| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
| |
When ipa-client-install autodiscovers IPA server values it
doesn't fill the fixed KDC address to Kerberos configuration
file. However, when realm != domain or the autodiscovered values
are overridden, installation may fail because it cannot find the
KDC.
This patch adds a failover to use static KDC address in case when
such an issue occurs.
https://fedorahosted.org/freeipa/ticket/1100
|
|
|
|
|
|
|
|
|
| |
The IPA.association_facet has been modified to take a read_only parameters.
If the parameter is set to true, the Enroll and Delete buttons will not be
shown. All facets under the memberindirect and memberofindirect facet groups
are marked as read-only.
Ticket #1030
|
|
|
|
|
|
|
|
| |
The IPA.entity has been modified to support customizable facet groups.
The default list of facet groups is defined in IPA.entity_header and can
be overriden in the entity definition.
Ticket #1219
|
|
|
|
| |
ticket 914
|
|
|
|
|
|
|
|
|
| |
It was discovered that using the batch plugin it was possible to
store duplicate data in parts of the ipa_config during iterations.
This was causing a cascading exec failures if any one of the batch
executions failed.
https://fedorahosted.org/freeipa/ticket/1220
|
|
|
|
|
|
| |
Done with conditionals so still installable on F-14.
ticket 1200
|
|
|
|
|
|
|
|
| |
Logging errors are printed out when ipa-replica-manage is run
as a non-root user. Log has been disabled in such case to
prevent such messages.
https://fedorahosted.org/freeipa/ticket/1046
|
|
|
|
|
|
|
|
| |
Remove redundant ipa-client-install error message when optional nscd
daemon was not installed. Additionally, use standard IPA functions
for service manipulation and improve logging.
https://fedorahosted.org/freeipa/ticket/1207
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Doc parts are not removed from the API completely. This leads to
unnecessary updates to API.txt when the option/argument documentation
is changed.
This patch replaces unreliable doc stripping function with a regular
expression. It works for all current doc strings (simple string or
GetText). The only limitation is that the RE supports only up to
2 levels of nested parentheses in doc string.
https://fedorahosted.org/freeipa/ticket/1057
|
|
|
|
|
|
|
|
| |
IPA tools options are not consistent with information in man
pages.
https://fedorahosted.org/freeipa/ticket/1163
https://fedorahosted.org/freeipa/ticket/1178
|
|
|
|
|
|
|
| |
Improve performance by specifying basedn to find_entry_by_attr()
function in ldap2 and passwd plugins.
https://fedorahosted.org/freeipa/ticket/1165
|
| |
|
|
|
|
| |
from the ipa_init batch call
|
|
|
|
|
|
|
| |
If installing in interactive mode and --no-reverse is passed then the
reverse zone was still being created.
ticket 1152
|
|
|
|
|
|
|
|
| |
Since selinux-policy-3.9.16-5.fc15 is out, the dogtag port 7390 is
handled via selinux-policy and there is no need to manage it in
FreeIPA installer.
https://fedorahosted.org/freeipa/ticket/1205
|
| |
|
| |
|
|
|
|
|
| |
The dialog box for entitlement registration has been modified to
accept an optional enrollment UUID.
|
| |
|
|
|
|
|
|
| |
The IPA.records_facet has been converted into a subclass of
IPA.search_facet. This helps remove duplicate table code and provide
consistent DOM element attributes for Selenium tests.
|
|
|
|
|
| |
The following test suites have been updated to use the new DOM
structure: SUDO, password policy, Kerberos Ticket policy, ACI.
|
|
|
|
| |
ticket 1198
|
|
|
|
|
| |
The following test suites have been updated to use the new DOM
structure: user, group, host, hostgroup, netgroup, service, HBAC.
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1128
|
|
|
|
| |
tickets 1166, 1167, 1168, 1169
|
|
|
|
|
| |
The Identity tab for self-service UI was missing a label and there
was a bug in navigation.js that was exposed because of that.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This option does not behave properly in F15 as chkconfig does not list services
moved to use systemd service files.
Plus there are more direct ways than parsing its output, which are more
reliable.
