summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
* Inconsistent sysrestore file handling by IPA server installerMartin Kosek2011-03-031-2/+2
| | | | | | | | | | | | IPA server/replica uninstallation may fail when it tries to restore a Directory server configuration file in sysrestore directory, which was already restored before. The problem is in Directory Server uninstaller which uses and modifies its own image of sysrestore directory state instead of using the common uninstaller image. https://fedorahosted.org/freeipa/ticket/1026
* fix truncated messageAdam Young2011-03-031-2/+7
|
* IPA replica/server install does not check for a clientMartin Kosek2011-03-032-0/+10
| | | | | | | | | | | When IPA replica or server is configured it does not check for possibly installed client. This will cause the installation to fail in the very end. This patch adds a check for already configured client and suggests removing it before server/replica installation. https://fedorahosted.org/freeipa/ticket/1002
* Use modified entity find commands for associationsAdam Young2011-03-023-35/+28
| | | | | | https://fedorahosted.org/freeipa/ticket/1011 Does not completely fix the problem in the ticket, but it does mitigate the failure.
* Save changes before modifying association.Endi S. Dewata2011-03-024-7/+45
| | | | | | | | | | | In a details page, usually any changes done to the fields will not be applied until the user clicks the Update button. However, if the page contains an association table, any addition/deletion to the table will be applied immediately. To avoid any confusion, the user is now required to save or reset all changes to the page before modifying the association. A dialog box will appear if the page contains any unsaved changes.
* Fixed attribute for SUDO command group membership.Endi S. Dewata2011-03-021-5/+2
| | | | | The correct attribute name for SUDO command group membership is memberof_sudocmdgroup and it contains the group name instead of dn.
* Store list of non-master replicas in DIT and provide way to list themSimo Sorce2011-03-024-30/+96
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/1007
* Replaced SUDO with Sudo in UI test data.Endi S. Dewata2011-03-0110-22/+22
| | | | Ticket 1005
* Use Sudo rather than SUDO as a label.Rob Crittenden2011-03-013-43/+43
| | | | ticket 1005
* Removed association facets based on memberofindirect.Endi S. Dewata2011-03-011-0/+1
| | | | | | | Association facets based on memberofindirect attribute have been removed because the attribute is non-assignable. Ticket 1027
* Fix replica setup using replication admin kerberos credentialsSimo Sorce2011-03-011-0/+5
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/1022
* Use wrapper for sasl gssapi binds so it behaves like other bindsSimo Sorce2011-03-011-1/+1
| | | | | | | | | | By calling directly sasl_interactive_bind_s() we were not calling __lateinit() This in turn resulted in some variables like dbdir not to be set on the IPAadmin object. Keep all bind types in the same place so the same common sbind steps can be performed in each case. Related to: https://fedorahosted.org/freeipa/ticket/1022
* Final i18n unit test fixes.Pavel Zuna2011-03-012-6/+8
|
* Use pygettext to generate translatable strings from plugin files.Pavel Zuna2011-03-012-1/+828
| | | | | | | | | | | | This patch replaces xgettext with a custom pygettext to generate translatable strings from plugin files in ipalib/plugins. pygettext was modified to handle plural forms (credit goes to Jan Hendrik Goellner) and had some bugs fixed by myself. We only use it for plugins, because it's the only place where we need to extract docstrings for the built-in help system. I also had to make some changes to the way the built-in documentation systems gets docstrings from modules for this to work.
* Create default disabled sudo bind userJr Aquino2011-02-232-0/+10
| | | | | | | | Read access is denied to the sudo container for unauthenticated users. This shared user can be used to provide authenticated access to the sudo information. https://fedorahosted.org/freeipa/ticket/998
* splitting banner requires new file in Makefile.amAdam Young2011-02-231-0/+1
|
* Fixed buttons for DNS records.Endi S. Dewata2011-02-231-6/+6
| | | | | The order of the Add and Delete buttons has been reversed to be consistent with those in other facets.
* split logo This allows for more flexilibity in customizing the site, as an ↵Adam Young2011-02-223-1/+1
| | | | end user can replace the logo, the banner or both
* Space above line in table footerAdam Young2011-02-221-0/+1
|
* move expand and collpase all to the right hand sideAdam Young2011-02-222-1/+8
|
* reorder user search columns UXD found in testing that not having the ↵Adam Young2011-02-221-1/+1
| | | | clikcable link as the left most column confused users.
* adder dialogs with external made the styles for the internal and external ↵Adam Young2011-02-221-5/+8
| | | | classes match the styles for available.
* I18n update for dialog box buttons.Endi S. Dewata2011-02-227-113/+154
| | | | https://fedorahosted.org/freeipa/ticket/899
* Fixed error dialog box.Endi S. Dewata2011-02-221-18/+4
| | | | | The IPA.cmd() has been modified to set the error dialog box's title properly.
