summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
* no dnsAdam Young2011-07-202-3/+20
| | | | | | | | | Remove all DNS entities if the DNS server is not installed. Removes it from the navigation as well. https://fedorahosted.org/freeipa/ticket/1498 move created count to last thing in the funciton.
* Correct sudo runasuser and runasgroup attributes in schemaJr Aquino2011-07-192-0/+41
| | | | https://fedorahosted.org/freeipa/ticket/1309
* Correct behavior for sudorunasgroup vs sudorunasuserJr Aquino2011-07-192-0/+3
| | | | https://fedorahosted.org/freeipa/ticket/1309
* Don't delete NIS netgroup compat suffix on 'ipa-nis-manage disable'.Jan Cholasta2011-07-191-15/+0
| | | | ticket 1469
* Clean up of IP address checks in install scripts.Jan Cholasta2011-07-193-27/+11
| | | | | | Fixes ipa-dns-install incorrect warning. ticket 1486
* Fixed host details fields.Endi S. Dewata2011-07-181-11/+11
| | | | | | | The host details facet has been fixed to remove a redundant field and include some missing fields. Ticket #1484
* Removed reverse zones from host adder dialog.Endi S. Dewata2011-07-182-9/+31
| | | | | | | The host adder dialog has been modified to specify the new flag for retrieving the forward zones only. Ticket #1458
* Entity select widget improvementsEndi S. Dewata2011-07-1818-297/+453
| | | | | | | | The IPA.entity_select_widget has been modified into a searchable and editable drop down list. The base functionality has been extracted into IPA.combobox_widget. Ticket #1361
* Set the ipa-modrdn plugin precedence to 60 so it runs lastRob Crittenden2011-07-172-0/+6
| | | | | | | | The default precedence for plugins is 50 and the run in more or less alphabetical order (but not guaranteed). This plugin needs to run after the others have already done their work. https://fedorahosted.org/freeipa/ticket/1370
* Create tool to manage dogtag replication agreementsRob Crittenden2011-07-174-0/+547
| | | | | | | | | | | | | | | | | | | | For the most part the existing replication code worked with the following exceptions: - Added more port options - It assumed that initial connections were done to an SSL port. Added ability to use startTLS - It assumed that the name of the agreement was the same on both sides. In dogtag one is marked as master and one as clone. A new option is added, master, the determines which side we're working on or None if it isn't a dogtag agreement. - Don't set the attribute exclude list on dogtag agreements - dogtag doesn't set a schedule by default (which is actually recommended by 389-ds). This causes problems when doing a force-sync though so if one is done we set a schedule to run all the time. Otherwise the temporary schedule can't be removed (LDAP operations error). https://fedorahosted.org/freeipa/ticket/1250
* Use information from the certificate subject when setting the NSS nickname.Rob Crittenden2011-07-171-1/+1
| | | | | | | | | | | There were a few places in the code where certs were loaded from a PKCS#7 file or a chain in a PEM file. The certificates got very generic nicknames. We can instead pull the subject from the certificate and use that as the nickname. https://fedorahosted.org/freeipa/ticket/1141
* Validate that the certificate subject base is in valid DN format.Rob Crittenden2011-07-171-1/+26
| | | | https://fedorahosted.org/freeipa/ticket/1176
* Fix typo in ipa-replica-prepareMartin Kosek2011-07-181-1/+0
| | | | | https://fedorahosted.org/freeipa/ticket/1327 https://fedorahosted.org/freeipa/ticket/1347
* Check IPA configuration in install toolsMartin Kosek2011-07-187-9/+41
| | | | | | | | | Install tools may fail with unexpected error when IPA server is not installed on a system. Improve user experience by implementing a check to affected tools. https://fedorahosted.org/freeipa/ticket/1327 https://fedorahosted.org/freeipa/ticket/1347
* Fix exit status of ipa-nis-manage enable.Jan Cholasta2011-07-151-8/+5
| | | | ticket 1247
* Fix self-signed replica installationMartin Kosek2011-07-141-0/+4
| | | | | | | | | When a replica for self-signed server is being installed, the installer crashes with "Not a dogtag CA installation". Make sure that installation is handled correctly for both dogtag and self-signed replicas. https://fedorahosted.org/freeipa/ticket/1479