Also just testing for the availability of the service calling 'chkconfig name'
is enough.
https://fedorahosted.org/freeipa/ticket/1206
|
|
|
|
|
|
|
| |
Facet container has been added to hold facet header (i.e. title,
search fields, buttons, links) and facet content. Each facet now
occupies separate container, so it can be shown/hidden without
having to redraw the content.
|
|
|
|
|
|
| |
Previously the entities and navigation are entangled inside a common
DOM structure which limits code reuse. Now they have been moved
into separate structures.
|
|
|
|
|
|
|
| |
Previously the tab state is represented using numeric index such
as navigation=0&identity=1 which is not very user friendly. Now the
code has been modified to use entity names such as
navigation=identity&identity=group.
|
|
|
|
|
|
|
| |
The singular object IPA.nav has been converted into an IPA.navigation
class. The admin and self-service navigation tabs have been converted
into subclasses of IPA.navigation and will be instantiated according
to user authorization.
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1203
|
|
|
|
|
|
|
|
| |
Report missing python packages, inform about false positives, fail
gracefully if pylint isn't installed. Fixed a bug in the ignore
list and added few more files/directories to it.
ticket 1184
|
|
|
|
| |
ticket 1180
|
| |
|
|
|
|
|
|
|
|
|
| |
ipa-rmkeytab returns success even when the realm passed to the
program is not found in a keytab. This patch adds an explanatory
error message and returns error code 5 - Principal or realm not
found.
https://fedorahosted.org/freeipa/ticket/694
|
|
|
|
|
|
|
|
|
|
|
| |
When replica with DNS is installed, NS records for the managed zone
are not updated with the replica FQDN. The administrator then has
to do it manually to enroll the new DNS server to the zone.
This patch also removes the newly created NS records when the
replica is removed via ipa-replica-manage command.
https://fedorahosted.org/freeipa/ticket/1034
|
|
|
|
|
|
|
| |
Fix a logging error in ipa-ldap-updater which may cause IPA
installer to crash.
https://fedorahosted.org/freeipa/ticket/1199
|
|
|
|
|
|
|
| |
When IPA server is being uninstalled, IPA client on-master
uninstallation which is called by the script fails.
https://fedorahosted.org/freeipa/ticket/1197
|
|
|
|
|
|
|
|
|
|
|
|
| |
The --force option may be misused to reinstall an existing IPA
client. This is not supported and may lead to unexpected errors.
When required, the cleanest way to re-install IPA client is to
run uninstall and then install again.
This patch also includes few cosmetic changes in messages to user
to provide more consistent user experience with the script.
https://fedorahosted.org/freeipa/ticket/1117
|
|
|
|
|
|
|
|
|
|
| |
When the pwpolicy attribute "cospriority" is passed to pwpolicy-mod
command and the old value is kept, the command should succeed
if there was at least one other attribute changed. Current
pwpolicy-mod raises exception in this case which may lead to issues
in the WebUI.
https://fedorahosted.org/freeipa/ticket/1104
|
|
|
|
|
|
|
|
| |
This patch prevents uninstalling IPA client when it is configured
as a part of IPA server. ipa-server-installation script is advised
for this situation.
https://fedorahosted.org/freeipa/ticket/1049
|
|
|
|
|
|
|
|
|
|
|
| |
There are times where one side or the other is missing its peers
krbprincipalname when converting from simple to GSSAPI replication. Ticket
1188 should address the cause of this.
This patch provides better information and handling should either side
be missing.
ticket 1044
|
|
|
|
|
|
|
|
| |
This patch adds logging of temporary files (Kerberos configuration,
nsupdate commands) that may be very useful for debugging purposes.
https://fedorahosted.org/freeipa/ticket/1093
https://fedorahosted.org/freeipa/ticket/1094
|
|
|
|
|
|
|
|
| |
Wait for DS ports to open after _every_ DS service restart.
Several restarts were missed by the current open port checker
implementation.
https://fedorahosted.org/freeipa/ticket/1182
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1191
|
|
|
|
|
|
| |
The widget base class has been modified to validate integer value
if the type is specified in the metadata. This is used to validate
entitlement quantity.
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/1193
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
replacing the action panel with the Design for 2.1
Significantly cleaned up implementation of intra-entity navigation
requires additional CSS work
still need to integrate the search controls onto each page
cleaning up interface between entity and facet
simplified nested tabs logic
Fixed role navigation
select default tab from the search widget
fixed unit tests and jsl
keep tabs area allocated
set default tab selected whenever the pkey changes.
Removing styling that is changing positions of buttons. The logic for that was for action-panel, but does not translate to entity-header.
change from metadata name to label for I18N
set selected tab in entity_init.
Default title for entities without search and pkeys
associations in table now link.
remove colon from title when not showing pkey
added Managed by facet group.
Removed entities that are, for some reason, invalid.
|