summaryrefslogtreecommitdiffstats
path: root/ipa-python/ipautil.py
Commit message (Collapse)AuthorAgeFilesLines
* Tool for doing configuration updates over LDAPRob Crittenden2008-09-121-0/+10
| | | | | | | | | | | | | This tool takes as input a file which contains basically an LDIF, prefixed with a command: default, add, remove or only. These define the operations to perform such as adding new entries, adding new sub-entries to an existing entry, adding or modifying attributes in a record. If an index entry is modified a task is created to re-create the index. Schema may be added using this tool. 454031
* Add encrypt_file and decrypt_file utility functions.Simo Sorce2008-08-111-1/+64
| | | | | | | | | | | | | | We will use them to encrypt the replica file so that we can transport it over more safely. It contains sensitive data, by encrypting it we assure that even if a distracted admin leaves it around it cannot be accessed without knowing the access passphrase (usually the Directory Manager password) Along the way fix also ipautil.run which was buggy and not passing in correctly stdin. Add dependency for gnupg in spec file
* Use larger set from which to choose chars for random passwords.Simo Sorce2008-08-111-3/+2
| | | | | Use SystemRandom() instead of Random() so that the randomicity is non-deterministic.
* Change user and group validators to match shadow-utilsRob Crittenden2008-08-071-3/+12
| | | | | | | | This sets the regex to [a-zA-Z0-9_.][a-zA-Z0-9_.-]{0,30}[a-zA-Z0-9_.$-]? Also change the validators to return True/False 450613, 457124
* Wrap up the raw_input() to user_input() for convenience and uniformity.Martin Nagy2008-07-231-0/+66
|
* Close all fds when running another program. This fixes the SELinux AVCs.Rob Crittenden2008-03-031-1/+1
| | | | | | Put installation log files into /var/log. 430024
* - Centralize try/except so the entire program is covered. This make itRob Crittenden2008-02-271-0/+12
| | | | | | | possible to catch KeyboardInterrupt during the import process. - Add function for handling python differences with GSSError 434798
* Set the license uniformly to GPLv2 only.Rob Crittenden2008-02-041-1/+1
|
* Fix not so random random passwordsMark McLoughlin2008-01-221-4/+2
| | | | | | | | | | | | | | If you run ipa_generate_password() multiple times, one after the other, then you get the same password each time. This is because it uses the current time to seed the pseudo random number generator. The easiest solution is to just use the default method which seeds itself from /dev/urandom if available, and uses a fractional time value otherwise. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Add service.is_enabled() helperMark McLoughlin2008-01-111-0/+2
| | | | | | Add a simple helper to check whether a service is enabled. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Move radius server components into a separate package.Karl MacMillan2007-12-121-0/+1
|
* Convert the setup of ssl from a shell script to aKarl MacMillan2007-12-061-0/+10
| | | | | python module. This is in preparation for user supplied certs.
* Merge.Karl MacMillan2007-12-111-20/+12
|\
| * Fix errors with ipautil.CalledProcessError and cleanup some imports.Karl MacMillan2007-12-041-9/+7
| |
* | mergeJohn Dennis2007-12-041-1/+17
|\|
| * Compatibility changes to work on RHEL 5 with python 2.4rcritten@redhat.com2007-11-301-1/+17
| |
* | add user profile command line arg to all radiusJohn Dennis2007-11-281-3/+11
| | | | | | | | | | | | | | | | profile command line tools to select between shared and per user profiles modify AttributeValueCompleter so default values prefer previously entered values in editing session
* | merged radius work with latest mainline tipJohn Dennis2007-11-281-1/+12
|\|
| * Generate master password from Simo.Karl MacMillan2007-11-211-0/+12
| |
| * Initial replication setup.Karl MacMillan2007-11-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This add replication setup through two new commands: ipa-replica-prepare and ipa-replica-install. The procedure is to run ipa-replica-prepare on an existing master. This will collect information about the realm and the current master and create a file storing all of the information. After copying that file to the new replica, ipa-replica-install is run (with -r to create a read-only replica). This version of the patch also includes fixes for the sasl mappings on the replicas. Remaining features: - ssl for replication. - automatic configuration of mesh topology for master (or a simpler way to replicate multiple masters. - tool for view / configuring current replication.
| * remove offensive use of rpmJohn Dennis2007-11-061-36/+0
| | | | | | | | add the radiusprofile to the list of objectclasses used when creating a user
* | fix regular expression used in parse_key_value_pairs()John Dennis2007-11-271-1/+1
| |
* | do a better job of handling attribute deletionJohn Dennis2007-11-271-14/+11
| |
* | add parse_items(), read_items_file()John Dennis2007-11-261-1/+33
| | | | | | | | move read_pairs_file() to ipautil
* | add ItemCompleter classJohn Dennis2007-11-261-1/+101
| |
* | Add radius profile implementations:John Dennis2007-11-211-0/+330
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | get_radius_profile_by_uid add_radius_profile update_radius_profile delete_radius_profile find_radius_profiles Rewrite command line arg handling, now support pair entry, interactive mode with auto completion, reading pairs from a file, better handling of mandatory values, better help, long arg names now match attribute name in pairs Establish mappings for all attributes and names used in clients and profiles Add notion of containers to radius clients and profiles in LDAP Move common code, variables, constants, and strings into the files radius_client.py, radius_util.py, ipautil.py to eliminate redundant elements which could get out of sync if modified and to provide access to other code which might benefit from using these items in the future. Add utility functions: format_list() parse_key_value_pairs() Add utility class: AttributeValueCompleter Unify attribute usage in radius ldap schema
* | remove offensive use of rpmJohn Dennis2007-11-061-36/+0
|/ | | | add the radiusprofile to the list of objectclasses used when creating a user
* merge initial radius workJohn Dennis2007-11-031-0/+37
|
* Fix build issues by combining patches submitted by Michael Gregg andRob Crittenden2007-10-171-1/+0
| | | | | Karl MacMillan Remove #!/usr/bin/python from many files to quiet rpmlint
* Patch to fix the installer crashing if selinux is disabled. Also changesmccann@jhu.edu2007-10-021-1/+1
| | | | | | | the exception to contain the complete command. Add a check to make sure installer is running as root. Add signal handler to detect a user-cancelled installation. Detect existing DS instances and prompt to remove them.
* Generalized Time parser and tests, for use in krbPasswordExpirationKevin McCarthy2007-09-041-0/+98
|
* merge ipa-server/ipaserver/util.py into ipa-python/ipautil.pySimo Sorce2007-09-041-0/+62
| | | | this way freeipa-client does not depend on freeipa-server
* Fix python-ldap attribution for cidict.Kevin McCarthy2007-08-271-2/+3
|
* This patch wraps binary data in an xmlrpclib Binary object. ThisKarl MacMillan2007-08-281-0/+64
| | | | | | | | removes the need for LDIF conversion. It will make TurboGears direct code faster, but should keep xmlrpc about the same speed. The patch also swaps out ldap.cidict for the IPA CIDict class. IPA code should only use the CIDict class now.
* Add ipautil, which contains CIDict - a case insensitive dict.Kevin McCarthy2007-08-241-0/+108
This version of the cidict extends the dict class, which allows it to play nicely with turbogears. Also includes extensive tests.