summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* association fixesAdam Young2011-01-312-9/+29
| | | | | PLaces custom association facets into the proper facet groups usesthe associators if they are specifiedfor an association
* Fix privilege name we are assigning to DNS principal.Rob Crittenden2011-01-311-1/+1
| | | | This fixes an installation failure.
* Use a common group for all DS instancesSimo Sorce2011-01-316-137/+141
| | | | | | | | Also remove the option to choose a user. It is silly to keep it, when you can't choose the group nor the CA directory user. Fixes: https://fedorahosted.org/freeipa/ticket/851
* Removed permission description from UIEndi S. Dewata2011-01-311-10/+3
| | | | https://fedorahosted.org/freeipa/ticket/877
* reduce scope of remove link it was global ↵Adam Young2011-01-311-37/+35
| | | | https://fedorahosted.org/freeipa/ticket/212
* Rename permissions and privileges to be more readable.Rob Crittenden2011-01-317-307/+239
| | | | | | | This also drops description from permissions since it seems redundant and fixes up the help text a little. ticket 792
* widget unit testsAdam Young2011-01-315-1/+195
| | | | unit test for basic functionality, text, and checkbox widgets
* Fixed permission lookupJan Zeleny2011-01-313-12/+16
| | | | | | | | Lookup based on --filter wasn't implemented at all. It did't show until now, because of bug sitting on top of it which was resulting in internal error. This patch fixes the bug and adds the filtering functionality. https://fedorahosted.org/freeipa/ticket/818
* Fixed IPA.widget's load, save, and is_dirty.Endi S. Dewata2011-01-301-10/+27
| | | | This patch fixes the problem leaving the user details page.
* delegation work aroundAdam Young2011-01-291-3/+10
| | | | Since the delegation enityt is using membergroup as the property name at this stage, we can use that as the value until the pluing is consistant
* Fixed permission reset and is_dirty unit testEndi S. Dewata2011-01-291-0/+1
| | | | | | The reset and is_dirty functionality for permission has been fixed. New widgets have been created for select and a collection of checkboxes. New test data files have been added for each target type.
* populate attribute table for delegation addAdam Young2011-01-291-0/+4
|
* Fixed permission reset and is_dirty.Endi S. Dewata2011-01-299-1069/+766
| | | | | | The reset and is_dirty functionality for permission has been fixed. New widgets have been created for select and a collection of checkboxes. New test data files have been added for each target type.
* placeholder functionAdam Young2011-01-291-0/+2
| | | | | | ipa_target_section does not overload is_dirty, and it alwayrs returns true, meaning you can never leave the page once you visit it. THis commit pushes a simple placeholder function that always returns fales. Follow on work will be required to correctly inplement the is_dirty functonality
* Add permission dialog adjustments.Endi S. Dewata2011-01-2912-492/+598
| | | | | | | | | | | | The IPA.dialog has been modified to support sections. The add dialog for permission has been modified to include the target section. The base dialog classes have been moved from widget.js into a new file called dialog.js. This patch also includes ayoung's fix for parameter name and format for the permission attributes. https://fedorahosted.org/freeipa/ticket/791
* ipa permission-mod --rename does not workMartin Kosek2011-01-282-9/+86
| | | | | | | | | | | This patch fixes nonfunctional rename operation in permission plugin. Also makes sure, that no change is made to the underlying ACI in pre_callback() when the target permission already exists. Several tests for the rename operation have been created to ensure that the it won't break again unnoticed. https://fedorahosted.org/freeipa/ticket/814
* Don't perform some API self-tests in production mode for performance reasonsRob Crittenden2011-01-286-8/+20
| | | | | | | | | | | | The API does a fair number of self tests and locking to assure that the registered commands are consistent and will work. This does not need to be done on a production system and adds additional overhead causing somewhere between a 30 and 50% decrease in performance. Because makeapi is executed when a build is done ensure that it is executed in developer mode to ensure that the framework is ok. ticket 751
* unmatched aciattrsAdam Young2011-01-284-12/+32
| | | | instead of reporting an error on unmatched aciattrs, append them to the table.
* services listAdam Young2011-01-283-163/+82
| | | | | | | | Declaritive Service definition Fixed a problem with multiple calls to create breaking the link between the select box and the text box swapped the select and the text https://fedorahosted.org/freeipa/ticket/442
* Fixed delegation UI issuesEndi S. Dewata2011-01-286-69/+80
| | | | | | | | | | | | | | | | | | This patch fixes several issues in delegation UI: When adding a new delegation, only the first attribute selected was saved. Now all attributes will be saved properly. When loading the details page, the custom widgets did not store the original values properly so is_dirty() did not work correctly. Now this has been fixed except for the memberof attribute because of these issues: - https://fedorahosted.org/freeipa/ticket/869 - https://fedorahosted.org/freeipa/ticket/870 When saving the details page, the attrs were saved as an array which was rejected by the server. Now it is stored as comma- separated list.
