summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Rename INTERNAL to NO_CLI for commands we hide from the cli.Rob Crittenden2011-01-219-27/+29
| | | | | | Also make i18n_messages and json_metadata NO_CLI. ticket 821
* Improve output when options are not found in non-interactive client installRob Crittenden2011-01-211-1/+3
| | | | | | | We should still give some feedback when things go wrong when in non-interactive mode. ticket 828
* Make command syntax less confusing in helpJan Zeleny2011-01-211-0/+1
| | | | | | The patch adds [options] to the syntax line of ipa help <command> https://fedorahosted.org/freeipa/ticket/733
* Add some basic filter validation to permissions and disallow empty filtersRob Crittenden2011-01-213-4/+32
| | | | | | | Try a query with a filter to see if it is at least legal. This doesn't guarantee that the filter is at all otherwise sane. ticket 808
* Fix dns_is_enabled commandSimo Sorce2011-01-201-3/+3
|
* Allow SASL/EXTERNAL authentication for the root userSimo Sorce2011-01-204-1/+34
| | | | | | | | This gives the root user low privileges so that when anonymous searches are denied the init scripts can still search the directory via ldapi to get the list of serevices to start. Fixes: https://fedorahosted.org/freeipa/ticket/795
* Make krb5kdc use the ldapi socket to talk to dirsrvSimo Sorce2011-01-202-1/+3
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/812
* rename static to uiAdam Young2011-01-20245-20/+24
| | | | Directory rename
* Provide API to check if IPA DNS is enabled on some serverSimo Sorce2011-01-192-0/+30
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/600
* Fix ipa_uuid to not interfer with proper error reportingSimo Sorce2011-01-191-3/+2
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/813
* enroll dialog layoutAdam Young2011-01-191-3/+3
| | | | we were squeezing the buttons in the middle of the page. This patch shrinks the two boxes on either side and centers the buttons.
* background into MakefileAdam Young2011-01-181-0/+1
|
* update API removal of idnssoamaximum from dns APIs broke the build. THis ↵Adam Young2011-01-181-6/+3
| | | | fixes it.
* Fix password/random logic in host plugin.Pavel Zuna2011-01-181-6/+9
| | | | Fix #798
* Fix updating of DNS records by the host plugin.Pavel Zuna2011-01-181-5/+5
| | | | Fix #799
* Remove SOA maximum parameters from DNS zone.Pavel Zuna2011-01-181-5/+0
| | | | | | | | There's no such thing as "maximum" in SOA record RDATA format according to RFC 1035 and there's also no such attribute in the schema. Fix #788
* Fix crash when building DN of host with name ending with period.Pavel Zuna2011-01-181-4/+5
| | | | Fix #797
* Force flag for Hosts and Services.Endi S. Dewata2011-01-184-34/+88
| | | | | | | The add dialogs for Hosts and Services have been updated to include a checkbox to force adding hosts/services that are not in DNS. The widgets has been updated to support tooltips.
* Unprovision message and buttons adjustments.Endi S. Dewata2011-01-182-12/+2
| | | | | The message and buttons in the unprovision dialog box have been updated according to the latest spec.
* Do not try to dereference bindpw if it is nullSimo Sorce2011-01-181-2/+7
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/783
* Move HBAC services and service groups to cn=hbacJan Zeleny2011-01-1814-53/+53
| | | | https://fedorahosted.org/freeipa/ticket/762
* CSS class for buttons without icons.Endi S. Dewata2011-01-182-2/+15
| | | | | | A new CSS class has been added for buttons without icons. The IPA.button() has been modified to use this class if there is no icons specified.
* New certificate and Kerberos key status behavior.Endi S. Dewata2011-01-187-122/+169
| | | | | | The status panel for certificates and Kerberos keys has been modified to display only the current status with the relevant buttons. New icons have been added to replace the red/yellow/green bullets.
* dns action controlsAdam Young2011-01-181-1/+2
| | | | was adding the action controls to multiple lines. Now only one
* Fix selinux policies for ipa_kpasswdSimo Sorce2011-01-181-0/+1
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/775
* Let ipactl output errors to stderrSimo Sorce2011-01-181-7/+1
| | | | | Init scripts normally do not log to syslog, instead they write errors to the stderr pipe. Do the same.
