summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
* 34 Create FreeIPA CLI Plugin for the 389 Auto Membership pluginJr Aquino2011-08-313-0/+42
| | | | | | | | | | | | Added new container in etc to hold the automembership configs. Modified constants to point to the new container Modified dsinstance to create the container Created automember.py to add the new commands Added xmlrpc test to verify functionality Added minor fix to user.py for constant behavior between memberof and automember https://fedorahosted.org/freeipa/ticket/1272
* Enable update and reset button only if dirtyPetr Vobornik2011-08-313-4/+124
| | | | | | | | | | | | | | | https://fedorahosted.org/freeipa/ticket/1697 Original problem: WEBUI: Update automount location refer to unknown command Update name of the automount location (Policy -> Automount -> custom_location -> Settings -> Update) in the WEBUI refer to an unknown command. Solution: Tracking dirty state in field -> section -> details facet. 'Reset' and 'Updates' in details facet are enabled only if facet is dirty. Removes the problem above and 'no modification to be performed' annoyance.
* Fixed host adder dialog to show default DNS zone.Endi S. Dewata2011-08-302-4/+14
| | | | | | | The DNS zone widget for host adder dialog has been modified not to provide an empty option, so it will show the first available zone. Ticket #1685
* enable proxy for dogtagAdam Young2011-08-293-0/+30
| | | | | | | | | | | | | | | | | | | Dogtag is going to be proxied through httpd. To make this work, it has to support renegotiation of the SSL connection. This patch enables renegotiate in the nss configuration file during during apache configuration, as well as modifies libnss to set the appropriate optins on the ssl connection in order to renegotiate. The IPA install uses the internal ports instead of proxying through httpd since httpd is not set up yet. IPA needs to Request the certificate through a port that uses authentication. On the Dogtag side, they provide an additional mapping for this: /ca/eeca/ca as opposed tp /ca/ee/ca just for this purpose. https://fedorahosted.org/freeipa/ticket/1334 add flag to pkicreate in order to enable using proxy. add the proxy file in /etc/http/conf.d/ Signed-off-by: Simo Sorce <ssorce@redhat.com>
* Add common is_installed() fn, better uninstall logging, check for errors.Rob Crittenden2011-08-292-3/+27
| | | | | | | | | | | | | | The installer and ipactl used two different methods to determine whether IPA was configured, unify them. When uninstalling report any thing that looks suspicious and warn that a re-install may fail. This includes any remaining 389-ds instances and any state or files that remains after all the module uninstallers are complete. Add wrappers for removing files and directories to log failures. https://fedorahosted.org/freeipa/ticket/1715
* Modifying sudo options refreshes the whole pagePetr Vobornik2011-08-292-13/+38
| | | | | | https://fedorahosted.org/freeipa/ticket/1689 Currently adding or deleting sudo options will refresh the entire page. It's not a problem but the code could be optimized to refresh only the sudo options table
* Fixed host keytab status after setting OTP.Endi S. Dewata2011-08-263-48/+96
| | | | | | | The host details page has been modified to update the keytab status based on the data returned by the host-mod command for setting OTP. Ticket #1710
* Fixed host OTP status.Endi S. Dewata2011-08-264-139/+321
| | | | | | | The host details page has been modified to show the status of the OTP. Setting a new OTP is now done using a dialog box. Ticket #1710
* ticket 1669 - improve i18n docstring extractionJohn Dennis2011-08-241-10/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch reverts the use of pygettext for i18n string extraction. It was originally introduced because the help documentation for commands are in the class docstring and module docstring. Docstrings are a Python construct whereby any string which immediately follows a class declaration, function/method declaration or appears first in a module is taken to be the documentation for that object. Python automatically assigns that string to the __doc__ variable associated with the object. Explicitly assigning to the __doc__ variable is equivalent and permitted. We mark strings in the source for i18n translation by embedding them in _() or ngettext(). Specialized extraction tools (e.g. xgettext) scan the source code looking for strings with those markers and extracts the string for inclusion in a translation catalog. It was mistakingly assumed one could not mark for translation Python docstrings. Since some docstrings are vital for our command help system some method had to be devised to extract docstrings for the translation catalog. pygettext has the ability to locate and extract docstrings and it was introduced to acquire the documentation for our commands located in module and class docstrings. However pygettext was too large a hammer for this task, it lacked any fined grained ability to extract only the docstrings we were