summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
* UI for OTP tokensPetr Vobornik2014-03-126-9/+354
| | | | | | https://fedorahosted.org/freeipa/ticket/3369 Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* Fix handling of action visibility change in action panelPetr Vobornik2014-03-121-0/+18
| | | | Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* Use general password dialog for host OTPPetr Vobornik2014-03-121-136/+16
| | | | Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* Password DialogPetr Vobornik2014-03-124-1/+351
| | | | Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* Fixed doc examples in Spec_modPetr Vobornik2014-03-121-1/+3
| | | | Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* Declarative replacement of array item in specification objectPetr Vobornik2014-03-121-1/+49
| | | | | | | | This patch adds option to define which item of which array attribute of specification object will be replaced by a new value. The difference between combination of $add and $del is that it keeps position of that item in the array. Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* Added empty value meaning to boolean formatterPetr Vobornik2014-03-122-4/+20
| | | | | | | | | Boolean object properties can have different default meaning for not defined value. This patch allows to defined this meaning to `boolean_formatter` by introduction of `emty_value` property. `boolean_state_evaluator` was modified to leverage it as well. Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* ipa-replica-install never checks for 7389 portMartin Kosek2014-03-112-24/+11
| | | | | | | | | | | | | | | When creating replica from a Dogtag 9 based IPA server, the port 7389 which is required for the installation is never checked by ipa-replica-conncheck even though it knows that it is being installed from the Dogtag 9 based FreeIPA. If the 7389 port would be blocked by firewall, installation would stuck with no hint to user. Make sure that the port configuration parsed from replica info file is used consistently in the installers. https://fedorahosted.org/freeipa/ticket/4240 Reviewed-By: Petr Viktorin <pviktori@redhat.com>
* Log unhandled exceptions in certificate renewal scripts.Jan Cholasta2014-03-107-211/+262
| | | | | | https://fedorahosted.org/freeipa/ticket/4093 Reviewed-By: Petr Viktorin <pviktori@redhat.com>
* webui: Don't act on keyboard events which originated in different dialogPetr Vobornik2014-03-051-2/+33
| | | | | | | | | | | | | | | | | | Fixes issue when: 1. 2 dialogs are opened 2. top dialog's close button is focused 3. user presses enter to execute 'close' action 4. dialog is immediately closed (enter key is still pressed) 5. second dialog automatically receives focus (it's top dialog now) 6. user releases the key 7. second dialog reacts to keyup event - which is by default confirmation mixin's confirm event 8. UNDESIRED behavior occurs Now confirmation mixin remembers which keys were pressed and released and reacts only to those which originated there. https://fedorahosted.org/freeipa/ticket/4098 Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* Typo in warning message where IPA realm and domain name differGabe2014-03-051-1/+1
| | | | | | | | Removed 'y' from warning message. https://fedorahosted.org/freeipa/ticket/4211 Reviewed-By: Simo Sorce <ssorce@redhat.com>
* webui: Focus expand/collapse link in batch_error dialogPetr Vobornik2014-02-271-0/+2
| | | | | | | | Dialog loses focus when the links are clicked making the dialog uncontrollable by keyboard. This patch focuses the link again after expanding/collapsing the error list. Thus keeping the focus in a dialog https://fedorahosted.org/freeipa/ticket/4097 Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
* Make all ipatokenTOTP attributes mandatoryNathaniel McCallum2014-02-211-1/+1
| | | | | | | | Originally we made them all optional as a workaround for the lack of SELFDN support in 389DS. However, with the advent of SELFDN, this hack is no longer necessary. This patch updates TOTP to match HOTP in this regard. Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* Add HOTP supportNathaniel McCallum2014-02-213-1/+5
| | | | Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* Add --force option to ipactlAdam Misnyovszki2014-02-202-48/+67
| | | | | | | | | | | | | | | | If an error occurs in the start up sequence in ipactl start/restart, all the services are stopped. Using the --force option prevents stopping of services that have successfully started, just skips the services which can not be started. ipactl status now shows stopped services also, if the directory server is running. With the contribution of Ana Krivokapic https://fedorahosted.org/freeipa/ticket/3509 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* permissions: Use multivalued targetfilterPetr Viktorin2014-02-201-1/+1
| | | | | | | | | | | | | | | | Change the target filter to be multivalued. Make the `type` option on permissions set location and an (objectclass=...) targetfilter, instead of location and target. Make changing or unsetting `type` remove existing (objectclass=...) targetfilters only, and similarly, changing/unsetting `memberof` to remove (memberof=...) only. Update tests Part of the work for: https://fedorahosted.org/freeipa/ticket/4074 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* ipactl can not restart ipa services if current status is stoppedMisnyovszki Adam2014-02-191-2/+12
| | | | | | | | | | | | | | fixed by starting the directory server when restarting if it is not currently running to enable fetching running services later restart didn't check that also added a check, that if the directory server started at the beginning, there is no need to restart it https://fedorahosted.org/freeipa/ticket/4050 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Update ACIs to permit users to add/delete their own tokensNathaniel McCallum2014-02-132-0/+2
| | | | | | https://fedorahosted.org/freeipa/ticket/4087 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* Add support for managed permissionsPetr Viktorin2014-02-121-2/+2