* Address entryusn initialization on replica installationSimo Sorce2011-01-281-0/+5
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/637
* Put some safeguards against misconfiguration on the kdc accountSimo Sorce2011-01-281-0/+2
| | | | Ticket: https://fedorahosted.org/freeipa/ticket/862
* Fix delegation helpJakub Hrozek2011-01-281-6/+6
|
* Fix filter_keys in ipa-getkeytabJakub Hrozek2011-01-281-2/+6
| | | | https://fedorahosted.org/freeipa/ticket/723
* Fix API.txtJakub Hrozek2011-01-281-7/+13
|
* Enforce that all NS records are resolvableJakub Hrozek2011-01-283-1/+123
| | | | | | | Bind cannot load a zone if any of its name server records is not resolvable. https://fedorahosted.org/freeipa/ticket/838
* Add example of DNS SRV record and a simple validatorJakub Hrozek2011-01-282-4/+27
| | | | https://fedorahosted.org/freeipa/ticket/846
* Delete the whole DNS record with no parametersJakub Hrozek2011-01-283-22/+71
| | | | | | | | | Error out when deleting a nonexistent DNS record Also fixes the DNS unit tests. https://fedorahosted.org/freeipa/ticket/816 https://fedorahosted.org/freeipa/ticket/829
* jsl warningsAdam Young2011-01-284-4/+5
|
* aci rights widgetAdam Young2011-01-282-10/+38
| | | | | | | Fixes is_dirty and save https://fedorahosted.org/freeipa/ticket/77 https://fedorahosted.org/freeipa/ticket/667
* default disable deleteAdam Young2011-01-282-1/+31
|
* entity filter textAdam Young2011-01-281-1/+1
|
* modifyprivilegemembership permission has nestedgroup OCMartin Kosek2011-01-281-1/+1
| | | | | | | modifyprivilegemembership permission object class in LDAP should be groupofnames, not nestedgroup. https://fedorahosted.org/freeipa/ticket/858
* host-add should not add a PTR record with --no-reverseJakub Hrozek2011-01-281-7/+10
| | | | https://fedorahosted.org/freeipa/ticket/866
* Add support for account unlockingJan Zeleny2011-01-285-2/+44
| | | | | | | | This patch adds command ipa user-unlock and some LDAP modifications which are required by Kerberos for unlocking to work. Ticket: https://fedorahosted.org/freeipa/ticket/344
* block anonymous access to sudo info https://fedorahosted.org/freeipa/ticket/865Jr Aquino2011-01-271-0/+6
|
* Make sure all DS instances are managed by ipactlSimo Sorce2011-01-271-20/+18
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/860
* Apply changes discovered in Fedora package review process (#672986)Rob Crittenden2011-01-271-16/+19
| | | | Ticket 804
* dirtyAdam Young2011-01-278-23/+130
| | | | | If a page is dirty, do not allow additional navigation until changes are saved or committed https://fedorahosted.org/freeipa/ticket/726
* Adjusted aci's target feilds, adjusted action panel styles, adjusted ↵Kyle Baker2011-01-273-15/+100
| | | | Delegation and Configuration.
* reset target section target section needed to cache results for use in ↵Adam Young2011-01-271-3/+6
| | | | results moved load logic into reset and load now calls reset
* adding label for RBACAdam Young2011-01-273-20/+41
|
* declarative for aciAdam Young2011-01-278-283/+124
| | | | | | A couple of the ACI definitions were incorrect, and the end result was that fields were not getting initialized. USing the declarative approach cleaned up the cause. Also fixed a few broken unit tests
* declarative defintionsAdam Young2011-01-2724-371/+313
| | | | | | | | | | | | | | Delay the creation of entities until after ipa init is called made the user and group entity definitions declarative removed unused facet from groups adjusted unit tests made review changes: factories are now in an associative array entity init called right after factory init dialogs in entity init fixed type on search
* Fix ipa init script to not depend on dirsrv init internalsSimo Sorce2011-01-271-11/+4
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/857
* Handle nolog list containing None valuesSimo Sorce2011-01-271-0/+2
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/856
* Add requires for the pkiSimo Sorce2011-01-271-0/+2
| | | | First part of: https://fedorahosted.org/freeipa/ticket/855
* ACI plugin supports prefixesMartin Kosek2011-01-267-92/+179
| | | | | | | | | | | | | | | | | | | | | | | | When more than one plugin produce ACIs, they share common namespace of ACI name. This may lead to name collisions between the ACIs from different plugins. This patch introduces a mandatory "prefix" attribute for non-find ACI operations which allow plugins to use their own prefixes (i.e. namespaces) which is then used when a name of the ACI is generated. Permission, Delegation and Selfservice plugins has been updated to use their own prefixes thus avoiding name collisions by using their own namespaces. Default ACIs in LDIFs has been updated to follow this new policy. Permission plugin now uses its CN (=primary key) instead of description in ACI names as Description may not be unique. This change requires an IPA server reinstall since the default ACI set has been changed. https://fedorahosted.org/freeipa/ticket/764
* Check field's validity before executing add.Endi S. Dewata2011-01-265-18/+22
|
* target style cleanupAdam Young2011-01-262-50/+83
| | | | | Target section had radio buttonsreversed, and a few other style changes Note that this has the styling removed for the aci-target dl items