summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* SUDO Rule Search and Details PagesEndi S. Dewata2010-11-1925-549/+1029
| | | | | | | | | | | | | | | | | | | | The search and details pages for SUDO Rule have been added. Codes that are shared with HBAC have been moved to rule.js. The following methods were renamed for consistency: - ipa_details_load() -> ipa_details_refresh() - ipa_details_display() -> ipa_details_load() The ipa_details_cache has been removed because the cache is now stored in each widget. The index.xhtml has been removed. All references to it has been changed to index.html. The Unselect All checkbox has been fixed. Unnecessary parameter 'container' has been removed. The unit test has been updated and new test data has been added.
* Add managedby to Host entriesRob Crittenden2010-11-196-6/+154
| | | | | | This will allow others to provision on behalf of the host. ticket 280
* Revoke a host's certificate (if any) when it is deleted or disabled.Rob Crittenden2010-11-195-96/+276
| | | | | | | | | Disable any services when its host is disabled. This also adds displaying the certificate attributes (subject, etc) a bit more universal and centralized in a single function. ticket 297
* Fix build error due to rename of index.xhtml to index.htmlRob Crittenden2010-11-192-2/+2
|
* add button the spec had three add buttons: this one is the basic, 'add and ↵Adam Young2010-11-191-0/+15
| | | | then close' https://fedorahosted.org/freeipa/ticket/471
* removed index.xhtmlAdam Young2010-11-192-59/+1
| | | | also removed language on html, as the same page should be used for all languages.
* Exclude Krb lockout attributes from replicationSimo Sorce2010-11-181-1/+8
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/440
* env init call the json rpc 'env' during ipa init and cache the resultAdam Young2010-11-182-44/+118
|
* Use distutil.version to check for min versionSimo Sorce2010-11-181-2/+8
|
* pkinit-replica: create certificates for replicas tooSimo Sorce2010-11-184-14/+117
| | | | | altough the kdc certificate name is not tied to the fqdn we create separate certs for each KDC so that renewal of each of them is done separately.
* add plugin to enable/disable anonymous pkinitSimo Sorce2010-11-181-0/+98
|
* anon-pkinit: add well known principalSimo Sorce2010-11-181-0/+18
| | | | | | leave it disabled for now we can change this default once we will have some restriction on what services this principal can get tickets for.
* pkinit: always configure pkinit_anchors in krb5.confSimo Sorce2010-11-181-0/+1
|
* Add support for configuring KDC certs for PKINITSimo Sorce2010-11-187-6/+214
| | | | | This patch adds support only for the selfsign case. Replica support is also still missing at this stage.
* Use Realm as certs subject base nameSimo Sorce2010-11-1812-39/+53
| | | | Also use the realm name as nickname for the CA certificate
* batch init this batches together the calls to json_metadata, i18n_messages, ↵Adam Young2010-11-186-559/+4505
| | | | and user-find [whoami] tostreamline the init process, and also allow us to add a call to enumerate the plugins.
* Service and Host ProvisioningEndi S. Dewata2010-11-1811-354/+790
| | | | | | | | | | | | | | | The service and host details pages have been modified to display Kerberos key provisioning status and to provide a way to unprovision. The host enrollment via OTP has not been implemented yet. The ipa_details_field has been modified to remove any old <dd> tags it created in the previous load operation. This is to support other widgets that need to perform load operation without removing <dd> tags. The certificate_status_panel has been converted into a widget. The host entity has been rewritten using the new framework. The unit tests has been updated.
* CSS cleanup post UXD discussionAdam Young2010-11-174-49/+79
|
* action selectAdam Young2010-11-177-39/+208
| | | | | if exactly one entity is selected, it enables the entity-facet links in the action panel, and sets the pkey in bbq to the pkey of the selected
* buttons to action panel puts the buttons as the top li in the action panelAdam Young2010-11-162-3/+3
|
* HBAC css cleanupAdam Young2010-11-163-7/+22
| | | | | | | | | | | The additions to the search widget have to go one level deeper, as 'container' has both the action panel and the client area Conflicts: install/static/hbac.js install/static/hbacsvc.js install/static/hbacsvcgroup.js
* demo deploy Makes it easier to deploy demos. This version will demo cleanly ↵Adam Young2010-11-161-5/+6
| | | | | | | | from html providing you just set that.use_static_files = true; in the IPA definition section
* px to emAdam Young2010-11-161-31/+37
| | | | | | Making all of the page elements based on the font size. Also, set the font to the defauklt for the browser. By default, most brosers have Font set to 16px.
* entity container sizeAdam Young2010-11-151-1/+0
| | | | No longer wastes %20 of the the page in the entity container.
* HBAC details page enhancementEndi S. Dewata2010-11-1522-710/+1360
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The HBAC details page has been enhanced to support Undo and Reset operations. The functionality is implemented in the base widget class so the behavior will be more consistent across widgets. A <span> tag now used to define the field boundary in the HTML doc. The tag contains the visual representation of the field which include the input tag and optionally the undo link. The Update method on HBAC details page has been modified so that it executes several operations using a batch command. The operations being executed depends on the changes made to the fields. These operations may include: - removing access time if access time is changed to any time - removing memberships if member category is changed to all - modifying rule attributes if description or rule type is changed - enabling/disabling the rule if rule status is changed The behavior of the Add & Remove buttons also has been changed such that it adjust the category attribute properly in addition to adding the memberships using batch command. For example, if category is initially set to all, adding a new member will also change the category to empty. The ipa_command have been modified to store the on_success and on_error handlers as properties. When the command is executed as a part of batch operation, the result of each command will be passed to the appropriate handler. The unit tests and test data have been updated as well.
