summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fix ipa init script to not depend on dirsrv init internalsSimo Sorce2011-01-271-11/+4
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/857
* Handle nolog list containing None valuesSimo Sorce2011-01-271-0/+2
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/856
* Add requires for the pkiSimo Sorce2011-01-271-0/+2
| | | | First part of: https://fedorahosted.org/freeipa/ticket/855
* ACI plugin supports prefixesMartin Kosek2011-01-267-92/+179
| | | | | | | | | | | | | | | | | | | | | | | | When more than one plugin produce ACIs, they share common namespace of ACI name. This may lead to name collisions between the ACIs from different plugins. This patch introduces a mandatory "prefix" attribute for non-find ACI operations which allow plugins to use their own prefixes (i.e. namespaces) which is then used when a name of the ACI is generated. Permission, Delegation and Selfservice plugins has been updated to use their own prefixes thus avoiding name collisions by using their own namespaces. Default ACIs in LDIFs has been updated to follow this new policy. Permission plugin now uses its CN (=primary key) instead of description in ACI names as Description may not be unique. This change requires an IPA server reinstall since the default ACI set has been changed. https://fedorahosted.org/freeipa/ticket/764
* Check field's validity before executing add.Endi S. Dewata2011-01-265-18/+22
|
* target style cleanupAdam Young2011-01-262-50/+83
| | | | | Target section had radio buttonsreversed, and a few other style changes Note that this has the styling removed for the aci-target dl items
* Add an option for overriding the hostname value.Rob Crittenden2011-01-262-0/+8
| | | | Ticket 834
* assoc entity selected classAdam Young2011-01-261-1/+1
| | | | Iassociation entities should look differnt than Details when they are selected
* Raise ValidationError when adding unallowed attribute to search fields.Pavel Zuna2011-01-261-0/+16
| | | | Ticket #845
* Add ldap2 method to retrieve allowed attributes for specified objectClasses.Pavel Zuna2011-01-261-3/+17
| | | | | | | ldap2.get_allowed_attribute(['posixuser']) returns a list of unicode all lower case attribute names allowed for the object class 'posixuser'
* api version updateAdam Young2011-01-261-18/+18
|
* dns visible if enabledAdam Young2011-01-263-4/+12
| | | | | | use the result of the is_dns_enabled command to show or hid the dns tab Also, Javascript lint cleanup from recent patches.
* dns containerAdam Young2011-01-261-25/+33
| | | | the dns records page was adding controls to the wrong tag. This pushes everything down one level, fixing the formatting.
* Tab I18NAdam Young2011-01-266-455/+174
| | | | | | | Makes the values for the Top level tabs internationizable, and no longer just passes through their names Also uses the I18N values for SUDO and HBAC as the static text in the Action p[anel title
* Add flags to enforce asking for object attributeJan Zeleny2011-01-262-9/+26
| | | | | | | So far the only flag to enforce asking in interactive mode was the alwaysask attribute, which is not sufficient any more. This patch adds the ability to control for which actions the atrribute shall be asked for.
