests are skipped if no CA is available. Improved robustness a bit by putting the cleanup as a separate test.
* - also ensure that krbCanonicalName is uniqueNalin Dahyabhai2010-02-051-0/+18
|
* - allow the KDC to read krbCanonicalNameNalin Dahyabhai2010-02-051-2/+2
|
* Add support for the 'no_create', 'no_update', and 'no_search' Param flagsJason Gerard DeRose2010-02-052-6/+114
|
* Set default log level in the *-manage utilities to ERROR and not NOTSETRob Crittenden2010-02-042-2/+2
|
* - pull in updated schema which adds the krbCanonicalName attributeNalin Dahyabhai2010-02-041-1/+15
|
* Fix condition bug in ipa-pwd-extop plugin. Variable used uninitialized.Pavel Zuna2010-02-041-7/+10
|
* Configure sssd and certmonger in ipa-client-installRob Crittenden2010-02-032-8/+99
| | | | | | | | | | | This does a number of things under the hood: - Use authconfig to enable sssd in nss and pam - Configure /etc/sssd/sssd.conf to use our IPA provider - Enable the certmonger process and request a server cert - join the IPA domain and retrieve a principal. The clinet machine *must* exist in IPA to be able to do a join. - And then undo all this on uninstall
* Fix sample IPA command example at end of installationRob Crittenden2010-02-031-1/+1
| | | | Resolves #531455
* fix error message to be i18n translator friendlyJohn Dennis2010-02-031-1/+2
| | | | | | | | This error message was producing a warning from xgettext because there were multiple substations in the string. In some languages it may be necessary to reorder the substitutions for a proper translation, this is only possible if the substitutions use named values.
* Bring ipa-server-install man page up-to-date, fix some syntax errorsRob Crittenden2010-02-031-20/+30
| | | | | | | | | | | Remove a bunch of trailing spaces Add the --ca option Add the --no-host-dns option Add the --subject option Fix the one-character option for --no-ntp, should be -N not -n Add missing line break between --no-ntp and --uninstall Resolves #545260
* Add permissions for named to communicate over ldapiRob Crittenden2010-02-031-1/+4
|
* Implement pwplicy_find to show all group password policiesRob Crittenden2010-02-031-0/+32
| | | | | find is a bit of a misnomer here because we consider no search terms, it is all or nothing.
* Add flag to allow a cert to be re-issuedRob Crittenden2010-02-031-3/+7
| | | | | I don't want a user to accidentally re-issue a certificate so I've added a new flag, --revoke, to revoke the old cert and load the new one.
* Only change the log level if it isn't already setRob Crittenden2010-02-031-4/+5
| | | | | | This primarily affects the installer. We want to log to the install/ uninstall file in DEBUG. This was getting reset to INFO causing lots of details to not show in the logs.
* Be more careful when base64-decoding certificatesRob Crittenden2010-02-024-16/+9
| | | | | Only decode certs that have a BEGIN/END block, otherwise assume it is in DER format.
* Base64-encode binary values on the command-lineRob Crittenden2010-02-021-3/+17
|
* Remove group-specific password policy on group deletionRob Crittenden2010-01-291-0/+8
|
* Remove some configuration files we create upon un-installationRob Crittenden2010-01-282-1/+12
| | | | | This is particularly important for Apache since we'd leave the web server handling unconfigured locations.
* Remove (un)wrap_binary_data cruft from */ipautil.pyJohn Dennis2010-01-282-124/+0
| | | | | | | | Remove SAFE_STRING_PATTERN, safe_string_re, needs_base64(), wrap_binary_data(), unwrap_binary_data() from both instances of ipautil.py. This code is no longer in use and the SAFE_STRING_PATTERN regular expression string was causing xgettext to abort because it wasn't a valid ASCII string.
* Remove __public__ and __proxy__ hold-overs from Plugin classJason Gerard DeRose2010-01-286-227/+1
|
* Update dogtag configuration to work after CVE-2009-3555 changesRob Crittenden2010-01-273-6/+18
| | | | | | | | NSS is going to disallow all SSL renegotiation by default. Because of this we need to always use the agent port of the dogtag server which always requires SSL client authentication. The end user port will prompt for a certificate if required but will attempt to re-do the handshake to make this happen which will fail with newer versions of NSS.
* Fix schema loading in the ldap backend.Pavel Zuna2010-01-271-1/+4
|
* Update spec to require python-wehjit >= 0.2.0Jason Gerard DeRose2010-01-271-1/+4
|
* Require that the hostname we are joining as is fully-qualifiedRob Crittenden2010-01-261-0/+6
|
* Remove duplicated codeRob Crittenden2010-01-261-6/+0
| | | | This strange bit of duplication was not surprisingly causing a double-free
* Enabled CRUDS in webUI using wehjit 0.2.0Jason Gerard DeRose2010-01-266-199/+239
|
* Fixed xmlrpc_test.fuzzy_digits for Fedora12Jason Gerard DeRose2010-01-222-2/+2
|
* Set BIND to use ldapi and use fake mnameMartin Nagy2010-01-212-1/+4
| | | | | | The fake_mname for now doesn't exists but is a feature that will be added in the near future. Since any unknown arguments to bind-dyndb-ldap are ignored, we are safe to use it now.
* Move some functions from ipa-server-install into installutilsMartin Nagy2010-01-212-54/+54
| | | | | We will need these functions in the new upcoming ipa-dns-install command.
* Allow a custom file mode when setting up debuggingMartin Nagy2010-01-211-2/+2
| | | | | | This will be handy in the future if we will want to install or uninstall only single IPA components and want to append to the installation logs. This will be used by the upcoming ipa-dns-install script.
* Only add an NTP SRV record if we really are setting up NTPMartin Nagy2010-01-214-8/+16
| | | | | | | The sample bind zone file that is generated if we don't use --setup-dns is also changed. Fixes #500238
* Use the dns plug-in for addition of records during installationMartin Nagy2010-01-214-146/+82
| | | | Fixes #528943