| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
| |
see that there are no error messages.
|
|
|
|
|
|
|
|
| |
Mozldap code removed from all sources and configure source script.
Now, IPA will compile even when package mozldap-devel is not
installed on the system.
https://fedorahosted.org/freeipa/ticket/756
|
|
|
|
|
| |
Fixes an error displayed in the automated builds, plus we don't want
a Makefile messing around with our homedir.
|
| |
|
|
|
|
|
| |
We were attempting to re-add these entries on the replicas too.
Which were failing because these containers, obviously, already existed there.
|
| |
|
|
|
|
|
|
| |
* move ipa dns-resolve to the new plugin
* port the installer and the host plugin to the new interface
* remove the old plugin
|
|
|
|
| |
ticket 608
|
| |
|
|
|
|
|
|
|
|
| |
This patch fixes 2 situations where a pointer to allocated error
string could be overwritten - which could have resulted in
a memory leak.
https://fedorahosted.org/freeipa/ticket/716
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch contains 2 parts.
The first part is a small utility to create and validate the current
API. To do this it needs to load ipalib which on a fresh system
introduces a few problems, namely that it relies on a python plugin
to set the default encoding to utf8. For our purposes we can skip that.
It is also important that any optional plugins be loadable so the
API can be examined.
The second part is a version exchange between the client and server.
The version has a major and a minor version. The major verion is
updated whenever existing API changes. The minor version is updated when
new API is added. A request will be rejected if either the major versions
don't match or if the client major version is higher than then server
major version (though by implication new API would return a command not
found if allowed to proceed).
To determine the API version of the server from a client use the ping
command.
ticket 584
|
|
|
|
|
|
|
| |
Return values weren't checked in several cases which could
have lead to unhandled errors.
https://fedorahosted.org/freeipa/ticket/722
|
|
|
|
|
|
|
| |
This patch fixes a possible situation when krb5_kt_close()
function is called with uninitialized keytab parameter.
https://fedorahosted.org/freeipa/ticket/712
|
|
|
|
|
|
|
|
|
|
| |
This patch fixes several potential memory leaks in ipa-pwd-extop
SLAPI plugin.
Common function ipapwd_gen_hashes() now cleans after itself when
it fails. Other changes are local and self-explanatory.
https://fedorahosted.org/freeipa/ticket/715
|
|
|
|
|
|
|
|
| |
This patch fixes 2 situations where a pointer to allocated error
string could be overwritten - which could have resulted in
a memory leak.
https://fedorahosted.org/freeipa/ticket/714
|
|
|
|
|
|
| |
We use sssd in ipa v2
Fixes: https://fedorahosted.org/freeipa/ticket/757
|
|
|
|
|
|
|
| |
This has been completely abandoned since ipa v1 and is not built by default.
Instead of carrying dead weight, let's remove it for now.
Fixes: https://fedorahosted.org/freeipa/ticket/761
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/760
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/759
|
|
|
|
|
|
|
|
| |
Now that we can setup GSSAPI authenticated replication we are not
tied to use the Directory Manager password to set up replication
agreements.
Fixes: https://fedorahosted.org/freeipa/ticket/644
|
|
|
|
|
|
|
| |
Uses a temporary simple replication agreement over SSL to init the tree.
Then once all principals have been created switches replication to GSSAPI.
Fixes: https://fedorahosted.org/freeipa/ticket/690
|
|
|
|
|
| |
We can't use arbitrary ports anyway. And neither AD has any way to use non
stadard ports. So remove this unnecessary option.
|
| |
|
|
|
|
|
| |
This simplifies or rationalizes some code in order to make it easier to change
it to fix bug #690
|
|
|
|
|
| |
If an option is not selectable from the action panel, hide it until it is selectable
addresses https://fedorahosted.org/freeipa/ticket/747
|
|
|
|
|
|
|
| |
If the pkey is null, send an empty array.
If the pkey is not null, send and array of length 1 with the pkey in it.
Addresses: https://fedorahosted.org/freeipa/ticket/767
|
|
|
|
| |
following from first patch: 1 primary key set in span as opposed to appended, so it only appears once. 2. call hide for the network activity icon only in success or failure functions, not multiple times
|
| |
|
|
|
|
| |
ticket 763
|
|
|
|
|
|
|
|
|
| |
Don't allow the time limit to be set in the API. Also add a failsafe
in the ldap driver because such bad things happen if this value is 0.
I think it literally spends 0 time on the request and just returns
immediately.
ticket 752
|
|
|
|
|
|
| |
converting function of the form ipa_<name> to IPA.<name> to remove them from the global namespace.
https://fedorahosted.org/freeipa/ticket/212
|
|
|
|
|
| |
The StrEnum class has been modified to accept str value and convert
it into unicode. This is to fix encoding issue on F14.
|
|
|
|
|
| |
The <li> tag used for status icon has been replaced with <div>
tag shaped like a circle. The size can be adjusted using CSS.
|
|
|
|
| |
Static viewing was broken due to recent hbac changes.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The labels for the following fields in Host details page have been
changed:
- fqdn: Fully Qualified Host Name
- serverhostname: Host Name
The ipa_details_field_create_input() and _ipa_create_text_input()
has been converted into methods in ipa_details_field class. The code
has been modified to display read-only fields as labels instead
of disabled text fields.
The attributelevelrights in host test data files have been updated.
|
| |
|
| |
|
| |
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/730
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/432
|
|
|
|
|
|
|
| |
This patch increases robustness in PRE MOD password SLAPI module
by ensuring that an uninitialized pointer is not dereferenced.
https://fedorahosted.org/freeipa/ticket/719
|
|
|
|
|
|
|
|
| |
Omiting return value of calloc in ipa_pwd_extop.c could lead to
memory access issues when memory is full. This patch adds return
value check.
https://fedorahosted.org/freeipa/ticket/717
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/742
|
|
|
|
|
|
|
| |
This patch fixes a situation where an uninitialized pointer
is passed to free().
https://fedorahosted.org/freeipa/ticket/713
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
krb5_get_default_realm() and asprintf() return values were ignored.
This could lead to unhandled error issues or memory access
issues.
This patch adds return value checks to all such functions.
As a consequence, one new return value has been added to man page.
https://fedorahosted.org/freeipa/ticket/720
|
|
|
|
|
|
|
|
|
|
|
|
| |
krb5_init_context return value was not checked. This could lead
to unhandled error issues.
This patch moves the Kerberos context initialization to the
branch where it is needed and handles the error value in a way
that allows program exit in a standard way deallocating all
resources.
https://fedorahosted.org/freeipa/ticket/721
|