| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
| |
The situation is if during installation /etc/krb5.conf either doesn't
exist or configures no realms then 389-ds won't start up at all, causing
the installation to fail. This will let the server start up in a degraded
mode.
Also need to make the sub_dict in ldapupdate.py handle no realm otherwise
the installation will abort enabling the compat plugin.
ticket 606
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/949
|
|
|
|
|
|
|
|
| |
We have no way to say "replace value X with Y". This would be useful
for us to replace a default value only if the user hasn't already
updated it.
related to ticket 930
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/937
|
|
|
|
|
|
|
|
| |
The current version of the DNS Plugin does not support searching by record, so that is commented out.
The search field wasn't working either. The search criteria had to be appended to the params array, just after the zone.
https://fedorahosted.org/freeipa/ticket/907
|
| |
|
|
|
|
|
|
| |
The group.upg NIS map was an experiment in providing UPG groups
dynamically, and is not one of the maps that I'd ever expect a NIS
client to "know" to search. We should probably just drop it.
|
|
|
|
|
|
|
|
| |
Recent change of DNS module to version caused that dns object type
was replaced by dnszone and dnsrecord. This patch corrects dns types
in permissions class.
https://fedorahosted.org/freeipa/ticket/646
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/957
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch fixes the default domain functionality for user email(s).
This setting may be configured via:
ipa config-mod --emaildomain=example.com
Then, when user is added/modified and --mail option is passed,
the default domain is appended if the passed attribute does not
contain another domain already.
https://fedorahosted.org/freeipa/ticket/598
|
|
|
|
|
|
|
|
|
|
| |
Request logging on the server only happened if you added verbose=True
or debug=True to the IPA config file. We should log the basics at
least: who, what, result.
Move a lot of entries from info to debug logging as well.
Related to ticket 873
|
|
|
|
| |
ticket 950
|
|
|
|
|
|
|
| |
This moves a bunch of tools that only make sense to run on the actual
server from the admintools subpackage to the server subpackage.
ticket 947
|
|
|
|
| |
ticket 944
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/956
|
|
|
|
|
|
|
| |
This was resulting in a traceback because while conn was not None
it wasn't connected either.
ticket 920
|
|
|
|
|
|
| |
Previously the add service dialog box shows a 'Principal:' label with
no text field next to it. It now has been removed. The dialog box
has been widened to avoid line wrapping of the buttons.
|
| |
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/951
|
|
|
|
|
|
| |
for host modificaiton
date format
|
|
|
|
| |
array of widget-like objects. The radio buttons have been replaced by a select box. THe select is not visible on the details page.
|
|
|
|
|
|
|
|
|
| |
This patch removes some individual work-arounds of converting strings
to unicode, they only masked the problem. String values are not
passed to the validator or normalizers so things like adding the
realm automatically to services weren't happening.
ticket 941
|
| |
|
|
|
|
|
|
|
| |
This can include a full exception which cannot be marshalled. This
value contains duplicate information and isn't used by the client.
ticket 905
|
|
|
|
|
|
|
| |
This patch fixes behavior of ipa-dns-install, which does not
exit when an invalid configuration of /etc/hosts is detected.
https://fedorahosted.org/freeipa/ticket/736
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
makeapi script is used to check if ipalib API is consistent with the
known state in API.txt. When the API is changed, major API version
should be updated. However, when new options/arguments/outputs were
added to an ipalib command, `makeapi --validate' call did not capture
this.
This patch fixes this issue and ensures that also the last command
in API.txt is checked (it was not before this patch).
https://fedorahosted.org/freeipa/ticket/868
|
|
|
|
|
|
|
|
|
| |
Out of the blue update_file() and set_directive() changed file
ownership to root:root when it updated some files. This was causing
dogtag to break. So grab the owner before opening the file and reset
it after closing.
ticket 928
|
| |
|
|
|
|
|
|
| |
This is the shortcut to installing the build-deps.
ticket 859
|
|
|
|
|
|
|
|
|
|
|
| |
Since some LDAP attributes have their cli_name value defined,
so they can be more user friendly, it can be difficult for user to find
out which attributes do the parameteres given to CLI really represent.
This patch provides new command, which will take another IPA command as
and argument and display attributes which given command takes and what
LDAP attributes are they mapped to.
https://fedorahosted.org/freeipa/ticket/447
|
| |
|
|
|
|
|
|
|
| |
This patch fixes ipactl to return non-zero value when something
goes wrong.
https://fedorahosted.org/freeipa/ticket/894
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The 389-ds replication plugin may not be installed on all platforms
and our replication version plugin will cause 389-ds to not start
if it is loaded and the replication plugin is not. So disable by
default.
When a replica is prepared we check for the replication plugin.
If it exists we will enable the replication version plugin.
Likewise on installation of a replica we check for existence of
the repliation plugin and if it is there then we enable the version
plugin before replication begins.
ticket 918
|
|
|
|
|
|
| |
It isn't safe to assume there is an environment or mode in any given
object. Only skip the extra work if the object explicitly has production
in it.
|
|
|
|
| |
ticket 926
|
|
|
|
|
|
|
|
|
|
|
| |
If not then sssd spits out a warning message:
sssd: nscd socket was detected. As nscd caching capabilities may conflict
with SSSD, it is recommended to not run nscd in parallel with SSSD
Stop nscd before configuring sssd so we don't confuse our users.
ticket 743
|
|
|
|
| |
ticket 940
|
|
|
|
| |
ticket 912
|
| |
|
|
|
|
| |
Fix #830
|
|
|
|
| |
ticket 934
|
|
|
|
|
|
|
| |
It was missed because the whole module was skipped if python-rhsm wasn't
loaded.
ticket 919
|
|
|
|
| |
Fix #844
|
|
|
|
| |
Fix #927
|
|
|
|
| |
Fix #837
|
|
|
|
| |
Fix #847
|
| |
|
| |
|
|
|
|
|
| |
Previously the add dialog is added into entity. The dialog is only
used by the search facet, so it's now moved into the search facet.
|