| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
add the domain to the ipa.conf file for apps that need to know
This should fix a bug in the replica setup
|
|
|
|
| |
439891
|
|
|
|
| |
check its length to determine if it is empty
|
|
|
|
| |
440282
|
| |
|
|
|
|
| |
replies were returned.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
UI: /ipa/ui
XML-RPC: /ipa/xml
errors: /ipa/errors
config: /ipa/config
I had to hardcode that URI into the CSS pages but TurboGears handles the
rest of the translations with tg.url().
Added a version to ipa.conf and ipa-rewrite.conf so we can update them
in the future if needed with ipa-upgradeconfig
440443
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The file VERSION is now the sole-source of versioning.
The generated .spec files will been removed in the maintainer-clean targets
and have been removed from the repository.
By default a GIT build is done. To do a non-GIT build do:
$ make TARGET IPA_VERSION_IS_GIT_SNAPSHOT=no
When updating the version you can run this to regenerate the version:
$ make version-update
The version can be determined in Python by using ipaserver.version.VERSION
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
I've changed the variable name searchlimit to sizelimit to match the
name in python-ldap (and hopefully therefore be more readable).
The big change was changing the default value from 0 to -1. As 0 we were
never using the value from cn=ipaconfig
python-ldap expects this to be an int type
In the UI sizelimit was hardcoded at 0 for users
439880
|
|
|
|
|
|
|
| |
Also re-do the way modules are imported. I was attemping to have ^C handled
gracefully but the way I did it could mask other problems.
443987
|
| |
|
|
|
|
| |
fallback to the discovered ones only if that's not available
|
|
|
|
| |
439281
|
|
|
|
| |
438387
|
|
|
|
|
|
|
| |
Latest patch used the wrong path and all files where actually going to /tmp
even if a different path was specified.
Makes also StateFile behave the same as FileStore, and be a public class, this
way a common path can be used too.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We do account activation by using a Class of Service based on group
membership. A problem can happen if the entry itself has an nsaccountlock
attribute and you try doing Class of Service work as well because the
local attribute has priority. So try to detect that the entry has a local
nsAccountLock attribute and report an appropriate error.
Don't allow the admins or editors groups to be de-activated.
Return a better error message if account [in]activation fails.
Catch errors when doing group [in]activation.
439230
|
|
|
|
|
|
| |
Change backup format so files are all in a single directory (no dir
hierarchies) and use an index file so we can save also ownership and
permission info for the restore (and eventually other data later on).
|
|
|
|
|
|
| |
If a site really wants it gone then can delete it via LDAP.
439281
|
|
|
|
|
|
|
|
|
|
| |
The memberOf attribute includes members that are directly in the group
via the "member" attribute and those that are included as a result of
being in a group that is in the group.
The UI needs to be able to distinguish between the two.
438706
|
|
|
|
| |
438021
|
|
|
|
|
|
|
| |
This is more kerberos-like and it doesn't hurt anything, we just won't
allow realms other than our own to be used.
437566
|
|
|
|
|
|
|
| |
Add default exception handler to avoid backtraces in cmdline tools
Enhance error message when the IPA server or realm can't be found
437565
|
|
|
|
|
|
| |
match.
433515
|
|
|
|
|
|
| |
Put installation log files into /var/log.
430024
|
|
|
|
|
| |
Fix error in service principals where the service wasn't being removed before
doing the DNS lookup.
|
|
|
|
|
|
|
| |
possible to catch KeyboardInterrupt during the import process.
- Add function for handling python differences with GSSError
434798
|
|
|
|
| |
433880
|
|
|
|
|
|
| |
There is a --force option for those who know what they are doing.
433483
|
|
|
|
| |
433506
|
|
|
|
| |
434542
|
|
|
|
| |
432814
|
| |
|
|
|
|
| |
433496
|
| |
|
|
|
|
| |
Resolves 429895
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
If you run ipa_generate_password() multiple times, one
after the other, then you get the same password each time.
This is because it uses the current time to seed the
pseudo random number generator.
The easiest solution is to just use the default method
which seeds itself from /dev/urandom if available,
and uses a fractional time value otherwise.
Signed-off-by: Mark McLoughlin <markmc@redhat.com>
|
|
|
|
| |
(python-pyasn1) for the specfile Requires.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Removing shebangs (#!) from a bunch of python libraries
- Don't use a variable name in init scripts for the lock file
- Keep the init script name consistent with the binary name, so renamed
ipa-kpasswd.init to ipa_kpasswd.init
- Add status option to the init scripts
- Move most python scripts out of /usr/share/ipa and into the python
site-packages directories (ipaserver and ipaclient)
- Remove unnecessary sys.path.append("/usr/share/ipa")
- Fix the license string in the spec files
- Rename ipa-webgui to ipa_webgui everywhere
- Fix a couple of issues reported by pychecker in ipa-python
|
|
|
|
|
|
| |
Add a simple helper to check whether a service is enabled.
Signed-off-by: Mark McLoughlin <markmc@redhat.com>
|
| |
|
|
|
|
| |
easier to use.
|
| |
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Latest Fedora 9 python distutils generates .egg-info files;
follow the recommendation at:
http://fedoraproject.org/wiki/Packaging/Python/Eggs
and just package everything under %{python_sitelib}/
Signed-off-by: Mark McLoughlin <markmc@redhat.com>
|
| | |
|
| |
| |
| |
| | |
fix some problems reported by pychecker.
|
|/ |
|