summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
* Forbid reinstallation in ipa-client-installMartin Kosek2011-04-291-1/+2
| | | | | | | | | | | | The --force option may be misused to reinstall an existing IPA client. This is not supported and may lead to unexpected errors. When required, the cleanest way to re-install IPA client is to run uninstall and then install again. This patch also includes few cosmetic changes in messages to user to provide more consistent user experience with the script. https://fedorahosted.org/freeipa/ticket/1117
* IPA replica is not started after the rebootMartin Kosek2011-04-281-0/+3
| | | | https://fedorahosted.org/freeipa/ticket/1191
* Entitlement quantity validation.Endi S. Dewata2011-04-277-38/+101
| | | | | | The widget base class has been modified to validate integer value if the type is specified in the metadata. This is used to validate entitlement quantity.
* remove jquery-cookie library https://fedorahosted.org/freeipa/ticket/989Adam Young2011-04-273-98/+0
|
* action panel to top tabsAdam Young2011-04-2614-624/+605
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | replacing the action panel with the Design for 2.1 Significantly cleaned up implementation of intra-entity navigation requires additional CSS work still need to integrate the search controls onto each page cleaning up interface between entity and facet simplified nested tabs logic Fixed role navigation select default tab from the search widget fixed unit tests and jsl keep tabs area allocated set default tab selected whenever the pkey changes. Removing styling that is changing positions of buttons. The logic for that was for action-panel, but does not translate to entity-header. change from metadata name to label for I18N set selected tab in entity_init. Default title for entities without search and pkeys associations in table now link. remove colon from title when not showing pkey added Managed by facet group. Removed entities that are, for some reason, invalid.
* Ensure that the zonemgr passed to the installer conforms to IA5String.Rob Crittenden2011-04-261-1/+12
| | | | ticket 1164
* Delete the sudoers entry when disabling Schema CompatJr Aquino2011-04-251-0/+1
| | | | https://fedorahosted.org/freeipa/ticket/1160
* Upgrade to jquery 1.5.2 https://fedorahosted.org/freeipa/ticket/768Adam Young2011-04-231-1593/+3727
|
* fix JSL errorAdam Young2011-04-221-1/+1
|
* make use of new user-find columns.Adam Young2011-04-221-2/+1
|
* Wait for memberof task and DS to start before proceeding in installation.Rob Crittenden2011-04-221-0/+2
| | | | | | | | | | | | | This was causing a replica DS instance to crash if the task was not completed when we attempted a shutdown to do a restart. In replication.py we were restarting the DS instance without waiting for the ports to become available. It is unlikely that the dn of the memberof task will change but just in case I noted it in the two places it is referenced. ticket 1188
* Standardized action panel buttons creation.Endi S. Dewata2011-04-215-55/+68
| | | | | Action panel buttons are now created in facet's create_action_panel(). This is to allow a subclass to override and customize the buttons.
* Moved adder dialog box into entity.Endi S. Dewata2011-04-2116-139/+158
| | | | | The adder dialog box definition has been moved from search facet into entity to make it accessible from other facets.
* Need force option in DNS zone adder dialogMartin Kosek2011-04-212-4/+12
| | | | | | | | | | | When adding a new DNS zone in the WebUI, IPA server will verify whether the nameserver is in DNS. Sometimes it is necessary to skip the verification. This patch adds a --force option already available in CLI which can skip this the verification. https://fedorahosted.org/freeipa/ticket/1105
* Remove unwanted trimming in text fieldsMartin Kosek2011-04-212-5/+5
| | | | | | | | | | | UI trims whitespace at the beginning or at the end when user data are being saved. This confuses is_dirty function which incorrectly recognizes given field as modified. This patch fixes this issue for both general text fields and ACI filter field. https://fedorahosted.org/freeipa/ticket/1096
* Fix some minor issues uncovered by pylint.Jan Cholasta2011-04-202-2/+3
| | | | | Disable pylint error _ undefined in i18n tests Fix missing os import in ipa-nis-manage
* Entitlement download.Endi S. Dewata2011-04-186-41/+81
| | | | A Download link has been added to download entitlement certificates.