| | | | | | | | | | | | | | | | This adds support for managed permissions. The attribute list of these is computed from the "default" (modifiable only internally), "allowed", and "excluded" lists. This makes it possible to cleanly merge updated IPA defaults and user changes on upgrades. The default managed permissions are to be added in a future patch. For now they can only be created manually (see test_managed_permissions). Tests included. Part of the work for: https://fedorahosted.org/freeipa/ticket/4033 Design: http://www.freeipa.org/page/V3/Managed_Read_permissions Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Remove sourcehostcategory from the default HBAC rule.Jan Cholasta2014-02-061-1/+0
| | | | | | https://fedorahosted.org/freeipa/ticket/4158 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Remove working directory for bind-dyndb-ldap plugin.Petr Spacek2014-01-271-4/+1
| | | | | | | | | The working directory will be provided directly by bind-dyndb-ldap package. This partially reverts commit 689382dc833e687d30349b10a8fd7dc740d54d08. https://fedorahosted.org/freeipa/ticket/3967
* Limit memberOf and refInt DS plugins to main IPA suffix.Petr Spacek2014-01-271-1/+12
| | | | | | This drastically improves performance of retro changelog trimming. https://fedorahosted.org/freeipa/ticket/3967
* Convert remaining installer code to LDAPEntry API.Jan Cholasta2014-01-248-35/+37
|
* ipa-replica-install: Move check for existing host before DNS resolution checkPetr Viktorin2014-01-231-15/+24
| | | | | | | | | | | | | | | | | | | The checks for existing host and existing replication agreement set a flag that caused an exit() if any of them failed. Between these checks there was an unrelated check, DNS resolution. If the host and DNS checks both failed, this made it look like the DNS check was the cause of failed install. Especially if the user ignored the DNS check in unattended mode, the output was confusing. Remove the flag and fail directly. Do the replication agreement check first; fixing this with ipa-replica-manage del will also remove the host entry. Also, use the logger for error messages so they appear in the log file as well as on the console. https://fedorahosted.org/freeipa/ticket/3889
* Switch httpd to use default CCACHEMartin Kosek2014-01-221-1/+6
| | | | | | | | | | | | | Stock httpd no longer uses systemd EnvironmentFile option which is making FreeIPA's KRB5CCNAME setting ineffective. This can lead in hard to debug problems during subsequent ipa-server-install's where HTTP may use a stale CCACHE in the default kernel keyring CCACHE. Avoid forcing custom CCACHE and switch to system one, just make sure that it is properly cleaned by kdestroy run as "apache" user during FreeIPA server installation process. https://fedorahosted.org/freeipa/ticket/4084
* Trust domains Web UIPetr Vobornik2014-01-213-4/+76
| | | | | | | | | | | | Add Web UI counterpart of following CLI commands: * trust-fetch-domains Refresh list of the domains associated with the trust * trustdomain-del Remove infromation about the domain associated with the trust. * trustdomain-disable Disable use of IPA resources by the domain of the trust * trustdomain-enable Allow use of IPA resources by the domain of the trust * trustdomain-find Search domains of the trust https://fedorahosted.org/freeipa/ticket/4119
* Use only system fontsPetr Vobornik2014-01-2111-137/+105
| | | | | | | | | | | | | | | | This commit changes how fonts are used. - remove usage of bundled fonts and only system fonts are used instead - by using alias in httpd conf - by using local("Font Name") directive in font-face - removed usage of overpass font - redefined Open Sans font-face declarations. Note: upstream is doing the same change so we will be fine on upgrade. - introduce variable.less for variable definitions and overrides. This file will be very useful when we upgrade to newer RCUE so we will be able to redefine their and bootstrap's variables. Fixes: https://fedorahosted.org/freeipa/ticket/2861
* Use fluid layout in host adder dialog fqdn widgetPetr Vobornik2014-01-213-58/+49
|
* About dialogPetr Vobornik2014-01-214-0/+41
| | | | https://fedorahosted.org/freeipa/ticket/4018
* Increase distance between control buttons and facet-tabsPetr Vobornik2014-01-211-1/+1
| | | | https://fedorahosted.org/freeipa/ticket/3904
* New header spinnerPetr Vobornik2014-01-214-2/+2
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Fix association adder dialog table-body positionPetr Vobornik2014-01-211-6/+2
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Increase margin between facet control buttonsPetr Vobornik2014-01-211-1/+1
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Font awesome glyphs as checkboxes and radiosPetr Vobornik2014-01-212-43/+52
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Use font awesome glyph for dialog close buttonPetr Vobornik2014-01-213-8/+13
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Facet title status iconsPetr Vobornik2014-01-212-14/+19
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Status widgets iconsPetr Vobornik2014-01-214-137/+82
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Replace icons with the ones from Font AwesomePetr Vobornik2014-01-2111-43/+49
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Font Awesome icons in headerPetr Vobornik2014-01-214-9/+21
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Change font-awesome to be compilable by lesscpyPetr Vobornik2014-01-212-2/+6
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Add Font AwesomePetr Vobornik2014-01-2114-0/+968
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Update jQuery to version 2.0.3Petr Vobornik2014-01-213-7/+10
| | | | https://fedorahosted.org/freeipa/ticket/2811
* Remove last usage of jQuery UIPetr Vobornik2014-01-215-27/+105
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Update Dojo to 1.9.1Petr Vobornik2014-01-216-16/+17
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Add style to dialog message areaPetr Vobornik2014-01-211-1/+1
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Fix notification areaPetr Vobornik2014-01-212-6/+40
| | | | https://fedorahosted.org/freeipa/ticket/3904
* username_r in password reset part of unauthorized dialog should be enabled ↵Petr Vobornik2014-01-211-1/+1
| | | | | | as well https://fedorahosted.org/freeipa/ticket/3904
* Do not show section header in unauthorized dialogPetr Vobornik2014-01-211-0/+2
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Focus input on label click in fluid layoutPetr Vobornik2014-01-211-12/+78
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Display required, enabled and error widget states in fluid layoutPetr Vobornik2014-01-213-6/+82
| | | | https://fedorahosted.org/freeipa/ticket/3904