* Entitlements ACIs not visible to Permission pluginMartin Kosek2011-02-221-3/+6
| | | | | | | | This patch fixes Entitlements privileges and ACIs. There were missing descriptions or the ACIs could not be processed by Permissino plugin because of missing prefix. https://fedorahosted.org/freeipa/ticket/997
* Add default roles and permissions for HBAC, SUDO and pw policyRob Crittenden2011-02-224-2/+317
| | | | | | | | | | | Created some default roles as examples. In doing so I realized that we were completely missing default rules for HBAC, SUDO and password policy so I added those as well. I ran into a problem when the updater has a default record and an add at the same time, it should handle it better now. ticket 585
* search filter focus afdter a search loads, focus moved to the search filter ↵Adam Young2011-02-212-2/+15
| | | | | | text box, tyhe most likely thing that the user will want to change on the page. https://fedorahosted.org/freeipa/ticket/983
* Fixed error message for invalid Kerberos ticket.Endi S. Dewata2011-02-212-2/+2
| | | | https://fedorahosted.org/freeipa/ticket/490
* Updated test data files.Endi S. Dewata2011-02-213-6751/+14726
|
* I18n update.Endi S. Dewata2011-02-2128-868/+975
| | | | | Hard-coded messages through out the code have been replaced by i18n messages obtained from json_metadata and i18n_messages.
* Add aci to make managed netgroups immutable.Rob Crittenden2011-02-182-1/+6
| | | | ticket 962
* Update Polish & Ukrainian translationsJohn Dennis2011-02-182-25/+25
|
* Fixed in ipa-server-install help and man pageJan Zeleny2011-02-182-2/+5
| | | | https://fedorahosted.org/freeipa/ticket/831
* Remove WebUI identifiers from global namespaceMartin Kosek2011-02-1814-639/+569
| | | | | | | | | | | Many WebUI identifiers were defined in a global namespace. This is not a good programming practice and may result in name clashes, for example with other libraries. This patch moves these variables to IPA namespace or its sub-namespaces, when meaningful. https://fedorahosted.org/freeipa/ticket/212
* removed image from MakefileAdam Young2011-02-171-1/+0
|
* Added expand/collapse all.Endi S. Dewata2011-02-174-34/+78
| | | | | | | | A link has been added into the details page to expand/collapse all sections. Previously each section's <div> container is identified using a long ID. It is now identified using the section name.
* tabs2 color from whiteAdam Young2011-02-171-1/+1
|
* Remove images and replace with css color in dialogsKyle Baker2011-02-171-3/+7
|
* Remove bright green from the tabs and subnav.Kyle Baker2011-02-179-29/+34
|
* Under shadow on h1 and removed imagesKyle Baker2011-02-172-0/+1
|
* Browser configuration support for Firefox 4Martin Kosek2011-02-171-12/+32
| | | | | | | | | | | | | Support of navigator.preferences that is used to access browser configuration was dropped in Firefox 4. This disables automatic configuration of user preferences in this browser that is needed to use Kerberos single sign-on. This patch detectes a lack of this interface and tries to configure the browser using new Services module introduced in Gecko 2 (used in Firefox 4, SeaMonkey 2.1). https://fedorahosted.org/freeipa/ticket/975
* Updated default Kerberos password policyJan Zeleny2011-02-163-2/+7
| | | | https://fedorahosted.org/freeipa/ticket/930
* Fixed cn attribute in ipaUniqueID uniqueness config.Endi S. Dewata2011-02-161-1/+1
|
* Fixed association facets.Endi S. Dewata2011-02-1517-259/+183
| | | | | | | | The association config has been removed because it incorrectly assumes there is only one association between two entities. Now each association is defined separately using association facets. The service.py has been modified to specify the correct relationships. The API.txt has been updated. https://fedorahosted.org/freeipa/ticket/960
* Note --ip-address parameter of ipa-replica-prepare in man pageJakub Hrozek2011-02-151-0/+2
| | | | https://fedorahosted.org/freeipa/ticket/615
* Require ipactl be run as root to avoid a lot of misleading error msgs.Rob Crittenden2011-02-151-0/+3
| | | | | | | | Trying to run ipactl as non-root results in a slew of bogus error messages, some of which come because dirsrv can't read certain files as the wrong user, some based on our handling of that fact. ticket 936
* Fix two problems with ipa-replica-prepareRob Crittenden2011-02-141-1/+1
| | | | | | | | | | | 1. Fix a unicode() problem creating the DNS entries 2. Fix a strange NSS error when generating the certificates against a dogtag server. The NSS errors are quite strange. When generating the first certificate nss_shutdown() fails because the database isn't initialized yet but nss_is_initialized() returned True. The second pass fails because something is in use.
* Fine tuning DNS optionsJakub Hrozek2011-02-141-2/+3
| | | | | | | | | | | | Add pointer to self to /etc/hosts to avoid chicken/egg problems when restarting DNS. On servers set both dns_lookup_realm and dns_lookup_kdc to false so we don't attempt to do any resolving. Leave it to true on clients. Set rdns to false on both server and client. https://fedorahosted.org/freeipa/ticket/931
* DNS record searchAdam Young2011-02-141-9/+18
| | | | | | | | The current version of the DNS Plugin does not support searching by record, so that is commented out. The search field wasn't working either. The search criteria had to be appended to the params array, just after the zone. https://fedorahosted.org/freeipa/ticket/907
* drop the group.upg NIS mapNalin Dahyabhai2011-02-141-12/+0
| | | | | | The group.upg NIS map was an experiment in providing UPG groups dynamically, and is not one of the maps that I'd ever expect a NIS client to "know" to search. We should probably just drop it.