summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
* Allow a client to enroll using principal when the host has a OTPRob Crittenden2011-03-301-0/+18
| | | | | | | | | If the host has a one-time password but krbPrincipalName wasn't set yet then the enrollment would fail because writing the principal is not allowed. This creates an ACI that only lets it be written if it is not already set. ticket 1075
* Replica installation fails for self-signed serverMartin Kosek2011-03-301-1/+2
| | | | | | | When IPA server was configured as self-signed (--selfsign option) the replica always failed to install. https://fedorahosted.org/freeipa/ticket/1122
* Fixed undefined label in permission adder dialog box.Endi S. Dewata2011-03-291-0/+3
| | | | | | | The IPA.rights_widget was fixed to invoke the base init() method to load the i18n labels properly. Ticket 1113
* Automatically update IPA LDAP on rpm upgradesRob Crittenden2011-03-212-19/+43
| | | | | | | | | | | | | | | Re-enable ldapi code in ipa-ldap-updater and remove the searchbase restriction when run in --upgrade mode. This allows us to autobind giving root Directory Manager powers. This also: * corrects the ipa-ldap-updater man page * remove automatic --realm, --server, --domain options * handle upgrade errors properly * saves a copy of dse.ldif before we change it so it can be recovered * fixes an error discovered by pylint ticket 1087
* pwpolicy priorityAdam Young2011-03-181-2/+3
| | | | | | Priority is now a required field in order to add a new password policy. Thus, not having the field present means we cannot create one. https://fedorahosted.org/freeipa/ticket/1102
* Update translation file (ipa.pot).Pavel Zuna2011-03-181-955/+6091
|
* Fix SELinux errors caused by enabling TLS on dogtag 389-ds instance.Rob Crittenden2011-03-153-28/+20
| | | | | | | | | | | | | | | | This fixes 2 AVCS: * One because we are enabling port 7390 because an SSL port must be defined to use TLS On 7389. * We were symlinking to the main IPA 389-ds NSS certificate databsae. Instead generate a separate NSS database and certificate and have certmonger track it separately I also noticed some variable inconsistency in cainstance.py. Everywhere else we use self.fqdn and that was using self.host_name. I found it confusing so I fixed it. ticket 1085
* Use TLS for dogtag replication agreements.Rob Crittenden2011-03-102-3/+39
| | | | | | | | Configure the dogtag 389-ds instance with SSL so we can enable TLS for the dogtag replication agreements. The NSS database we use is a symbolic link to the IPA 389-ds instance. ticket 1060
* Fixed self service page.Endi S. Dewata2011-03-083-8/+31
| | | | | Collaborated with ayoung to fix this problem: https://fedorahosted.org/freeipa/ticket/1070
* chkconfig the ipa service off when it is uninstalled.Rob Crittenden2011-03-081-0/+2
| | | | ticket 1056
* Improve error handling and return status codes in ipactlMartin Kosek2011-03-071-30/+89
| | | | | | | | | | | | | | | | | | | | | | | | | | There are cases when ipactl returns success even when it fails. Plus, when the error really is detected the status codes are not LSB compliant. This may result in consequent issues. This patch improves error handling in ipactl and adds LSB compliant status codes. Namely: 0 program is running or service is OK 3 program is not running 4 program or service status is unknown for "status" action. Status code 4 is issued when IPA is not configured to distinguish this state from not running IPA. For other actions, the following non-zero status codes are implemented: 1 generic or unspecified error 2 invalid or excess argument(s) 4 user had insufficient privilege 6 program is not configured https://fedorahosted.org/freeipa/ticket/1055
* Fixed memory leak caused by certificate dialogs.Endi S. Dewata2011-03-072-252/+204
| | | | Ticket 1054
* Fixed memory leak caused by IPA.error_dialog.Endi S. Dewata2011-03-062-27/+29
| | | | Ticket 1054
* Fixed memory leak caused by DNS record deleter dialog.Endi S. Dewata2011-03-041-56/+74
| | | | Ticket 1054
* Fixed memory leak caused by DNS record adder dialog.Endi S. Dewata2011-03-041-48/+62
| | | | Ticket 1054
* Fixed memory leak caused by reset password dialog.Endi S. Dewata2011-03-041-42/+75
| | | | Ticket 1054
* Fixed memory leak caused by is_dirty dialogs.Endi S. Dewata2011-03-042-27/+26
| | | | Ticket 1054
* Fixed memory leak caused by IPA.dialog.Endi S. Dewata2011-03-041-6/+8
| | | | Ticket 1054
* Fixed host enrollment timeEndi S. Dewata2011-03-041-6/+6
| | | | | | | | The month in krblastpwdchange (LDAP Generalized Time) is 1-based but the month in JavaScript Date.setUTCFullYear() is 0-based so it needs a conversion. Ticket 1053
* Skip DNS validation checks if we're setting up DNS in ipa-server-install.Rob Crittenden2011-03-041-0/+4
| | | | | | | If we're going to be authoritative ourselves don't bother with what other DNS servers think. ticket 1036
* type in default textAdam Young2011-03-031-1/+1
|
* Use ldapi: instead of unsecured ldap: in ipa core tools.Pavel Zuna2011-03-038-35/+35
| | | | | | The patch also corrects exception handling in some of the tools. Fix #874
* Need to restart the dogtag 388-ds instance before using it.Rob Crittenden2011-03-031-0/+17
| | | | | | | | | | | Restart the 389-ds instance to ensure all schema is loaded that dogtag may have installed as files. According to bug https://bugzilla.redhat.com/show_bug.cgi?id=680984 this it is only needed on clones. ticket 1024
* Inconsistent sysrestore file handling by IPA server installerMartin Kosek2011-03-031-2/+2
| | | | | | | | | | | | IPA server/replica uninstallation may fail when it tries to restore a Directory server configuration file in sysrestore directory, which was already restored before. The problem is in Directory Server uninstaller which uses and modifies its own image of sysrestore directory state instead of using the common uninstaller image. https://fedorahosted.org/freeipa/ticket/1026
* fix truncated messageAdam Young2011-03-031-2/+7
|
* IPA replica/server install does not check for a clientMartin Kosek2011-03-032-0/+10
| | | | | | | | | | | When IPA replica or server is configured it does not check for possibly installed client. This will cause the installation to fail in the very end. This patch adds a check for already configured client and suggests removing it before server/replica installation. https://fedorahosted.org/freeipa/ticket/1002
* Use modified entity find commands for associationsAdam Young2011-03-023-35/+28
| | | | | | https://fedorahosted.org/freeipa/ticket/1011 Does not completely fix the problem in the ticket, but it does mitigate the failure.