* Revert tests code to use the old uuid format.Simo Sorce2010-11-151-2/+2
|
* uuid plugin: convert the plugin to use the libuuid librarySimo Sorce2010-11-154-10/+30
| | | | | | | | | | The DS guys decided not to expose the DS inetrnal functions used to generate UUIDs for DS. This means the interface is not guaranteed to be available. Switch the ipa_uuid plugin to use the system libuuid plugin instead. NOTE: This causes once again a change in the tring format used for UUIDs. fixes: https://fedorahosted.org/freeipa/ticket/465
* Fix test.po errors in make testSimo Sorce2010-11-151-0/+1
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/401
* Push associate buttons to the action-panelAdam Young2010-11-151-2/+2
|
* buttons to action panelAdam Young2010-11-145-26/+32
|
* super to superiorAdam Young2010-11-1412-190/+81
|
* more css cleanup remove quick links css very close to specsAdam Young2010-11-1410-102/+63
|
* layoutAdam Young2010-11-1411-36/+95
| | | | | | Closer to the layout from the spec The facets have been moved to the action panel, to the left of the page the facets are now rendered in an area of the screen with a client class
* Use a different user for dogtag DS instanceRob Crittenden2010-11-121-1/+8
| | | | | | Also shut down all services before starting uninstall. ticket 349
* Increase # of chars in users and groups to 255 and default username to 32.Rob Crittenden2010-11-123-5/+5
| | | | ticket 434
* Added in the effective rightsEndi Sukma Dewata2010-11-114-1/+82
|
* HBAC Service GroupsEndi S. Dewata2010-11-118-105/+285
| | | | | | | | The HBAC Service Groups search, details, and association pages have been added under the HBAC tab. New test data files for HBAC Service Groups have been added. The sample metadata has been updated as well.
* HBAC ServicesEndi S. Dewata2010-11-1118-1012/+1507
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The HBAC Service search and details pages have been added under the HBAC tab. This requires some changes to the framework. Currently the navigation framework doesn't support multiple entities under one tab. As a temporary solution, an 'entity' URL parameter is used to determine the entity to be displayed. This parameter is now only used by HBAC tab, but its use might be expanded later. The navigation framework needs be redesigned to provide more flexibility. The search page in all entities except DNS records have been changed to use the ipa_search_widget. The Select/Unselect All checbox and Delete button now work correctly and consistently. The Add dialog has been enhanced to render and work in a more consistent way while still supporting custom widgets & layouts. For the search page, the Add button will refresh the search results and clear the fields in the dialog box. The framework now provides some extension points which can be overriden by the subclasses: - init(): for initialization and configuration - create(): for creating the layout dynamically or from template - setup(): for setting the look and feel - load(): for loading the data Entity and facet initialization is now done after IPA.init(). This is to ensure the metadata is loaded first so the entities and facets can use localized messages/labels/titles. The group entity has been partially converted to use the new framework. The unit tests have been updated accordingly.
* HBAC Service & Service Group test dataEndi Sukma Dewata2010-11-118-0/+138
|
* Set CACERTDIR during install to work around openldap bugJakub Hrozek2010-11-111-1/+3
| | | | | | | | Even though ldap.conf(5) claims that LDAPTLS_CACERT takes precedence over LDAPTLS_CACERTDIR, this seems to be broken in F14. This patch works around the issue by setting both into the environment. https://fedorahosted.org/freeipa/ticket/467
* Don't include INTERNAL commands in `ipa help commands` output.Rob Crittenden2010-11-101-0/+2
| | | | ticket 463
* Remove some more mod_python referencesJakub Hrozek2010-11-102-22/+1
|
* uuid-plugin: Fix control access bug on replicationalpha_5-1-9-0-1Simo Sorce2010-11-101-1/+17
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/468
* Label cleanup Also, addeed in the default shell field.Adam Young2010-11-101-13/+13
|
* Become IPA v2 alpha 5 (1.9.0.pre5)alpha_5-1-9-0Rob Crittenden2010-11-091-1/+1
|
* Use strongest keytype for master keySimo Sorce2010-11-091-1/+1
|
* Replace 'Locking' in `ipa help user` with 'Disabling'.Pavel Zuna2010-11-091-1/+1
| | | | Ticket #452
* Fix NotFound exception in ipa-nis-manage.Rob Crittenden2010-11-092-3/+5
| | | | | | | | The signature of ldap2.get_entry() changed so normalize wasn't being handled properly so the basedn was always being appended causing our entry in cn=config to be not found. ticket 414
* Add some examples to ipa-replica-install.1Rob Crittenden2010-11-091-18/+39
| | | | ticket 290
* Rename 60sudo.ldif to 60ipasudo.ldif to not overwrite the 389-ds version.Rob Crittenden2010-11-093-3/+3
| | | | | | This meant that the compat sudo schema was not available. ticket 439
generated by cgit (git 2.34.1) at 2024-05-10 03:18:30 +0000