* Entitlement import.Endi S. Dewata2011-04-186-28/+292
| | | | | | | | | | The entitlement facet will invoke entitle_status to check the entitlement status and show the appropriate buttons. If it's unregistered it will show Register and Import button. If it's registered it will show the Consume button only. If it's imported it will show the Import button only. The Import button will open a dialog box for importing entitlement certificate. Ticket #277
* The default groups we create should have ipaUniqueId setRob Crittenden2011-04-154-2/+22
| | | | | | | | This adds a new directive to ipa-ldap-updater: addifnew. This will add a new attribute only if it doesn't exist in the current entry. We can't compare values because the value we are adding is automatically generated. ticket 1177
* Entitlement registration.Endi S. Dewata2011-04-149-52/+638
| | | | | | The entitlement facet will show buttons according to the entitlement status. If it's unregistered, the facet will show a Register button. If it's registered, the facet will show a Consume button.
* Merged IPA.cmd() into IPA.command().Endi S. Dewata2011-04-1318-429/+572
| | | | | | | The IPA.cmd() has been merged into IPA.command(). All invocations and test cases have been converted. Ticket #988
* Fix lint false positives.Jan Cholasta2011-04-131-1/+1
|
* Fix traceback in ipa-nis-manage.Rob Crittenden2011-04-113-3/+10
| | | | | | | | | | | | | | | | | The root user cannot use ldapi because of the autobind configuration. Fall back to a standard GSSAPI sasl bind if the external bind fails. With --ldapi a regular user may be trying this as well, catch that and report a reasonable error message. This also gives priority to the DM password if it is passed in. Also require the user be root to run the ipa-nis-manage command. We enable/disable and start/stop services which need to be done as root. Add a new option to ipa-ldap-updater to prompt for the DM password. Remove restriction to be run as root except when doing an upgrade. Ticket 1157
* Updated Selenium tests.Endi S. Dewata2011-04-1187-350/+1285
| | | | The Selenium tests have been updated to improve robustness.
* Entitlements.Endi S. Dewata2011-04-1110-2/+349
|
* Refactored search facet.Endi S. Dewata2011-04-111-185/+185
| | | | | To simplify customization, the add(), remove(), and refresh() methods have been moved from IPA.search_widget into IPA.search_facet.
* Refactored builder interface.Endi S. Dewata2011-04-119-68/+103
| | | | | | | The IPA.entity_builder has been modified to take a 'factory' parameter in custom facet's and custom dialog's spec. The IPA.dialog has been modified to take an array of fields in the spec. The IPA.search_facet has been modified to take an array of columns in the spec.
* Refactored action panel and client area.Endi S. Dewata2011-04-118-50/+56
| | | | | | | To improve code readability and extensibility the containers for action panel and client area are now created in IPA.entity.setup(). The 'client area' has been renamed into 'content'. The IPA.facet.create() has been renamed to IPA.facet.create_content().
