summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* The default groups we create should have ipaUniqueId setRob Crittenden2011-04-155-3/+31
| | | | | | | | This adds a new directive to ipa-ldap-updater: addifnew. This will add a new attribute only if it doesn't exist in the current entry. We can't compare values because the value we are adding is automatically generated. ticket 1177
* Entitlement registration.Endi S. Dewata2011-04-1410-53/+659
| | | | | | The entitlement facet will show buttons according to the entitlement status. If it's unregistered, the facet will show a Register button. If it's registered, the facet will show a Consume button.
* Merged IPA.cmd() into IPA.command().Endi S. Dewata2011-04-1318-429/+572
| | | | | | | The IPA.cmd() has been merged into IPA.command(). All invocations and test cases have been converted. Ticket #988
* Sort entries returned by *-find by the primary key (if any).Rob Crittenden2011-04-133-8/+12
| | | | | | | | Do a server-side sort if there is a primary key. Fix a couple of tests that were failing due to the new sorting. ticket 794
* Fix lint false positives.Jan Cholasta2011-04-1312-15/+23
|
* Add lint script for static code analysis.Jan Cholasta2011-04-132-0/+195
| | | | ticket 867
* Fix double definition of output_for_cli.Jan Cholasta2011-04-131-1/+0
|
* Fix uninitialized variables.Jan Cholasta2011-04-131-0/+7
|
* Suppress --on-master from ipa-client-install command-line and man page.Rob Crittenden2011-04-122-4/+4
| | | | | | | | This option is only used when configuring an IPA client on an IPA server. Describing it on the command-line will only confuse people so don't list it as an option. Ticket 1050
* Fix traceback in ipa-nis-manage.Rob Crittenden2011-04-114-31/+42
| | | | | | | | | | | | | | | | | The root user cannot use ldapi because of the autobind configuration. Fall back to a standard GSSAPI sasl bind if the external bind fails. With --ldapi a regular user may be trying this as well, catch that and report a reasonable error message. This also gives priority to the DM password if it is passed in. Also require the user be root to run the ipa-nis-manage command. We enable/disable and start/stop services which need to be done as root. Add a new option to ipa-ldap-updater to prompt for the DM password. Remove restriction to be run as root except when doing an upgrade. Ticket 1157
* Updated Selenium tests.Endi S. Dewata2011-04-1187-350/+1285
| | | | The Selenium tests have been updated to improve robustness.
* Entitlements.Endi S. Dewata2011-04-1111-2/+351
|
* Refactored search facet.Endi S. Dewata2011-04-111-185/+185
| | | | | To simplify customization, the add(), remove(), and refresh() methods have been moved from IPA.search_widget into IPA.search_facet.
* Refactored builder interface.Endi S. Dewata2011-04-119-68/+103
| | | | | | | The IPA.entity_builder has been modified to take a 'factory' parameter in custom facet's and custom dialog's spec. The IPA.dialog has been modified to take an array of fields in the spec. The IPA.search_facet has been modified to take an array of columns in the spec.
* Refactored action panel and client area.Endi S. Dewata2011-04-118-50/+56
| | | | | | | To improve code readability and extensibility the containers for action panel and client area are now created in IPA.entity.setup(). The 'client area' has been renamed into 'content'. The IPA.facet.create() has been renamed to IPA.facet.create_content().
* Improve DNS PTR record validationMartin Kosek2011-04-111-11/+30
| | | | | | | | | | | | | Current PTR validation is unclear and may misled the user. This patch improves the validation process so that the eventual exception is clearer. New check that the PTR record is fully qualified has been added to ensure that the reverse zone resolution behaves as expected. Additionally, several strings in the DNS plugin were prepared for localization. https://fedorahosted.org/freeipa/ticket/1129
* Password policy commands do not include cospriorityMartin Kosek2011-04-111-32/+24
| | | | | | | | | Most of the pwpolicy_* commands do include cospriority in the result and potentially in the attribute rights (--all --rights). Especially when --raw output is requested. This patch fixes it for all pwpolicy commands. https://fedorahosted.org/freeipa/ticket/1103
* Add memberHost and memberUser to default indexesJr Aquino2011-04-081-0/+16
| | | | https://fedorahosted.org/freeipa/ticket/1138
* Revert "Remove doc from API.txt"Martin Kosek2011-04-082-318/+319
| | | | | | | This commit accidentaly slipped in (it was not ready for the upstream). This reverts commit 9915b93737fe5e31a53f2fdb169427a0b4d7e002.