interested in. In practice it extracted EVERY docstring in each file it was presented with. This caused a large number strings to be extracted for translation which had no reason to be translated, the string might have been internal code documentation never meant to be seen by users. Often the superfluous docstrings were long, complex and likely difficult to translate. This placed an unnecessary burden on our volunteer translators. Instead what is needed is some method to extract only those strings intended for translation. We already have such a mechanism and it is already widely used, namely wrapping strings intended for translation in calls to _() or _negettext(), i.e. marking a string for i18n translation. Thus the solution to the docstring translation problem is to mark the docstrings exactly as we have been doing, it only requires that instead of a bare Python docstring we instead assign the marked string to the __doc__ variable. Using the hypothetical class foo as an example. class foo(Command): ''' The foo command takes out the garbage. ''' Would become: class foo(Command): __doc__ = _('The foo command takes out the garbage.') But which docstrings need to be marked for translation? The makeapi tool knows how to iterate over every command in our public API. It was extended to validate every command's documentation and report if any documentation is missing or not marked for translation. That information was then used to identify each docstring in the code which needed to be transformed. In summary what this patch does is: * Remove the use of pygettext (modification to install/po/Makefile.in) * Replace every docstring with an explicit assignment to __doc__ where the rhs of the assignment is an i18n marking function. * Single line docstrings appearing in multi-line string literals (e.g. ''' or """) were replaced with single line string literals because the multi-line literals were introducing unnecessary whitespace and newlines in the string extracted for translation. For example: ''' The foo command takes out the garbage. ''' Would appear in the translation catalog as: "\n The foo command takes out the garbage.\n " The superfluous whitespace and newlines are confusing to translators and requires us to strip leading and trailing whitespace from the translation at run time. * Import statements were moved from below the docstring to above it. This was necessary because the i18n markers are imported functions and must be available before the the doc is parsed. Technically only the import of the i18n markers had to appear before the doc but stylistically it's better to keep all the imports together. * It was observed during the docstring editing process that the command documentation was inconsistent with respect to the use of periods to terminate a sentence. Some doc had a trailing period, others didn't. Consistency was enforced by adding a period to end of every docstring if one was missing.
* Modify serial associator to use batchPetr Vobornik2011-08-252-37/+44
| | | | | | | | | | https://fedorahosted.org/freeipa/ticket/1688 The serial associator is used to execute a command multiple times with different parameters. This is used for adding/removing a user into/from multiple groups. It has some issues: Each command is executed one-by-one, so it could be slow. * If there's a failure the rest of the commands will not be executed. * This can be fixed by putting the commands into a batch and execute them at once.
* Fixed default map type in automount map adder dialog.Endi S. Dewata2011-08-253-65/+62
| | | | | | | The adder dialog for automount map has been modified to select the direct map by default. Ticket #1698
* Add additional pam ftp services to HBAC, and a ftp HBAC service groupRob Crittenden2011-08-242-0/+44
| | | | | | This adds proftpd, pure-ftpd, vsftpd and gssftp. https://fedorahosted.org/freeipa/ticket/1703
* Validation of details facet before update ↵test-patches-2-1Petr Vobornik2011-08-253-8/+39
| | | | | | | | https://fedorahosted.org/freeipa/ticket/1676 The ticket is a duplicate of server error, but it revealed few UI errors. Newly performs validation of details facet before update. If validation fails, notification dialog is shown and command isn't executed. Fixed integer minimum and maximum value checking. Read-only and non-writable fields are no longer considered required.
* Fixed command partial failure handling.Endi S. Dewata2011-08-241-39/+45
| | | | | | | When a command returns a partial failure it should be treated as a success but the failures should still be displayed. Ticket #1628
* Show error in adding associationsPetr Vobornik2011-08-242-23/+93
| | | | https://fedorahosted.org/freeipa/ticket/1628
* Change the way has_keytab is determined, also check for password.Rob Crittenden2011-08-242-0/+12
