summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
* Fix IPA install for secure umaskMartin Kosek2011-06-213-25/+37
| | | | | | | | Make sure that IPA can be installed with root umask set to secure value 077. ipa-server-install was failing in DS configuration phase when dirsrv tried to read boot.ldif created during installation. https://fedorahosted.org/freeipa/ticket/1282
* Update translation filesRob Crittenden2011-06-2118-18126/+110008
|
* Make data type of certificates more obvious/predictable internally.Rob Crittenden2011-06-211-1/+1
| | | | | | | | | | | | | | | | | | | For the most part certificates will be treated as being in DER format. When we load a certificate we will generally accept it in any format but will convert it to DER before proceeding in normalize_certificate(). This also re-arranges a bit of code to pull some certificate-specific functions out of ipalib/plugins/service.py into ipalib/x509.py. This also tries to use variable names to indicate what format the certificate is in at any given point: dercert: DER cert: PEM nsscert: a python-nss Certificate object rawcert: unknown format ticket 32
* tooltips for host addAdam Young2011-06-222-2/+4
| | | | | https://fedorahosted.org/freeipa/ticket/1363 https://fedorahosted.org/freeipa/ticket/1361
* Fixed problem with navigation tabs on reload.Endi S. Dewata2011-06-211-6/+8
| | | | | | | The navigation have been fixed to show the correct active tabs after browser reload. Ticket #1362
* The IP address provided to ipa-server-install must be localRob Crittenden2011-06-201-1/+1
| | | | | | | Compare the configured interfaces with the supplied IP address and optional netmask to determine if the interface is available. https://fedorahosted.org/freeipa/ticket/1175
* entity select for password policy http://fedorahosted.org/freeipa/ticket/1110Adam Young2011-06-211-1/+8
|
* ipaddress for host addAdam Young2011-06-202-22/+56
| | | | updated label triggered an API change
* editable entity_selectAdam Young2011-06-202-3/+62
| | | | | | | | jsl fixes https://fedorahosted.org/freeipa/ticket/1043 remove redundant call to focus.
* no redirect on unknown error If the error name is indicates a server wide ↵Adam Young2011-06-201-9/+22
| | | | | | | | error, do not attempt to redirect. this variation has a whitelist of errors on which to redirect. https://fedorahosted.org/freeipa/ticket/1281
* entity select undoAdam Young2011-06-201-2/+2
| | | | | | | Tests for dirty after the RPC call has completed and the select has updated Passes the original value to the RPC completion, so it isn't lost upon RPC completion https://fedorahosted.org/freeipa/ticket/1340
* Removed FreeWay font files.Endi S. Dewata2011-06-206-22/+64
| | | | | The CSS files in install/html and install/migration have been modified to use the Overpass font.
* service host entity select Use the entity select widget for add serviceAdam Young2011-06-201-2/+3
|
* hide automount tabs.Adam Young2011-06-202-5/+7
| | | | | | the tabs are required for natigation, but they should not be visible, as the breadcrub provides the navigation for them instead. Moved the automount tabs up one level so that it uses the two level style
* entity select widget for manager https://fedorahosted.org/freeipa/ticket/1149Adam Young2011-06-201-2/+9
|
* Improve IP address handling in IPA option parserMartin Kosek2011-06-194-6/+8
| | | | | | | | | | | Implements a way to pass match_local and parse_netmask parameters to IP option checker. Now, there is just one common option type "ip" with new optional attributes "ip_local" and "ip_netmask" which can be used to pass IP address validation parameters. https://fedorahosted.org/freeipa/ticket/1333
* Storing page number in URL.Endi S. Dewata2011-06-173-57/+85
| | | | | | | | The association facet has been modified to store the current page number in the browser's URL. This way page changes are stored in browser's history allowing the back button to work properly. Ticket #1264
* Merged direct and indirect association facetsEndi S. Dewata2011-06-164-11/+93
| | | | | | | | The direct and indirect associations are now displayed in the same facet. The type of association to be displayed can be selected using radio buttons. Ticket #1338
* test dirty onchangeAdam Young2011-06-162-9/+9
| | | | | | instead of blindly setting dirty, check if the filed has a different value than it originally did. https://fedorahosted.org/freeipa/ticket/1337
* test dirty multivalue test the multivalue widgets for changes before showing ↵Adam Young2011-06-161-1/+22
| | | | the undo link. https://fedorahosted.org/freeipa/ticket/1337
* test dirty textareaAdam Young2011-06-161-1/+1
| | | | runs the testdirty check before setting the undo tag for a textarea
* test for dirtyAdam Young2011-06-161-1/+47
| | | | | | instead of always setting dirty, we do the original test, and then set the flag and show the link. https://fedorahosted.org/freeipa/ticket/1337
* Fixed self-service links.Endi S. Dewata2011-06-1614-177/+98
| | | | | | | | | | | | In self-service mode the user's association facets have been modified such that the entries are not linked since the only available entity is the user entity. A 'link' parameter has been added to IPA.association_facet and IPA.column to control whether to link the entries. The link_handler() method can be used to define how to handle the link. Ticket #1072
* Renamed associate.js to association.js.Endi S. Dewata2011-06-169-8/+8
|
* Fixed paging for indirect members.Endi S. Dewata2011-06-152-69/+1
| | | | | Since ticket #1273 has been fixed, the indirect members can be shown using the regular association facet which supports paging.
