summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
* Updated default Kerberos password policyJan Zeleny2011-02-163-2/+7
| | | | https://fedorahosted.org/freeipa/ticket/930
* Fixed cn attribute in ipaUniqueID uniqueness config.Endi S. Dewata2011-02-161-1/+1
|
* Fixed association facets.Endi S. Dewata2011-02-1517-259/+183
| | | | | | | | The association config has been removed because it incorrectly assumes there is only one association between two entities. Now each association is defined separately using association facets. The service.py has been modified to specify the correct relationships. The API.txt has been updated. https://fedorahosted.org/freeipa/ticket/960
* Note --ip-address parameter of ipa-replica-prepare in man pageJakub Hrozek2011-02-151-0/+2
| | | | https://fedorahosted.org/freeipa/ticket/615
* Require ipactl be run as root to avoid a lot of misleading error msgs.Rob Crittenden2011-02-151-0/+3
| | | | | | | | Trying to run ipactl as non-root results in a slew of bogus error messages, some of which come because dirsrv can't read certain files as the wrong user, some based on our handling of that fact. ticket 936
* Fix two problems with ipa-replica-prepareRob Crittenden2011-02-141-1/+1
| | | | | | | | | | | 1. Fix a unicode() problem creating the DNS entries 2. Fix a strange NSS error when generating the certificates against a dogtag server. The NSS errors are quite strange. When generating the first certificate nss_shutdown() fails because the database isn't initialized yet but nss_is_initialized() returned True. The second pass fails because something is in use.
* Fine tuning DNS optionsJakub Hrozek2011-02-141-2/+3
| | | | | | | | | | | | Add pointer to self to /etc/hosts to avoid chicken/egg problems when restarting DNS. On servers set both dns_lookup_realm and dns_lookup_kdc to false so we don't attempt to do any resolving. Leave it to true on clients. Set rdns to false on both server and client. https://fedorahosted.org/freeipa/ticket/931
* DNS record searchAdam Young2011-02-141-9/+18
| | | | | | | | The current version of the DNS Plugin does not support searching by record, so that is commented out. The search field wasn't working either. The search criteria had to be appended to the params array, just after the zone. https://fedorahosted.org/freeipa/ticket/907
* drop the group.upg NIS mapNalin Dahyabhai2011-02-141-12/+0
| | | | | | The group.upg NIS map was an experiment in providing UPG groups dynamically, and is not one of the maps that I'd ever expect a NIS client to "know" to search. We should probably just drop it.
* Add permission/privilege for updating IPA configuration.Rob Crittenden2011-02-142-0/+19
| | | | ticket 950
* Handle bad DM password in ipa-host-net-manage & ipa-copmat-manage.Rob Crittenden2011-02-142-2/+6
| | | | | | | This was resulting in a traceback because while conn was not None it wasn't connected either. ticket 920
* Fixed add service dialog box.Endi S. Dewata2011-02-113-25/+29
| | | | | | Previously the add service dialog box shows a 'Principal:' label with no text field next to it. It now has been removed. The dialog box has been widened to avoid line wrapping of the buttons.
* remove deprecated record typesAdam Young2011-02-111-3/+3
|
* allow null keys for showAdam Young2011-02-111-4/+8
| | | | https://fedorahosted.org/freeipa/ticket/951
* column formatting Allow optional formatting for columns Provide Data formate ↵Adam Young2011-02-113-6/+49
| | | | | | for host modificaiton date format
* target section without radio buttons ACI target section refactored into an ↵Adam Young2011-02-114-287/+325
| | | | array of widget-like objects. The radio buttons have been replaced by a select box. THe select is not visible on the details page.
* Fix migration pageJakub Hrozek2011-02-111-1/+1
|
* ipa-dns-install does not exit on errorMartin Kosek2011-02-111-12/+17
| | | | | | | This patch fixes behavior of ipa-dns-install, which does not exit when an invalid configuration of /etc/hosts is detected. https://fedorahosted.org/freeipa/ticket/736
* Fix return codes for ipactlMartin Kosek2011-02-101-14/+10
| | | | | | | This patch fixes ipactl to return non-zero value when something goes wrong. https://fedorahosted.org/freeipa/ticket/894
* Disable replication version plugin by default.Rob Crittenden2011-02-101-1/+3
| | | | | | | | | | | | | | | | The 389-ds replication plugin may not be installed on all platforms and our replication version plugin will cause 389-ds to not start if it is loaded and the replication plugin is not. So disable by default. When a replica is prepared we check for the replication plugin. If it exists we will enable the replication version plugin. Likewise on installation of a replica we check for existence of the repliation plugin and if it is there then we enable the version plugin before replication begins. ticket 918
* Make main selfservice aci visible to the selfservice plugin.Rob Crittenden2011-02-101-2/+2
| | | | ticket 934
* Moved add dialog into search facet.Endi S. Dewata2011-02-0917-344/+354
| | | | | Previously the add dialog is added into entity. The dialog is only used by the search facet, so it's now moved into the search facet.
* Cross brower adjustments for the action-panel.System Administrator2011-02-091-10/+25
|
* Read-only text widget's save() should return null.Endi S. Dewata2011-02-071-1/+2
|
* Refresh state data before removing the dirsrv user, fixes uninstall.Rob Crittenden2011-02-071-0/+1
| | | | | | | | | The state is read only at initialization time. This works ok when individual services remove their state data but when worked upon again at the top-level it still has the full state in memory, so when the state file is re-written all of the data that was removed is re-added. ticket 916
* Hide initial status.Endi S. Dewata2011-02-073-7/+14
| | | | | | Previously all certificate & Kerberos key statuses (valid, missing and revoked) will appear briefly at the same time during page load. This has been fixed by setting the initial style to hidden.
