summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Don't perform some API self-tests in production mode for performance reasonsRob Crittenden2011-01-286-8/+20
| | | | | | | | | | | | The API does a fair number of self tests and locking to assure that the registered commands are consistent and will work. This does not need to be done on a production system and adds additional overhead causing somewhere between a 30 and 50% decrease in performance. Because makeapi is executed when a build is done ensure that it is executed in developer mode to ensure that the framework is ok. ticket 751
* unmatched aciattrsAdam Young2011-01-284-12/+32
| | | | instead of reporting an error on unmatched aciattrs, append them to the table.
* services listAdam Young2011-01-283-163/+82
| | | | | | | | Declaritive Service definition Fixed a problem with multiple calls to create breaking the link between the select box and the text box swapped the select and the text https://fedorahosted.org/freeipa/ticket/442
* Fixed delegation UI issuesEndi S. Dewata2011-01-286-69/+80
| | | | | | | | | | | | | | | | | | This patch fixes several issues in delegation UI: When adding a new delegation, only the first attribute selected was saved. Now all attributes will be saved properly. When loading the details page, the custom widgets did not store the original values properly so is_dirty() did not work correctly. Now this has been fixed except for the memberof attribute because of these issues: - https://fedorahosted.org/freeipa/ticket/869 - https://fedorahosted.org/freeipa/ticket/870 When saving the details page, the attrs were saved as an array which was rejected by the server. Now it is stored as comma- separated list.
* Address entryusn initialization on replica installationSimo Sorce2011-01-281-0/+5
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/637
* Put some safeguards against misconfiguration on the kdc accountSimo Sorce2011-01-281-0/+2
| | | | Ticket: https://fedorahosted.org/freeipa/ticket/862
* Fix delegation helpJakub Hrozek2011-01-281-6/+6
|
* Fix filter_keys in ipa-getkeytabJakub Hrozek2011-01-281-2/+6
| | | | https://fedorahosted.org/freeipa/ticket/723
* Fix API.txtJakub Hrozek2011-01-281-7/+13
|
* Enforce that all NS records are resolvableJakub Hrozek2011-01-283-1/+123
| | | | | | | Bind cannot load a zone if any of its name server records is not resolvable. https://fedorahosted.org/freeipa/ticket/838
* Add example of DNS SRV record and a simple validatorJakub Hrozek2011-01-282-4/+27
| | | | https://fedorahosted.org/freeipa/ticket/846
* Delete the whole DNS record with no parametersJakub Hrozek2011-01-283-22/+71
| | | | | | | | | Error out when deleting a nonexistent DNS record Also fixes the DNS unit tests. https://fedorahosted.org/freeipa/ticket/816 https://fedorahosted.org/freeipa/ticket/829
* jsl warningsAdam Young2011-01-284-4/+5
|
* aci rights widgetAdam Young2011-01-282-10/+38
| | | | | | | Fixes is_dirty and save https://fedorahosted.org/freeipa/ticket/77 https://fedorahosted.org/freeipa/ticket/667
* default disable deleteAdam Young2011-01-282-1/+31
|
* entity filter textAdam Young2011-01-281-1/+1
|
* modifyprivilegemembership permission has nestedgroup OCMartin Kosek2011-01-281-1/+1
| | | | | | | modifyprivilegemembership permission object class in LDAP should be groupofnames, not nestedgroup. https://fedorahosted.org/freeipa/ticket/858
* host-add should not add a PTR record with --no-reverseJakub Hrozek2011-01-281-7/+10
| | | | https://fedorahosted.org/freeipa/ticket/866
* Add support for account unlockingJan Zeleny2011-01-285-2/+44
| | | | | | | | This patch adds command ipa user-unlock and some LDAP modifications which are required by Kerberos for unlocking to work. Ticket: https://fedorahosted.org/freeipa/ticket/344
* block anonymous access to sudo info https://fedorahosted.org/freeipa/ticket/865Jr Aquino2011-01-271-0/+6
|
* Make sure all DS instances are managed by ipactlSimo Sorce2011-01-271-20/+18
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/860
* Apply changes discovered in Fedora package review process (#672986)Rob Crittenden2011-01-271-16/+19
| | | | Ticket 804
* dirtyAdam Young2011-01-278-23/+130
| | | | | If a page is dirty, do not allow additional navigation until changes are saved or committed https://fedorahosted.org/freeipa/ticket/726
* Adjusted aci's target feilds, adjusted action panel styles, adjusted ↵Kyle Baker2011-01-273-15/+100
| | | | Delegation and Configuration.