* Fix ipa-dns-installMartin Kosek2011-07-151-19/+13
| | | | | | | | | | | | | When DNS plugin is installed via ipa-dns-install and user has a valid Kerberos ticket at the time, the DNS installation is corrupt and named won't start, reporting Preauthentication error. When the non-DM identity is used for authentication, krbprincipalkey attribute in DNS service LDAP record is not created, thus leading to the error. This patch makes sure that authentication with Directory Manager password is used every time. https://fedorahosted.org/freeipa/ticket/1483
* Fix creation of reverse DNS zones.Jan Cholasta2011-07-158-77/+117
| | | | | | | | | | | | | Create reverse DNS zone for /24 IPv4 subnet and /64 IPv6 subnet by default instead of using the netmask from the --ip-address option. Custom reverse DNS zone can be specified using new --reverse-zone option, which replaces the old --ip-address netmask way of creating reverse zones. The reverse DNS zone name is printed to the user during the install. ticket 1398
* Disallow direct modifications to enrolledBy.Rob Crittenden2011-07-145-25/+31
| | | | | | | | | | This fixes a regression. We don't need to allow enrolledBy to be modified because it gets written in the ipa_enrollment plugin which does internal operations so bypasses acis. https://fedorahosted.org/freeipa/ticket/302
* Fixed label capitalizationEndi S. Dewata2011-07-148-59/+305
| | | | | | | | The CSS text-transform sometimes produces incorrect capitalization, so the code has been modified to use translated labels that already contain the correct capitalization. Ticket #1424
* dnsrecord-mod uiAdam Young2011-07-1314-497/+498
| | | | | | | | | | | | | | | | | | | | | | | | | | Brings the DNS record infrastructure in line with the other entities. Uses widgets, nested search, and a littel bit of overloading for dns specific behavior The records now have their own page. simplified link widget and use for dns links work for nested entities. change the field in the link widget to other_entity to avoid name collision. unit test for entity link. fixed reference to entity for getting pkeys work around lack of setattr for dns record mod. update wasn't deducing locked_field type correctly. don't overwrite param_info in init data is required on adder dialog delete works for multiple records use show instead of find for entity_link_widget. https://fedorahosted.org/freeipa/ticket/1038 https://fedorahosted.org/freeipa/ticket/1448 https://fedorahosted.org/freeipa/ticket/577 https://fedorahosted.org/freeipa/ticket/1460
* remove HBAC warning from static UIAdam Young2011-07-131-44/+47
|
* Convert nsaccountlock to always work as bool towards Python codeAlexander Bokovoy2011-07-131-2/+9
| | | | | | | | https://fedorahosted.org/freeipa/ticket/1259 Python code will see nsaccountlock as bool. JavaScript code will also see it as bool. This allows native boolean operations with the lock field. Passes both CLI and WebUI tests.
* Fixed collapsed table in Chrome.Endi S. Dewata2011-07-121-5/+3
| | | | | | | The .content-table class has been modified to expand properly in Firefox and Chrome. Ticket #1450
* entity_select namingAdam Young2011-07-121-0/+1
| | | | http://fedorahosted.org/freeipa/ticket/1467
* Added sudo options.Endi S. Dewata2011-07-116-80/+286
| | | | | | | A table has been added into sudo rule details page for managing sudo options. Ticket #1447
* indirect adminsAdam Young2011-07-111-3/+5
| | | | https://fedorahosted.org/freeipa/ticket/1465
* clear errors on resetAdam Young2011-07-083-4/+10
| | | | https://fedorahosted.org/freeipa/ticket/1446
* Fixed missing entitlement import button labelEndi S. Dewata2011-07-081-1/+1
| | | | Ticket #1456
* check required on addAdam Young2011-07-083-37/+46
| | | | | | | | | previsouly was checked on key down, but that does the check too soon. Next attempt was on blur, but that had numerous problems. This now checkes when the add button is clicked. works for entity_select widget, too Checks upon form submission https://fedorahosted.org/freeipa/ticket/1437
* Fixed test fixture file name.Endi S. Dewata2011-07-071-0/+0
|
* Fixed dirty dialog problems in HBAC/Sudo rules.Endi S. Dewata2011-07-075-110/+83