* Removed unused code.Endi S. Dewata2011-02-072-405/+25
|
* Restructuring details page.Endi S. Dewata2011-02-0715-336/+322
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously the IPA.details_list_section can only be used with widgets that generates <dd> tag because it uses the following structure: <dl> <dt>Telephone Number:</dt> <span name="teleponenumber"> <dd>111-1111</dd> <dd>222-2222</dd> </span> </dl> The <dd> tag was previously used to handle multi-valued attributes. Since multi-valued attributes are now handled by the recently added IPA.multivalued_text_widget, the structure can be changed as follows: <dl> <dt>Telephone Number:</dt> <dd> <span name="telephonenumber"> <div>111-1111</div> <div>222-2222</div> </span> </dd> </dl> This allows IPA.details_list_section to be used with any widgets without requiring the <dd> tag.
* removed duplicate postionAdam Young2011-02-041-1/+0
| | | | olny need to specify once
* Added multi-valued text widget.Endi S. Dewata2011-02-036-51/+360
| | | | | | | | | | | | | | | | | | A multi-valued text widget has been created to replace the old IPA.details_field. The old code was designed to handle all data types, and it uses one <dd> tag for each value, so the code is still incomplete and complex. The new code was designed to handle only multi-valued text attributes, and it uses one <dd> tag for all values, so it's easier to maintain. There are already other widgets that can be used to handle other data types. The new code supports line-level undo and line-out for removal like the old code, but there are some changes: - Undoing a newly added line will remove the entire line. - Editing the value of a removed line will cancel the removal. - It provides 'undo all' link to reset the entire attribute. The old code will be cleaned up in a subsequent patch.
* faviconAdam Young2011-02-032-0/+1
| | | | adds a favicon that is the freeipa cube
* Fixed CSS error.Endi S. Dewata2011-02-031-2/+1
|
* ipa-server-install inconsistent capitalizationMartin Kosek2011-02-031-3/+3
| | | | | | | | | A cosmetic patch to IPA server installation output aimed to make capitalization in installer output consistent. Several installation tasks started with a lowercase letter and several installation task steps started with an uppercase letter. https://fedorahosted.org/freeipa/ticket/776
* Fixed section expand/collapse in user details.Endi S. Dewata2011-02-031-13/+13
| | | | The section names were missing from the entity definition.
* city and stateAdam Young2011-02-021-34/+3
| | | | using approapriate lcoality and state abbreviations for the attributes: l and st
* Added undo for permission target.Endi S. Dewata2011-02-025-187/+269
| | | | https://fedorahosted.org/freeipa/ticket/885
* IPv6 enhancementsJakub Hrozek2011-02-021-0/+3
| | | | | | | * Make host-add, host-del and reverse zone creation IPv6 aware * Make Bind listen on IPv6 interfaces, too https://fedorahosted.org/freeipa/ticket/398
* core widget unit tests baseline set of unit tests for checking that each ↵Adam Young2011-02-026-6625/+6710
| | | | widget conforms to the contract
* Add support for tracking and counting entitlementsRob Crittenden2011-02-027-20/+287
| | | | | | | | | | | | | | Adds a plugin, entitle, to register to the entitlement server, consume entitlements and to count and track them. It is also possible to import an entitlement certificate (if for example the remote entitlement server is unaviailable). This uses the candlepin server from https://fedorahosted.org/candlepin/wiki for entitlements. Add a cron job to validate the entitlement status and syslog the results. tickets 28, 79, 278
* Fix installing with an external CA and wait for dogtag to come upRob Crittenden2011-02-011-10/+40
| | | | | | | | | | | | | | | | | | | | | There wasn't an exception in the "is the server already installed" check for a two-stage CA installation. Made the installer slightly more robust. We create a cache file of answers so the next run won't ask all the questions again. This cache is removed when the installation is complete. Previously nothing would work if the installer was run more than once, this should be fixed now. The cache is encrypted using the DM password. The second problem is that the tomcat6 init script returns control before the web apps are up. Add a small loop in our restart method to wait for the 9180 port to be available. This also adds an additional restart to ensure that nonces are disabled. ticket 835 revise
* undo entity widget adds line level undo for the entity-select-widget now ↵Adam Young2011-02-011-2/+13
| | | | shows the undo link on filter change does JSON queries on keyup instead of keypress https://fedorahosted.org/freeipa/ticket/886
* Add new schema to store information about permissions.Rob Crittenden2011-02-012-0/+51
| | | | | | | | | There are some permissions we can't display because they are stored outside of the basedn (such as the replication permissions). We are adding a new attribute to store extra information to make this clear, in this case SYSTEM. ticket 853
* use entity select widget for permissionsAdam Young2011-02-013-150/+97
| | | | https://fedorahosted.org/freeipa/ticket/879
* Force sync in both direction before changing replication agreementsSimo Sorce2011-02-011-9/+1
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/887
* Fixed attribute name for delegation member group.Endi S. Dewata2011-02-011-1/+1
|
* Added undo for permission rights.Endi S. Dewata2011-02-012-110/+38
| | | | https://fedorahosted.org/freeipa/ticket/884
* Fixed missing object reference.Endi S. Dewata2011-01-311-2/+2
|
* aci association fixesAdam Young2011-01-313-36/+41
| | | | | declarative priv definition fixes role_add_privilege and privilege_add_permisison
* Add an address for a nameserver when a new zone is created during installJakub Hrozek2011-01-311-3/+3
| | | | https://fedorahosted.org/freeipa/ticket/881
* association fixesAdam Young2011-01-312-9/+29
| | | | | PLaces custom association facets into the proper facet groups usesthe associators if they are specifiedfor an association