summaryrefslogtreecommitdiffstats
path: root/API.txt
Commit message (Collapse)AuthorAgeFilesLines
* Validate and convert certificate SNJakub Hrozek2011-02-161-3/+3
| | | | | | | | | | | | | The cert plugin only worked OK with decimal certificate serial numbers. This patch allows specifying the serial number in hexadecimal, too. The conversion now works such that: * with no explicit radix, a best-effort conversion is done using int(str, 0) in python. If the format is ambiguous, decimal takes precedence. * a hexadecimal radix can be specified explicitly with the traditional 0x prefix https://fedorahosted.org/freeipa/ticket/958 https://fedorahosted.org/freeipa/ticket/953
* 17-2 Managed netgroups should be invisible ↵Jr Aquino2011-02-161-1/+2
| | | | https://fedorahosted.org/freeipa/ticket/963
* HBAC plugin inconsistent outputMartin Kosek2011-02-161-4/+8
| | | | | | | | This patch adds a proper summary text to HBAC command which is then printed out in CLI. Now, HBAC plugin output is consistent with other plugins. https://fedorahosted.org/freeipa/ticket/596
* Validate MX recordsJakub Hrozek2011-02-161-4/+4
| | | | https://fedorahosted.org/freeipa/ticket/967
* Fixed association facets.Endi S. Dewata2011-02-151-2/+2
| | | | | | | | The association config has been removed because it incorrectly assumes there is only one association between two entities. Now each association is defined separately using association facets. The service.py has been modified to specify the correct relationships. The API.txt has been updated. https://fedorahosted.org/freeipa/ticket/960
* A privilege cannot be a member of a permission, remove it from metadataRob Crittenden2011-02-151-4/+2
| | | | ticket 970
* The --out option wasn't working at all with cert-show.Rob Crittenden2011-02-141-1/+1
| | | | | | | | Also fix some related problems in write_certificate(), handle either a DER or base64-formatted incoming certificate and don't explode if the filename is None. ticket 954
* Remove obsolete record types from DNSJakub Hrozek2011-02-141-20/+4
| | | | https://fedorahosted.org/freeipa/ticket/923
* API fix for dns -> dnsrecord change in permission pluginRob Crittenden2011-02-141-7/+7
|
* Update API.txt with updated usercertificate in service-findRob Crittenden2011-02-101-4/+3
|
* Add the entitlement API to API.txtRob Crittenden2011-02-101-0/+63
| | | | | | | It was missed because the whole module was skipped if python-rhsm wasn't loaded. ticket 919
* Set minimum for Kerberos policy max life and max renew.Pavel Zuna2011-02-101-2/+2
| | | | Fix #847
* Use correct LDAP attributes for city and state.Rob Crittenden2011-02-021-6/+6
| | | | | | Also add a unit test for address. Ticket 889
* Typos in freeIPA messagesMartin Kosek2011-02-021-2/+2
| | | | | | | | | | This patch fixes several reported typos in IPA messages and in comments. Contributors file has been updated + the original author of the patch reporting the typos was added. https://fedorahosted.org/freeipa/ticket/848
* Add an address for a nameserver when a new zone is created during installJakub Hrozek2011-01-311-2/+3
| | | | https://fedorahosted.org/freeipa/ticket/881
* Rename permissions and privileges to be more readable.Rob Crittenden2011-01-311-6/+3
| | | | | | | This also drops description from permissions since it seems redundant and fixes up the help text a little. ticket 792
* Fix API.txtJakub Hrozek2011-01-281-7/+13
|
* Enforce that all NS records are resolvableJakub Hrozek2011-01-281-0/+2
| | | | | | | Bind cannot load a zone if any of its name server records is not resolvable. https://fedorahosted.org/freeipa/ticket/838
* Add example of DNS SRV record and a simple validatorJakub Hrozek2011-01-281-4/+4
| | | | https://fedorahosted.org/freeipa/ticket/846
* Delete the whole DNS record with no parametersJakub Hrozek2011-01-281-1/+2
| | | | | | | | | Error out when deleting a nonexistent DNS record Also fixes the DNS unit tests. https://fedorahosted.org/freeipa/ticket/816 https://fedorahosted.org/freeipa/ticket/829
* Add support for account unlockingJan Zeleny2011-01-281-0/+6
| | | | | | | | This patch adds command ipa user-unlock and some LDAP modifications which are required by Kerberos for unlocking to work. Ticket: https://fedorahosted.org/freeipa/ticket/344
* api version updateAdam Young2011-01-261-18/+18
|
* Enforce uniqueness on (key,info) pairs in automount keysJakub Hrozek2011-01-251-13/+14
| | | | https://fedorahosted.org/freeipa/ticket/293
* Removed 'name' from 'Sudo Command Group name'.Endi S. Dewata2011-01-241-7/+7
|
* Remove del-all from dnsrecord_del from API.txtRob Crittenden2011-01-211-2/+1
| | | | This was from an unpushed patch I had in my tree.
* Add new option to dns_del and always ask permission options to API.txtRob Crittenden2011-01-211-19/+20
|
* Provide API to check if IPA DNS is enabled on some serverSimo Sorce2011-01-191-0/+5
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/600
* update API removal of idnssoamaximum from dns APIs broke the build. THis ↵Adam Young2011-01-181-6/+3
| | | | fixes it.
* Remove old DNS plugin commands from API validationSimo Sorce2011-01-141-139/+0
|
* Fix API validationSimo Sorce2011-01-141-1/+1
|
* Add API version and have server reject incompatible clients.Rob Crittenden2011-01-141-0/+2752
This patch contains 2 parts. The first part is a small utility to create and validate the current API. To do this it needs to load ipalib which on a fresh system introduces a few problems, namely that it relies on a python plugin to set the default encoding to utf8. For our purposes we can skip that. It is also important that any optional plugins be loadable so the API can be examined. The second part is a version exchange between the client and server. The version has a major and a minor version. The major verion is updated whenever existing API changes. The minor version is updated when new API is added. A request will be rejected if either the major versions don't match or if the client major version is higher than then server major version (though by implication new API would return a command not found if allowed to proceed). To determine the API version of the server from a client use the ping command. ticket 584