* Fix typo in ipa-server-install.Jan Cholasta2011-04-081-1/+1
|
* Remove doc from API.txtMartin Kosek2011-04-082-319/+318
| | | | | | | | | | | | | Doc parts are not removed from the API completely. This leads to unnecessary updates to API.txt when the option/argument documentation is changed. This patch replaces unreliable doc stripping function with a regular expression. It works for all current doc strings (simple string or GetText). The only limitation is that the RE supports only up to 2 levels of nested parentheses in doc string. https://fedorahosted.org/freeipa/ticket/1057
* postalCode should be a string not an integer.Rob Crittenden2011-04-054-6/+7
| | | | | | | | | | | | postalCode is defined as an Int. This means you can't define one that has a leading zero nor can you have dashes, letters, etc. This changes the data type on the server. It will still accept an int value if provided and convert it into a string. Bump the API version to 2.1. ticket 1150
* Fix ORDERING in some attributetypes and remove other unnecessary elements.Rob Crittenden2011-04-056-28/+60
| | | | | | | | | | | Looking at the schema in 60basev2.ldif there were many attributes that did not have an ORDERING matching rule specified correctly. There were also a number of attributeTypes that should have been just SUP distinguishedName that had a combination of SUP, SYNTAX, ORDERING, etc. This requires 389-ds-base-1.2.8.0-1+ ticket 1153
* Added functional test runner.Endi S. Dewata2011-04-056-7/+14068
|
* Change default gecos from uid to first and last name.Rob Crittenden2011-04-058-16/+16
| | | | ticket 1146
* Initial Selenium test cases.Endi S. Dewata2011-03-31106-0/+6324
| | | | http://www.freeipa.org/page/Selenium
* code review fixesAdam Young2011-03-3119-142/+124
| | | | this version includes using spec for detail_facets
* default all falseAdam Young2011-03-313-7/+15
| | | | no longer default to all: true for searches, only specify it for user searches
* define entities using builder and more declarative syntaxAdam Young2011-03-3129-2692/+1769
| | | | | | merged hbac and sudo in to single files associaton facet and table supports linking
* update metadata with label changesAdam Young2011-03-311-195/+234
|
* Fixed labels for sudo and hbac rulesAdam Young2011-03-312-2/+2
|
* Add note about ipa-dns-install to ipa-server-install man page.Jan Cholasta2011-03-311-0/+7
| | | | ticket 1082
* Cache the value of get_ipa_config() in the request context.Rob Crittenden2011-03-311-0/+7
| | | | | | | | There are some operations that fetch the configuration multiple times. This will return a cached value instead of getting it from LDAP over and over. ticket 1023
* Escape LDAP characters in member and memberof searchesJr Aquino2011-03-311-2/+4
| | | | https://fedorahosted.org/freeipa/ticket/1140
* Make retrieval of the CA during DNS discovery non-fatal.Rob Crittenden2011-03-301-1/+2
| | | | ticket 1135
* Allow a client to enroll using principal when the host has a OTPRob Crittenden2011-03-301-0/+18
| | | | | | | | | If the host has a one-time password but krbPrincipalName wasn't set yet then the enrollment would fail because writing the principal is not allowed. This creates an ACI that only lets it be written if it is not already set. ticket 1075
* Replica installation fails for self-signed serverMartin Kosek2011-03-301-1/+2
| | | | | | | When IPA server was configured as self-signed (--selfsign option) the replica always failed to install. https://fedorahosted.org/freeipa/ticket/1122
* Fixed undefined label in permission adder dialog box.Endi S. Dewata2011-03-291-0/+3
| | | | | | | The IPA.rights_widget was fixed to invoke the base init() method to load the i18n labels properly. Ticket 1113
* Inconsistent error message for duplicate userMartin Kosek2011-03-291-1/+1
| | | | | | | | When duplicate user is added an inconsistent error message to the rest of the framework is printed. This patch changes this to standard duplicate error message. https://fedorahosted.org/freeipa/ticket/1116
* Fix wording of error message.Jan Cholasta2011-03-291-1/+1
| | | | ticket 1009
* Fix gidnumber option of user-add command.Pavel Zuna2011-03-291-14/+16
| | | | Ticket #1127
* Fix resource leaks.Simo Sorce2011-03-281-0/+2
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/1119
* Become IPA 2.0.0release-2-0-0Rob Crittenden2011-03-241-1/+1
|
* Fix uninitialized variable.Simo Sorce2011-03-241-1/+1
| | | | https://fedorahosted.org/freeipa/ticket/1118
* Prevent stacktrace when DNS AAAA record is addedMartin Kosek2011-03-221-1/+1
| | | | | | | | | This patch fixes a stacktrace that is printed out when a IPv6 AAAA record with subnet prefix length (e.g. /64) is added. The same error message as when IPv4 record with subnet prefix length is used. https://fedorahosted.org/freeipa/ticket/1115
* Wait for Directory Server ports to openMartin Kosek2011-03-213-12/+34
| | | | | | | | | | | When Directory Server operation is run right after the server restart the listening ports may not be opened yet. This makes the installation fail. This patch fixes this issue by waiting for both secure and insecure Directory Server ports to open after every restart. https://fedorahosted.org/freeipa/ticket/1076
* Automatically update IPA LDAP on rpm upgradesRob Crittenden2011-03-215-41/+103
| | | | | | | | | | | | | | | Re-enable ldapi code in ipa-ldap-updater and remove the searchbase restriction when run in --upgrade mode. This allows us to autobind giving root Directory Manager powers. This also: * corrects the ipa-ldap-updater man page * remove automatic --realm, --server, --domain options * handle upgrade errors properly * saves a copy of dse.ldif before we change it so it can be recovered * fixes an error discovered by pylint ticket 1087
* Removed nested role from UI.Endi S. Dewata2011-03-181-2/+1
| | | | | | | | | Nested role is not supported in 2.0.x, so the association facet for it should be removed from the UI. The attribute_members in role.py needs to be fixed because it is used to generate the association facet automatically. Ticket 1092.
* pwpolicy priorityAdam Young2011-03-181-2/+3
| | | | | | Priority is now a required field in order to add a new password policy. Thus, not having the field present means we cannot create one. https://fedorahosted.org/freeipa/ticket/1102
* Update translation file (ipa.pot).Pavel Zuna2011-03-181-955/+6091
|