| | | | | | | | | | | | | | | | | | | | We need an indicator to see if a keytab has been set on host and service entries. We also need a way to know if a one-time password is set on a host. This adds an ACI that grants search on userPassword and krbPrincipalKey so we can do an existence search on them. This way we can tell if the attribute is set and create a fake attribute accordingly. When a userPassword is set on a host a keytab is generated against that password so we always set has_keytab to False if a password exists. This is fine because when keytab gets generated for the host the password is removed (hence one-time). This adds has_keytab/has_password to the user, host and service plugins. ticket https://fedorahosted.org/freeipa/ticket/1538
* Suppress 389-ds debug output when starting servicesRob Crittenden2011-08-241-12/+49
| | | | | | If the user wants the output they can pass the --debug flag to ipactl. https://fedorahosted.org/freeipa/ticket/1402
* Removed unnecessary HBAC/sudo rule category modification.Endi S. Dewata2011-08-236-134/+40
| | | | | | | | | | Since the Add/Delete links in the association table are disabled when the category is set to 'all', it's no longer necessary to check the category before showing the add/delete dialogs and modify the category before adding entries. Thus, the IPA.rule_association_table_widget is no longer needed. Ticket #1692
* Verify that the external CA certificate files are correct.Jan Cholasta2011-08-231-6/+41
| | | | ticket 1572
* Updated add and delete association dialog titles.Endi S. Dewata2011-08-237-276/+167
| | | | | | | | | | The association table widget and facet have been modified to accept titles for the add and delete dialogs. The table and facet definitions have been modified to specify the appropriate titles. Some unused code have been removed. Ticket #1629
* Uncheck checkboxes in association after deletionPetr Vobornik2011-08-194-18/+35
| | | | https://fedorahosted.org/freeipa/ticket/1639
* Add option to install without the automatic redirect to the Web UI.Jan Cholasta2011-08-185-6/+16
| | | | ticket 1570
* Replaced page dirty dialog title.Endi S. Dewata2011-08-191-1/+1
| | | | | | The title of page dirty dialog has been changed to 'Unsaved Changes'. Ticket #1653
* Removed 'Hide already enrolled' checkbox.Endi S. Dewata2011-08-193-37/+18
| | | | | | | | The 'Hide already enrolled' has been removed from the enrollment dialog because it is checked by default and entries that are already enrolled cannot be enrolled again. Ticket #1638
* Verify that passwords specified through command line options of ↵Jan Cholasta2011-08-181-0/+5
| | | | | | ipa-server-install meet the length requirement. ticket 1621
* Make sure messagebus is running prior to starting certmonger.Jan Cholasta2011-08-181-2/+0
| | | | ticket 1580
* Add information on setting api.env.host in the ipactl.8 man pageRob Crittenden2011-08-191-0/+2
| | | | ticket https://fedorahosted.org/freeipa/ticket/1390
* Fixed inconsistent layout for password reset dialog.Endi S. Dewata2011-08-181-48/+46
| | | | | | | The dialog box for resetting user password has been modified to use the standard layout. Ticket #1641
* ticket 1650 - compute accurate translation statisticsJohn Dennis2011-08-182-15/+21
| | | | | | | | | | | | | | | | ticket 1650 (https://fedorahosted.org/freeipa/ticket/1650) has an extensive discussion of the issues, please refer to that. This patch does the following: * does not count fuzzy translations when computing translation statistics via the "msg-stats" make target in install/po * adds a new make target called "pull-po" which pulls updated po files from Transifex (configure.ac includes some trailing whitespace fixes) * turns off the generation of fuzzy translation suggestions during the message merge phase.
* ticket 1661 - Update all po filesJohn Dennis2011-08-1821-5434/+2955
| | | | | | | | | | | | | | | | | | | | | | | | | | | After updating po's current translation status is: ipa.pot has 1329 messages. There are 21 po translation files. as: 0/1329 0.0% 1329 untranslated, 0 fuzzy bn_IN: 13/1329 1.0% 1316 untranslated, 0 fuzzy zh_CN: 133/1329 10.0% 1196 untranslated, 0 fuzzy zh_TW: 0/1329 0.0% 1329 untranslated, 0 fuzzy nl: 1/1329 0.1% 1328 untranslated, 0 fuzzy fr: 0/1329 0.0% 1329 untranslated, 0 fuzzy de: 27/1329 2.0% 1302 untranslated, 0 fuzzy el: 0/1329 0.0% 1329 untranslated, 0 fuzzy gu: 0/1329 0.0% 1329 untranslated, 0 fuzzy id: 89/1329 6.7% 1240 untranslated, 0 fuzzy ja_JP: 0/1329 0.0% 1329 untranslated, 0 fuzzy ja: 0/1329 0.0% 1329 untranslated, 0 fuzzy kn: 243/1329 18.3% 1086 untranslated, 0 fuzzy fa: 0/1329 0.0% 1329 untranslated, 0 fuzzy pl: 492/1329 37.0% 837 untranslated, 0 fuzzy pt_BR: 0/1329 0.0% 1329 untranslated, 0 fuzzy pt: 0/1329 0.0% 1329 untranslated, 0 fuzzy ru: 162/1329 12.2% 1167 untranslated, 0 fuzzy es: 1329/1329 100.0% 0 untranslated, 0 fuzzy sv: 0/1329 0.0% 1329 untranslated, 0 fuzzy uk: 1329/1329 100.0% 0 untranslated, 0 fuzzy
* ticket 1660 - update LINGUAS file, add missing po filesJohn Dennis2011-08-188-8/+54667
| | | | | | | Our LINGUAS file and the set of po files have diverged from what's on Transifex. We should update the LINGUAS file to match the set of translations on Transifex and add po files currently on Transifex but not in our git repo to our git repo.