* reset target section target section needed to cache results for use in ↵Adam Young2011-01-271-3/+6
| | | | results moved load logic into reset and load now calls reset
* adding label for RBACAdam Young2011-01-273-20/+41
|
* declarative for aciAdam Young2011-01-278-283/+124
| | | | | | A couple of the ACI definitions were incorrect, and the end result was that fields were not getting initialized. USing the declarative approach cleaned up the cause. Also fixed a few broken unit tests
* declarative defintionsAdam Young2011-01-2724-371/+313
| | | | | | | | | | | | | | Delay the creation of entities until after ipa init is called made the user and group entity definitions declarative removed unused facet from groups adjusted unit tests made review changes: factories are now in an associative array entity init called right after factory init dialogs in entity init fixed type on search
* Fix ipa init script to not depend on dirsrv init internalsSimo Sorce2011-01-271-11/+4
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/857
* Handle nolog list containing None valuesSimo Sorce2011-01-271-0/+2
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/856
* Add requires for the pkiSimo Sorce2011-01-271-0/+2
| | | | First part of: https://fedorahosted.org/freeipa/ticket/855
* ACI plugin supports prefixesMartin Kosek2011-01-267-92/+179
| | | | | | | | | | | | | | | | | | | | | | | | When more than one plugin produce ACIs, they share common namespace of ACI name. This may lead to name collisions between the ACIs from different plugins. This patch introduces a mandatory "prefix" attribute for non-find ACI operations which allow plugins to use their own prefixes (i.e. namespaces) which is then used when a name of the ACI is generated. Permission, Delegation and Selfservice plugins has been updated to use their own prefixes thus avoiding name collisions by using their own namespaces. Default ACIs in LDIFs has been updated to follow this new policy. Permission plugin now uses its CN (=primary key) instead of description in ACI names as Description may not be unique. This change requires an IPA server reinstall since the default ACI set has been changed. https://fedorahosted.org/freeipa/ticket/764
* Check field's validity before executing add.Endi S. Dewata2011-01-265-18/+22
|
* target style cleanupAdam Young2011-01-262-50/+83
| | | | | Target section had radio buttonsreversed, and a few other style changes Note that this has the styling removed for the aci-target dl items
* Add an option for overriding the hostname value.Rob Crittenden2011-01-262-0/+8
| | | | Ticket 834
* assoc entity selected classAdam Young2011-01-261-1/+1
| | | | Iassociation entities should look differnt than Details when they are selected
* Raise ValidationError when adding unallowed attribute to search fields.Pavel Zuna2011-01-261-0/+16
| | | | Ticket #845
* Add ldap2 method to retrieve allowed attributes for specified objectClasses.Pavel Zuna2011-01-261-3/+17
| | | | | | | ldap2.get_allowed_attribute(['posixuser']) returns a list of unicode all lower case attribute names allowed for the object class 'posixuser'
* api version updateAdam Young2011-01-261-18/+18
|
* dns visible if enabledAdam Young2011-01-263-4/+12
| | | | | | use the result of the is_dns_enabled command to show or hid the dns tab Also, Javascript lint cleanup from recent patches.
* dns containerAdam Young2011-01-261-25/+33
| | | | the dns records page was adding controls to the wrong tag. This pushes everything down one level, fixing the formatting.
* Tab I18NAdam Young2011-01-266-455/+174
| | | | | | | Makes the values for the Top level tabs internationizable, and no longer just passes through their names Also uses the I18N values for SUDO and HBAC as the static text in the Action p[anel title
* Add flags to enforce asking for object attributeJan Zeleny2011-01-262-9/+26
| | | | | | | So far the only flag to enforce asking in interactive mode was the alwaysask attribute, which is not sufficient any more. This patch adds the ability to control for which actions the atrribute shall be asked for.
* js lint fixAdam Young2011-01-251-3/+3
|
* Add brackets around optional parameters when prompting.Rob Crittenden2011-01-251-4/+8
| | | | ticket 832
* Modal Panel ChangesSystem Administrator2011-01-251-12/+45
|
* error handling styleAdam Young2011-01-2510-43/+106
| | | | modifying the directories so they find the assets in the right locations
* Main UI, migration, and html Style updatesKyle Baker2011-01-2531-305/+2592
|
* Rename package to freeipaJan Zeleny2011-01-253-10/+18
| | | | https://fedorahosted.org/freeipa/ticket/581
* Clean up some rpmlint errors in the spec file.Rob Crittenden2011-01-251-30/+24
| | | | | | | | | | Re-arrange doc and defattr to clean up rpmlint warnings Remove conditionals on older releases Move some man pages into admintools subpackage Remove some explicit Requires in client that aren't needed Consistent use of buildroot vs RPM_BUILD_ROOT Ticket 804