summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add signing profile to CA installation so we can sign the firefox jar file.Rob Crittenden2009-05-046-57/+259
| | | | | | | Use the requestId we get back from the CA when requesting the RA agent cert and use that to issue the certificate rather than hardcoding 7. This also adds some clean-up of file permissions and leaking fds
* Add DNS management plugin port to the new ldap backend.Pavel Zuna2009-04-301-0/+797
|
* Make search filter generation a bit safer. Minor bug fixes/code improvements.Pavel Zuna2009-04-301-8/+12
|
* Change help interface to display builtin commands and a list of topics based ↵Pavel Zuna2009-04-301-20/+77
| | | | on plugin modules.
* Use right attribute name for e-mail in user2 plugin.Pavel Zuna2009-04-301-2/+2
|
* Add method to generate DN from attribute directly, without making RDN first.Pavel Zuna2009-04-301-0/+10
|
* Add missing required attribute, nisdomainnameRob Crittenden2009-04-301-0/+16
|
* Use correct attribute for e-mail addressRob Crittenden2009-04-291-1/+1
| | | | Resolves 498269
* Fixed cli.run() catching SystemExit exception under Python2.4Jason Gerard DeRose2009-04-281-1/+1
| | | | Resolves BZ #498088
* Use XML rather than string routines to handle response from dogtag Remove ↵Rob Crittenden2009-04-281-6/+17
| | | | trailing CR/LF from the password file
* trivial update to standardize terms in docstringDavid O'Brien2009-04-281-1/+1
|
* Fix bind zone installerRob Crittenden2009-04-271-1/+1
|
* Utilities for dealing with dogtagRob Crittenden2009-04-241-0/+41
|
* Import the RequiresRoot error and make note to replace this at some pointRob Crittenden2009-04-242-1/+4
|
* Rename errors2.py to errors.py. Modify all affected files.Pavel Zuna2009-04-2346-265/+265
|
* Make LDAP entry output slightly nicer, don't print u's in front of unicode ↵Pavel Zuna2009-04-231-7/+23
| | | | strings etc.
* Fix filter generator in ldapapi. Shouldn't produce invalid filters anymore.Pavel Zuna2009-04-231-6/+12
|
* Throw AlreadyGroupMember instead of EmptyModlist when trying to re-add ↵Pavel Zuna2009-04-221-3/+4
| | | | member to a group.
* Introduce AlreadyGroupMember exception, raised when a member is attempted to ↵Pavel Zuna2009-04-221-0/+16
| | | | be re-added to a group.
* Change ldap2.__handle_errors into the global _handle_errors function.Pavel Zuna2009-04-221-52/+53
|
* Make it possible to construct partial match filters using make_filter_* ↵Pavel Zuna2009-04-221-6/+20
| | | | methods. Add missing _sasl_auth variable.
* Add user plugin port with some bugs fixed to the new LDAP backend.Pavel Zuna2009-04-221-0/+405
|
* Add conditional (env.use_ldap2 is True) modifications required by new LDAP ↵Pavel Zuna2009-04-222-7/+19
| | | | backend.
* Add new env variables. 'container_dns' for DNS plugin, 'use_ldap2' for new ↵Pavel Zuna2009-04-221-0/+2
| | | | LDAP backend debugging.
* Convert the RA plugin to use nsslib and remove the configure methodsRob Crittenden2009-04-201-134/+39
|
* Issue DS and Apache server certs during CA installation.Rob Crittenden2009-04-205-104/+364
| | | | | | | Notes: - will create a CA instance (pki-ca) if it doesn't exist - maintains support for a self-signed CA - A signing cert is still not created so Firefox autoconfig still won't work
* Remove unwanted white spaceRob Crittenden2009-04-201-12/+12
|
* Finish work replacing the errors module with errors2Rob Crittenden2009-04-2015-854/+350
| | | | | | Once this is committed we can start the process of renaming errors2 as errors. I thought that combinig this into one commit would be more difficult to review.
* Handle GSSAPI exceptions more gracefullyRob Crittenden2009-04-203-13/+116
|
* Make parentmap a autofill variable and add tests when parentmap is not passedRob Crittenden2009-04-132-0/+59
|
* Fill in default values for os and platformRob Crittenden2009-04-131-0/+18
|
* The new admin tool 'ipa' uses a different configuration file, create it.Rob Crittenden2009-04-131-7/+8
|
* Renaming the backend ldap plugin to ldapapi.py to prevent module import issuesRob Crittenden2009-04-061-0/+0
|
* Use full OID for LDAP SYNTAX identification. Don't convert Booleans and ↵Pavel Zuna2009-04-061-24/+20
| | | | Integers into respective python types as their ranges might not match. Rename module-scope functions.
* Add new LDAP backend plugin.root2009-04-031-0/+741
|
* Add 'container_hbac' env variable.root2009-04-031-1/+1
|
* Implement an installer for the Dogtag certificate system.Rob Crittenden2009-04-038-21/+945
| | | | | | | | | | | | | | | The CA is currently not automatically installed. You have to pass in the --ca flag to install it. What works: - installation - unistallation - cert/ra plugins can issue and retrieve server certs What doesn't work: - self-signed CA is still created and issues Apache and DS certs - dogtag and python-nss not in rpm requires - requires that CS be in the "pre" install state from pkicreate
* Renamed remaining plugins still using f_* b_* conventionJason Gerard DeRose2009-04-0111-0/+0
|
* Fill in the ACIs and taskgroups for most of the plugins.Rob Crittenden2009-04-011-13/+311
| | | | | | | | | | | This adds: group administration host administration host group administration delegation administration service administration automount administration netgroup administration
* Name update files so they can be easily sorted.Rob Crittenden2009-03-2516-24/+162
| | | | | We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
* Implement a few new targets for ACIsRob Crittenden2009-03-251-8/+32
| | | | | Also switch to the StrEnum parameter type for some options so we let the framework do the enforcement
* Translate variables on all lines and sort files to be updatedRob Crittenden2009-03-251-3/+5
| | | | | | | | Only the dn and the first line of any entry that was spread across multiple lines were getting passed through the template engine. If we are given a directory to process, sort the files in that directory so the order can be predicted. Some updates rely on others.
* DNA is now configured using an update fileRob Crittenden2009-03-251-4/+0
|
* Allow a search using only the exact search filterRob Crittenden2009-03-251-4/+10
|
* Add a 'showall' command so one can pick from a list of tasks to add to a roleRob Crittenden2009-03-251-1/+35
|
* Use tuples instead of lists for class variablesRob Crittenden2009-03-253-4/+5
|
* Raise a more specific error when a user lacks the proper permissions.Rob Crittenden2009-03-253-5/+6
| | | | | The info part of the message will contain details on what permission failed on what attribute.
* Always print the dn first when printing an entryRob Crittenden2009-03-251-0/+3
|
* Add new type List that converts delimited values into a tupleRob Crittenden2009-03-203-1/+110
|
* Converted to use new baseclass, remove the one with the f_ prefixRob Crittenden2009-03-203-1254/+0
|