* no redirect on searchAdam Young2011-06-152-4/+13
| | | | https://fedorahosted.org/freeipa/ticket/1281
* Fixed build break.Endi S. Dewata2011-06-151-2/+12
| | | | | The Makefile.am freeipa.spec.in have been updated according to the recent file changes.
* Add port 9443 to replica port checkingMartin Kosek2011-06-151-6/+7
| | | | | | | Port 9443 (Agent secure port on PKI-CA) was missing. Additionaly, checked port descriptions case consistency fixed. https://fedorahosted.org/freeipa/ticket/1321
* Improve DNS zone creationMartin Kosek2011-06-151-5/+3
| | | | | | | | | | | | | | | When a new DNS zone is being created a local hostname is set as a nameserver of the new zone. However, when the zone is created during ipa-replica-prepare, the the current master/replica doesn't have to be an IPA server with DNS support. This would lead to DNS zones with incorrect NS records as they wouldn't point to a valid name server. Now, a list of all master servers with DNS support is retrieved during DNS zone creation and added as NS records for a new DNS zone. https://fedorahosted.org/freeipa/ticket/1261
* dns multiple records show multiple records that share the same dnsnameAdam Young2011-06-142-50/+63
|
* List page spacing changeskylebaker2011-06-141-8/+7
|
* Search bar style and positioning changeskylebaker2011-06-1416-25/+1039
|
* Fixed tab navigation.Endi S. Dewata2011-06-141-0/+2
| | | | | | | | The buttons were previously skipped during tab navigation because they do not have an href attribute. The IPA.button has been fixed to always provide an href attribute. Ticket #983
* Do better detection on status of CA DS instance when installing.Rob Crittenden2011-06-131-4/+4
| | | | | | | | | The conditional used to determine if thd CA 389-ds instance was already configured was rather poor so it was possible to pass command-line arguments in to confuse it. This would cause it to not be installed at all causing the dogtag installation to fail in a strange way. https://fedorahosted.org/freeipa/ticket/1244
* Entitlement status.Endi S. Dewata2011-06-1315-110/+321
| | | | | A new facet has been added to show entitlement status and download the registration certificate.
* Added selectable option for table widget.Endi S. Dewata2011-06-132-32/+46
| | | | | | | A selectable option has been added to the table widget to show/hide the checkbox column for selecting table rows. By default it's set to true. The indirect association facet has been modified to hide the column because it is non-editable.
* Fixed resizing issues.Endi S. Dewata2011-06-1316-454/+617
| | | | | | | | | | The UI has been modified to fix some resizing issues: Previously the height of facet content was roughly calculated using resize(). Now the height can be more accurately defined in CSS. Previously the UI width was fixed. The HTML layout and background images have been modified to support horizontal expansion if needed.