* Save changes before modifying association.Endi S. Dewata2011-03-024-7/+45
| | | | | | | | | | | In a details page, usually any changes done to the fields will not be applied until the user clicks the Update button. However, if the page contains an association table, any addition/deletion to the table will be applied immediately. To avoid any confusion, the user is now required to save or reset all changes to the page before modifying the association. A dialog box will appear if the page contains any unsaved changes.
* Fixed attribute for SUDO command group membership.Endi S. Dewata2011-03-021-5/+2
| | | | | The correct attribute name for SUDO command group membership is memberof_sudocmdgroup and it contains the group name instead of dn.
* Store list of non-master replicas in DIT and provide way to list themSimo Sorce2011-03-024-30/+96
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/1007
* Replaced SUDO with Sudo in UI test data.Endi S. Dewata2011-03-0110-22/+22
| | | | Ticket 1005
* Use Sudo rather than SUDO as a label.Rob Crittenden2011-03-013-43/+43
| | | | ticket 1005
* Removed association facets based on memberofindirect.Endi S. Dewata2011-03-011-0/+1
| | | | | | | Association facets based on memberofindirect attribute have been removed because the attribute is non-assignable. Ticket 1027
* Fix replica setup using replication admin kerberos credentialsSimo Sorce2011-03-011-0/+5
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/1022
* Use wrapper for sasl gssapi binds so it behaves like other bindsSimo Sorce2011-03-011-1/+1
| | | | | | | | | | By calling directly sasl_interactive_bind_s() we were not calling __lateinit() This in turn resulted in some variables like dbdir not to be set on the IPAadmin object. Keep all bind types in the same place so the same common sbind steps can be performed in each case. Related to: https://fedorahosted.org/freeipa/ticket/1022
* Final i18n unit test fixes.Pavel Zuna2011-03-012-6/+8
|
* Use pygettext to generate translatable strings from plugin files.Pavel Zuna2011-03-012-1/+828
| | | | | | | | | | | | This patch replaces xgettext with a custom pygettext to generate translatable strings from plugin files in ipalib/plugins. pygettext was modified to handle plural forms (credit goes to Jan Hendrik Goellner) and had some bugs fixed by myself. We only use it for plugins, because it's the only place where we need to extract docstrings for the built-in help system. I also had to make some changes to the way the built-in documentation systems gets docstrings from modules for this to work.
* Create default disabled sudo bind userJr Aquino2011-02-232-0/+10
| | | | | | | | Read access is denied to the sudo container for unauthenticated users. This shared user can be used to provide authenticated access to the sudo information. https://fedorahosted.org/freeipa/ticket/998
* splitting banner requires new file in Makefile.amAdam Young2011-02-231-0/+1
|
* Fixed buttons for DNS records.Endi S. Dewata2011-02-231-6/+6
| | | | | The order of the Add and Delete buttons has been reversed to be consistent with those in other facets.
* split logo This allows for more flexilibity in customizing the site, as an ↵Adam Young2011-02-223-1/+1
| | | | end user can replace the logo, the banner or both
* Space above line in table footerAdam Young2011-02-221-0/+1
|
* move expand and collpase all to the right hand sideAdam Young2011-02-222-1/+8
|
* reorder user search columns UXD found in testing that not having the ↵Adam Young2011-02-221-1/+1
| | | | clikcable link as the left most column confused users.
* adder dialogs with external made the styles for the internal and external ↵Adam Young2011-02-221-5/+8
| | | | classes match the styles for available.
* I18n update for dialog box buttons.Endi S. Dewata2011-02-227-113/+154
| | | | https://fedorahosted.org/freeipa/ticket/899
* Fixed error dialog box.Endi S. Dewata2011-02-221-18/+4
| | | | | The IPA.cmd() has been modified to set the error dialog box's title properly.
* Entitlements ACIs not visible to Permission pluginMartin Kosek2011-02-221-3/+6
| | | | | | | | This patch fixes Entitlements privileges and ACIs. There were missing descriptions or the ACIs could not be processed by Permissino plugin because of missing prefix. https://fedorahosted.org/freeipa/ticket/997
* Add default roles and permissions for HBAC, SUDO and pw policyRob Crittenden2011-02-224-2/+317
| | | | | | | | | | | Created some default roles as examples. In doing so I realized that we were completely missing default rules for HBAC, SUDO and password policy so I added those as well. I ran into a problem when the updater has a default record and an add at the same time, it should handle it better now. ticket 585
* search filter focus afdter a search loads, focus moved to the search filter ↵Adam Young2011-02-212-2/+15
| | | | | | text box, tyhe most likely thing that the user will want to change on the page. https://fedorahosted.org/freeipa/ticket/983
generated by cgit (git 2.34.1) at 2024-05-12 19:45:42 +0000