* js lint fixAdam Young2011-01-251-3/+3
|
* Add brackets around optional parameters when prompting.Rob Crittenden2011-01-251-4/+8
| | | | ticket 832
* Modal Panel ChangesSystem Administrator2011-01-251-12/+45
|
* error handling styleAdam Young2011-01-2510-43/+106
| | | | modifying the directories so they find the assets in the right locations
* Main UI, migration, and html Style updatesKyle Baker2011-01-2531-305/+2592
|
* Rename package to freeipaJan Zeleny2011-01-253-10/+18
| | | | https://fedorahosted.org/freeipa/ticket/581
* Clean up some rpmlint errors in the spec file.Rob Crittenden2011-01-251-30/+24
| | | | | | | | | | Re-arrange doc and defattr to clean up rpmlint warnings Remove conditionals on older releases Move some man pages into admintools subpackage Remove some explicit Requires in client that aren't needed Consistent use of buildroot vs RPM_BUILD_ROOT Ticket 804
* Fix assorted bugs found by pylintJakub Hrozek2011-01-2517-46/+19
|
* Fix ipa-replica-manage regressions with winsyncSimo Sorce2011-01-252-3/+6
| | | | | | Avoids ipa-replica-manage to throw up errors. Fixes: https://fedorahosted.org/freeipa/ticket/807
* Create DNS records as early as possibleSimo Sorce2011-01-251-4/+15
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/833
* Always add DNS records when installing a replicaSimo Sorce2011-01-253-4/+101
| | | | | | | Even if the replica is not running a DNS server other replicas might. So if the DNS container is present, then try to add DNS records. Fixes: https://fedorahosted.org/freeipa/ticket/824
* action panel select for multiple entitiesAdam Young2011-01-251-8/+18
|
* unselected facets Facets that were not selected were getting the class ↵Adam Young2011-01-251-2/+0
| | | | indicating that they were sselected
* action buttons for dnsAdam Young2011-01-251-2/+2
|
* aci attribute table two columnsAdam Young2011-01-252-20/+20
|
* remove icons from association buttonsAdam Young2011-01-251-2/+0
|
* Enforce uniqueness on (key,info) pairs in automount keysJakub Hrozek2011-01-254-40/+248
| | | | https://fedorahosted.org/freeipa/ticket/293
* Populate shared tree with replica related valuesSimo Sorce2011-01-253-0/+52
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/820
* Unused value in initdefault_encoding_utf8Martin Kosek2011-01-251-3/+1
| | | | | | | There is no use for return value of Py_InitModule3. Removing it in this patch. https://fedorahosted.org/freeipa/ticket/710
* Fix crash when displaying values composed of white-space chars only in CLI.Pavel Zuna2011-01-241-0/+2
| | | | Ticket #825
* Disable renaming to empty stringJan Zeleny2011-01-241-0/+2
| | | | | | | | So far it was possible to rename any object using LDAPUpdate to a name with empty primary key. Since this can cause nasty problems, this patch disables empty string in --rename argument. https://fedorahosted.org/freeipa/ticket/827
* Make the -u option optional in unattended modeSimo Sorce2011-01-241-8/+11
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/836
* Do not set a replication dn when using SASL/GSSAPI replicationSimo Sorce2011-01-241-23/+16
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/817
* Remove trailing spaceSimo Sorce2011-01-241-1/+1
|
* Make a copy of objectclasses so a call can't update them globally.Rob Crittenden2011-01-242-5/+6
| | | | | | In the host plugin we may change the default objectclasses based on the options selected. This was affecting it globally and causing subsequent calls to fail.
* Fix failed tests. API for utcoffset changed and strings are more robust.Rob Crittenden2011-01-242-7/+8
| | | | | | | In Python 2.7 the API for time.utcoffset() changed. We do more automatic conversions of strings so need to loosen the tests a bit.
* Block anonymous access to HBAC, role and some member information.Rob Crittenden2011-01-242-0/+11
| | | | | | | | Prevents an unauthenticated user from accessing HBAC and role information as well as memberof which could disclose roles, memberships in HBAC, etc. ticket 811
* Removed 'name' from 'Sudo Command Group name'.Endi S. Dewata2011-01-2421-29/+29
|
* Added scrollable panel for delete dialog box.Endi S. Dewata2011-01-245-9/+14
|
* Added spaces around radio buttons.Endi S. Dewata2011-01-243-4/+52
|
* Fix exception doctest failureRob Crittenden2011-01-241-2/+2
|
* Remove del-all from dnsrecord_del from API.txtRob Crittenden2011-01-211-2/+1
| | | | This was from an unpushed patch I had in my tree.
* Add new option to dns_del and always ask permission options to API.txtRob Crittenden2011-01-211-19/+20
|
* Make ipa permission-add ask for optional attributesJan Zeleny2011-01-211-0/+6
| | | | | | | Either one of type, filter, subtree, targetgroup, attrs or memberof is required. https://fedorahosted.org/freeipa/ticket/819
* Update kerberos password policy values on LDAP binds.Rob Crittenden2011-01-217-0/+712
| | | | | | | | | | | | | | | On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth and will potentially fail the bind altogether. On a successful bind it will zero krbLoginFailedCount and set krbLastSuccessfulAuth. This will also enforce locked-out accounts. See http://k5wiki.kerberos.org/wiki/Projects/Lockout for details on kerberos lockout. ticket 343