* Fix directory manager password validation in ipa-nis-manage.Jan Cholasta2011-06-131-2/+8
| | | | ticket 1283, 1284
* Remove root autobind search restriction, fix upgrade logging & error handling.Rob Crittenden2011-06-132-12/+14
| | | | | | | | | | | | | | | There was no point in limiting autobind root to just search cn=config since it could always just modify its way out of the box, so remove the restriction. The upgrade log wasn't being created. Clearing all other loggers before we calling logging.basicConfig() fixes this. Add a global exception when performing updates so we can gracefully catch and log problems without leaving the server in a bad state. https://fedorahosted.org/freeipa/ticket/1243 https://fedorahosted.org/freeipa/ticket/1254
* IPA installation with --no-host-dns failsMartin Kosek2011-06-103-12/+23
| | | | | | | | | | | | --no-host-dns option should allow installing IPA server on a host without a DNS resolvable name. Update parse_ip_address and verify_ip_address functions has been changed not to return None and print error messages in case of an error, but rather let the Exception be handled by the calling routine. https://fedorahosted.org/freeipa/ticket/1246
* Fix external CA installationRob Crittenden2011-06-091-2/+2
| | | | | | | | When re-creating the CADS instance it needs to be more fully-populated so we have enough information to create an SSL certificate and move the principal to a real entry. https://fedorahosted.org/freeipa/ticket/1245
* Skip know_host check for ipa-replica-conncheckMartin Kosek2011-06-081-1/+3
| | | | | | | | | | | | When IPA replica is installed and the master machine record is not in ~/.ssh/known_hosts, ipa-replica-install will prompt user to answer a question about adding a host to this file. This has, however, a potential to break automatic tests. ipa-replica-conncheck should not require any further user interaction when all mandatory options are filled. https://fedorahosted.org/freeipa/ticket/1305
* Connection check program for replica installationMartin Kosek2011-06-087-0/+508
| | | | | | | | | | | | | | | | | | | | | | | | | | When connection between a master machine and future replica is not sane, the replica installation may fail unexpectedly with inconvenient error messages. One common problem is misconfigured firewall. This patch adds a program ipa-replica-conncheck which tests the connection using the following procedure: 1) Execute the on-replica check testing the connection to master 2) Open required ports on local machine 3) Ask user to run the on-master part of the check OR run it automatically: a) kinit to master as default admin user with given password b) run the on-master part using ssh 4) When master part is executed, it checks connection back to the replica and prints the check result This program is run by ipa-replica-install as mandatory part. It can, however, be skipped using --skip-conncheck option. ipa-replica-install now requires password for admin user to run the command on remote master. https://fedorahosted.org/freeipa/ticket/1107
* Fix forward zone creation in ipa-replica-prepareMartin Kosek2011-06-081-2/+3
| | | | | | | When a new forward zone is created in ipa-replica-prepare the master DNS address gets corrupted by invalid A/AAAA record. https://fedorahosted.org/freeipa/ticket/1260
* dialog scrolling tableAdam Young2011-06-036-20/+29
| | | | Tables on the dialog page need to have the scrolling set but should not resize with the main window, since their window is a JQuery UI dialog.
* Fixed blank dialog box on internal error.Endi S. Dewata2011-06-031-12/+16
| | | | | | | | | Previously when an internal error occurs on the server the UI will display a blank error dialog box. To fix the problem the string message thrown by Ajax has been converted into an object containing the error message. Ticket #1280
* Temporary fix for indirect member tabs.Endi S. Dewata2011-06-029-25/+612
| | | | | | | | | | | | | Since the group-show command doesn't return indirect members, the tabs for group's indirect members have been reverted to call user-find with the --in-groups parameter to get the entries. However, this is only a temporary solution since the user-find command returns both direct and indirect members (ticket #1273). The Selenium test for groups has been modified to test nested groups and verify indirect members. The verification currently will fail due to the above issue.
* scrollable content areasAdam Young2011-06-028-139/+2673
| | | | | | | | | | Turn off the side scroll bars for pages. Resizes the table when the browser resizes For stables, the rows scroll, but not the header. For details, the content area scrolls. Reserves 400 picesl for the header/ footer. Resize is only done on reload
* automount delete keyAdam Young2011-06-017-18/+185
| | | | | | | | | | | | | | | | | | indirect automount maps code review changes for automount: Removed: fields for mount and parentmap in maps details since they are not present in show or mod Hid undo link for adder dialog set up click handler for checkboxes when row does not have primary key removed add override in automountmap_adder_dialog moved 'var input...' in automount.js line 158 to start of method. changed logic in if statmenet ,dialog.js line 628 it if (!first) as suggested
* redirect on error Code for redirecting on error has been moved to IPA.facet ↵Adam Young2011-06-013-23/+21
| | | | so it can be called from both details and assocaiton facets.