* Add memberHost and memberUser to default indexesJr Aquino2011-04-081-0/+16
| | | | https://fedorahosted.org/freeipa/ticket/1138
* Fix typo in ipa-server-install.Jan Cholasta2011-04-081-1/+1
|
* Fix ORDERING in some attributetypes and remove other unnecessary elements.Rob Crittenden2011-04-053-20/+43
| | | | | | | | | | | Looking at the schema in 60basev2.ldif there were many attributes that did not have an ORDERING matching rule specified correctly. There were also a number of attributeTypes that should have been just SUP distinguishedName that had a combination of SUP, SYNTAX, ORDERING, etc. This requires 389-ds-base-1.2.8.0-1+ ticket 1153
* Added functional test runner.Endi S. Dewata2011-04-055-7/+14067
|
* Initial Selenium test cases.Endi S. Dewata2011-03-31106-0/+6324
| | | | http://www.freeipa.org/page/Selenium
* code review fixesAdam Young2011-03-3119-142/+124
| | | | this version includes using spec for detail_facets
* default all falseAdam Young2011-03-313-7/+15
| | | | no longer default to all: true for searches, only specify it for user searches
* define entities using builder and more declarative syntaxAdam Young2011-03-3129-2692/+1769
| | | | | | merged hbac and sudo in to single files associaton facet and table supports linking
* update metadata with label changesAdam Young2011-03-311-195/+234
|
* Add note about ipa-dns-install to ipa-server-install man page.Jan Cholasta2011-03-311-0/+7
| | | | ticket 1082
* Allow a client to enroll using principal when the host has a OTPRob Crittenden2011-03-301-0/+18
| | | | | | | | | If the host has a one-time password but krbPrincipalName wasn't set yet then the enrollment would fail because writing the principal is not allowed. This creates an ACI that only lets it be written if it is not already set. ticket 1075
* Replica installation fails for self-signed serverMartin Kosek2011-03-301-1/+2
| | | | | | | When IPA server was configured as self-signed (--selfsign option) the replica always failed to install. https://fedorahosted.org/freeipa/ticket/1122
* Fixed undefined label in permission adder dialog box.Endi S. Dewata2011-03-291-0/+3
| | | | | | | The IPA.rights_widget was fixed to invoke the base init() method to load the i18n labels properly. Ticket 1113
* Automatically update IPA LDAP on rpm upgradesRob Crittenden2011-03-212-19/+43
| | | | | | | | | | | | | | | Re-enable ldapi code in ipa-ldap-updater and remove the searchbase restriction when run in --upgrade mode. This allows us to autobind giving root Directory Manager powers. This also: * corrects the ipa-ldap-updater man page * remove automatic --realm, --server, --domain options * handle upgrade errors properly * saves a copy of dse.ldif before we change it so it can be recovered * fixes an error discovered by pylint ticket 1087
* pwpolicy priorityAdam Young2011-03-181-2/+3
| | | | | | Priority is now a required field in order to add a new password policy. Thus, not having the field present means we cannot create one. https://fedorahosted.org/freeipa/ticket/1102
* Update translation file (ipa.pot).Pavel Zuna2011-03-181-955/+6091
|
* Fix SELinux errors caused by enabling TLS on dogtag 389-ds instance.Rob Crittenden2011-03-153-28/+20
| | | | | | | | | | | | | | | | This fixes 2 AVCS: * One because we are enabling port 7390 because an SSL port must be defined to use TLS On 7389. * We were symlinking to the main IPA 389-ds NSS certificate databsae. Instead generate a separate NSS database and certificate and have certmonger track it separately I also noticed some variable inconsistency in cainstance.py. Everywhere else we use self.fqdn and that was using self.host_name. I found it confusing so I fixed it. ticket 1085
* Use TLS for dogtag replication agreements.Rob Crittenden2011-03-102-3/+39
| | | | | | | | Configure the dogtag 389-ds instance with SSL so we can enable TLS for the dogtag replication agreements. The NSS database we use is a symbolic link to the IPA 389-ds instance. ticket 1060
* Fixed self service page.Endi S. Dewata2011-03-083-8/+31
| | | | | Collaborated with ayoung to fix this problem: https://fedorahosted.org/freeipa/ticket/1070
* chkconfig the ipa service off when it is uninstalled.Rob Crittenden2011-03-081-0/+2
| | | | ticket 1056
* Improve error handling and return status codes in ipactlMartin Kosek2011-03-071-30/+89
| | | | | | | | | | | | | | | | | | | | | | | | | | There are cases when ipactl returns success even when it fails. Plus, when the error really is detected the status codes are not LSB compliant. This may result in consequent issues. This patch improves error handling in ipactl and adds LSB compliant status codes. Namely: 0 program is running or service is OK 3 program is not running 4 program or service status is unknown for "status" action. Status code 4 is issued when IPA is not configured to distinguish this state from not running IPA. For other actions, the following non-zero status codes are implemented: 1 generic or unspecified error 2 invalid or excess argument(s) 4 user had insufficient privilege 6 program is not configured https://fedorahosted.org/freeipa/ticket/1055
* Fixed memory leak caused by certificate dialogs.Endi S. Dewata2011-03-072-252/+204
| | | | Ticket 1054