* Add a way to print output from commandsSimo Sorce2011-01-183-34/+48
| | | | | | | | Instead pof always capturing the output, make it possible to let it go to the standard output pipes. Use this in ipactl to let init scripts show their output. Fixes: https://fedorahosted.org/freeipa/ticket/765
* Password generation and logging in ipa-server-installMartin Kosek2011-01-183-4/+18
| | | | | | | | | | | | When a randomly generated password contains a space character as the first or the last character, installation fails on kdb5_ldap_util calling, which does not accept that. This patch fixes the generator to generate space only on allowed position. This patch also ensures that no password is printed to server install log. https://fedorahosted.org/freeipa/ticket/731
* Modified description of nsaccountlock attributeJan Zeleny2011-01-181-1/+1
| | | | | | | The original one was misleading, giving the value exactly opposite meaning than it actually was. https://fedorahosted.org/freeipa/ticket/741
* Set the default Int maxvalue to the maximum XML-RPC can handle.Rob Crittenden2011-01-183-2/+19
| | | | | | Also handle marshalling errors thrown by xmlrpclib more gracefully. ticket 770
* search unit tests Unit tests were by the hiding of the search, and elements ↵Adam Young2011-01-181-5/+8
| | | | from the action panel.
* jslint cleanupAdam Young2011-01-184-4/+5
|
* Move sudo related data all under cn=sudoSimo Sorce2011-01-1722-66/+72
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/773
* Certificate and Kerberos key status adjustments.Endi S. Dewata2011-01-154-4/+33
| | | | | | The OTP field has been moved into a separate row to avoid line wrapping. The line height inside tables has been increased to avoid overlapping buttons in certificate status panel.
* no entry for search if the search facet is selected, don't put an entry in ↵Adam Young2011-01-151-4/+4
| | | | the action panel for the search
* Details to SettingsAdam Young2011-01-1518-63/+61
| | | | Using I18N messages for most of the details
* arrow icons Use Unicode characters for the arrow iconsAdam Young2011-01-152-12/+18
|
* lint clean added a config file for running jsl. run 'jsl -conf jsl.conf' and ↵Adam Young2011-01-1528-134/+414
| | | | see that there are no error messages.
* Mozldap-specific code removedMartin Kosek2011-01-146-61/+8
| | | | | | | | Mozldap code removed from all sources and configure source script. Now, IPA will compile even when package mozldap-devel is not installed on the system. https://fedorahosted.org/freeipa/ticket/756
* Don't require or create the log dirs if we're just validating the API.Rob Crittenden2011-01-141-1/+1
| | | | | Fixes an error displayed in the automated builds, plus we don't want a Makefile messing around with our homedir.
* Remove old DNS plugin commands from API validationSimo Sorce2011-01-141-139/+0
|
* Fix replica installation warningsSimo Sorce2011-01-141-2/+2
| | | | | We were attempting to re-add these entries on the replicas too. Which were failing because these containers, obviously, already existed there.
* Rename DNS2 to DNSJakub Hrozek2011-01-142-1/+1
|
* Port installer and host plugin to the new DNS pluginJakub Hrozek2011-01-144-979/+81
| | | | | | * move ipa dns-resolve to the new plugin * port the installer and the host plugin to the new interface * remove the old plugin
* Execute /usr/bin/python directly instead of /usr/bin/env pythonRob Crittenden2011-01-1412-12/+12
| | | | ticket 608
* Fix API validationSimo Sorce2011-01-141-1/+1
|
* Potential memory leaks in ipa-kpasswdMartin Kosek2011-01-141-0/+6
| | | | | | | | This patch fixes 2 situations where a pointer to allocated error string could be overwritten - which could have resulted in a memory leak. https://fedorahosted.org/freeipa/ticket/716
* Add API version and have server reject incompatible clients.Rob Crittenden2011-01-1415-15/+3118
| | | | | | | | | | | | | | | | | | | | | | | | This patch contains 2 parts. The first part is a small utility to create and validate the current API. To do this it needs to load ipalib which on a fresh system introduces a few problems, namely that it relies on a python plugin to set the default encoding to utf8. For our purposes we can skip that. It is also important that any optional plugins be loadable so the API can be examined. The second part is a version exchange between the client and server. The version has a major and a minor version. The major verion is updated whenever existing API changes. The minor version is updated when new API is added. A request will be rejected if either the major versions don't match or if the client major version is higher than then server major version (though by implication new API would return a command not found if allowed to proceed). To determine the API version of the server from a client use the ping command. ticket 584
* Unchecked return values in SLAPI pluginsMartin Kosek2011-01-144-8/+20
| | | | | | | Return values weren't checked in several cases which could have lead to unhandled errors. https://fedorahosted.org/freeipa/ticket/722
* Unitialized pointer read in ipa-joinMartin Kosek2011-01-141-2/+2
| | | | | | | This patch fixes a possible situation when krb5_kt_close() function is called with uninitialized keytab parameter. https://fedorahosted.org/freeipa/ticket/712