* Fixed problem selecting value from comboboxEndi S. Dewata2011-08-171-2/+2
| | | | | | | The IPA.combobox_widget has been modified to use the 'change' event to capture the selected value from the drop-down list. Ticket #1654
* Hide activation/deactivation link from regular users.Endi S. Dewata2011-08-171-2/+13
| | | | | | | The IPA.user_status_widget has been modified to show/hide the link for activating/deactivating users according to the attributelevelrights. Ticket #1625
* Fixed browser configuration pagesEndi S. Dewata2011-08-173-47/+57
| | | | | | | The browser configuration pages have been modified to improve the content and appearance. Ticket #1624
* error dialog for batch commandPetr Vobornik2011-08-173-14/+135
| | | | | | | https://fedorahosted.org/freeipa/ticket/1597 https://fedorahosted.org/freeipa/ticket/1592 Added option to show multiple errors in error dialog.
* Fixed problem with buttons in enrollment dialog.Endi S. Dewata2011-08-151-20/+20
| | | | | | | The panel for selection buttons (i.e. ">>" and "<<") has been re- positioned to avoid being covered by the adder-dialog-right panel. Ticket #1626
* Fixed link style in dialog box.Endi S. Dewata2011-08-151-1/+1
| | | | | | | | The general link style defined in ipa.css was overriden by a more specific rule in jquery-ui.css. So the style has been modified to include the more specific rule. Ticket #1623
* transifex translation adjustmentJohn Dennis2011-08-124-2422/+5443
| | | | | | | | | | | | Pull the new translations for Spanish (es) and Ukrainian (uk) Update the LINGUAS file to add comment showing the friendly name for the language abbreviation. The make target msg-stats which produces a report about the state of the translations no longer maintained it's column alignment due to larger numbers so the formating was tweaked to maintain column alignment.
* Fixed problem clicking 3rd level tabs.Endi S. Dewata2011-08-111-3/+3
| | | | | | The 3rd level tabs were partially covered by the content panel, so only the top portion can be clicked. The content panel has been repositioned to avoid the problem.
* Fixed broken links in ipa_error.css and ipa_migration.css.Endi S. Dewata2011-08-117-8/+13
| | | | | | | Some of the images that were previously deleted are actually needed by ipa_error.css and ipa_migration.css, so they have been restored. Ticket #1564
* Fixed DNS zone adder dialog.Endi S. Dewata2011-08-102-38/+187
| | | | | | | The DNS zone adder dialog has been modified to use radio buttons to select whether to enter a zone name or a reverse zone IP network. Ticket #1575
* Fixed host adder dialog.Endi S. Dewata2011-08-102-17/+155
| | | | | | | | | | | | | | | | The host adder dialog has been modified to show separate fields for hostname and DNS zone. The hostname is a text field and the DNS zone is an editable drop-down list. The fields will have the following behavior: - If the user types a dot into the hostname field, the cursor will automatically move into the DNS zone field. - If the user pastes an FQDN into the hostname field, the value will automatically be split into hostname and DNS zone. - If the user selects a value from the drop-down list, it will only change the DNS zone, not the hostname. Ticket #1457
* Fixed error after login on IEEndi S. Dewata2011-08-092-14/+63
| | | | | | | | | | | The IE does not resend the request body during negotiation, so after after a successful authentication the server could not find the JSON request to parse. The Web UI has been modified to detect this error and resend the initialization request. Ticket #1540
* Ask for reverse DNS zone information in attended install right after asking ↵Jan Cholasta2011-08-092-34/+33
| | | | | | for DNS forwarders, so that DNS configuration is done in one place. ticket 1522
* Redirection after changing browser configurationPetr Vobornik2011-08-083-14/+40
| | | | | | | | https://fedorahosted.org/freeipa/ticket/1502 Added redirection link. CSS styling of configuration page. Some CSS cleaning.
* Fixed facet group labels.Endi S. Dewata2011-08-086-29/+32
| | | | | | | | The facet group labels have been modified according to UXD spec. Some facet groups will have more descriptive labels. Some others will not have any labels because the facet tab is self-explanatory. Ticket #1423, #1561
* Fixed 3rd level tab style.Endi S. Dewata2011-08-081-19/+40
| | | | The 3rd level tab style has been adjusted according to UXD input.
* Fixed adding host without DNS reverse zonePetr Vobornik2011-08-056-67/+163
| | | | | | | | | | https://fedorahosted.org/freeipa/ticket/1481 Shows status dialog instead of error dialog (error 4304 is treated like success). Refactored error dialog. Added generic message dialog (IPA.message_dialog) Modified core tests to work with dialog.
* Linked entries in HBAC/sudo details page.Endi S. Dewata2011-08-044-34/+14
| | | | | | | The association tables in HBAC/sudo details page have been modified to link the entries to the appropriate details page. Ticket #1535
* Re-arrange CA configuration code to reduce the number of restarts.Rob Crittenden2011-08-033-9/+0
| | | | | | | | Ade Lee from the dogtag team looked at the configuration code and determined that a number of restarts were not needed and recommended re-arranging other code to reduce the number of restarts to one. https://fedorahosted.org/freeipa/ticket/1555