| | | | | | | The update() in HBAC/Sudo details facet has been fixed to call the callback function which will show the dirty dialog properly. Ticket #1439
* Fixed blank self-service page.Endi S. Dewata2011-07-061-0/+2
| | | | | | | The self-service navigation has been fixed to include the root of the navigation path. Ticket #1445
* HBAC deny warningAdam Young2011-07-0610-31/+254
| | | | | | | | shows dialog if there are any HBAC deny rules. Dialog provides option to navigate to the HBAC page. Deny rules have their rule type value show up in red. Only shows up fro administrators, not for self service users. https://fedorahosted.org/freeipa/ticket/1421
* Fixed HBAC/Sudo rules associations.Endi S. Dewata2011-07-064-0/+50
| | | | | | | | The HBAC/Sudo rules associations in users, groups, hosts and host groups have been fixed to use the correct associator and method names. Ticket #1438
* password expiration labelAdam Young2011-07-051-10/+10
|
* validate intsAdam Young2011-07-051-33/+40
| | | | | | validate integers whether meta comes from metadata or param_info https://fedorahosted.org/freeipa/ticket/1415
* Fixed object_name usage.Endi S. Dewata2011-07-051-26/+20
| | | | | | | | | | | The object_name attribute was used as both an identifier and a label which sometimes require different values (e.g. hbacrule vs. HBAC rule). The code that uses object_name as an identifier has been changed to use the 'name' attribute instead. The values of the object_name attribute have been fixed to become proper labels. Ticket #1217
* Added arrow icons for details sections.Endi S. Dewata2011-07-014-25/+20
| | | | | | | New arrow icons have been added to replace the plus/minus sign icons for expanding/collapsing details sections. Ticket #1422
* entity link for password policyAdam Young2011-07-012-2/+65
| | | | | | | https://fedorahosted.org/freeipa/ticket/1111 reset() now hides both the link and the label calucalating should_link is now a function that can be overloaded.
* Fixed button style in EntitlementsEndi S. Dewata2011-07-011-1/+1
| | | | | | | | The entitlement buttons are located serveral levels underneath facet-controls, so the CSS selector has been fixed to extend beyond facet-controls' immediate children. Ticket #1419
* Added confirmation dialog for user activation.Endi S. Dewata2011-07-012-49/+119
| | | | | | | | | The IPA.user_status_widget has been modified such that it checks the facet dirty status and asks the admin to either Update or Reset the changes. Then the widget shows a dialog to confirm whether the admin wants to activate/deactivate the user. Ticket #1395
* config widgets entity select default group checkbox for migrationAdam Young2011-06-303-12/+29
|
* Fixed hard-coded messages.Endi S. Dewata2011-06-308-104/+177
| | | | | | Hard-coded messages in the UI have been replaced with I18n messages. Ticket #1396
* Removed unused images.Endi S. Dewata2011-06-3014-8/+0
| | | | | | Images that are no longer used have been removed. Ticket #990
* ipadefaultemaildomainAdam Young2011-06-301-0/+1
|
* config fieldsAdam Young2011-06-302-215/+449
| | | | | | | | | | https://fedorahosted.org/freeipa/ticket/1403 https://fedorahosted.org/freeipa/ticket/1404 https://fedorahosted.org/freeipa/ticket/1405 https://fedorahosted.org/freeipa/ticket/1406 fields and sections for config screen Using multivalue controls for object classes
* undefined pkeys https://fedorahosted.org/freeipa/ticket/1399Adam Young2011-06-292-1/+8
| | | | Thereis not metatdata defined pkey for config, so we need to short circuit the logic that uses the metatdata pkey to look up the key from the hashurl.
* containing entity pkeysAdam Young2011-06-292-6/+29
| | | | | | | | | Instead of looking for a match on the entity name, use the nesting structure of containing entites to grab their pkeys. Code review fixes https://fedorahosted.org/freeipa/ticket/674
* shorten url cache state in a javascript variable, and leave on information ↵Adam Young2011-06-2812-56/+95
| | | | | | | | | | | | | | about the current entity in the URL hash params https://fedorahosted.org/freeipa/ticket/674 decrement depth for hidden tabs. Initialize state from url useing delete for removing state stricter attribute matching not incrementing depth for all hidden tabs. whitespace cleanup