| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| | |
move read_pairs_file() to ipautil
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
clean up command line args in ipa-delradiusclient
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
get_radius_profile_by_uid
add_radius_profile
update_radius_profile
delete_radius_profile
find_radius_profiles
Rewrite command line arg handling, now support pair entry, interactive
mode with auto completion, reading pairs from a file, better handling
of mandatory values, better help, long arg names now match attribute
name in pairs
Establish mappings for all attributes and names used in clients and
profiles
Add notion of containers to radius clients and profiles in LDAP
Move common code, variables, constants, and strings into the files
radius_client.py, radius_util.py, ipautil.py to eliminate redundant
elements which could get out of sync if modified and to provide access
to other code which might benefit from using these items in the
future.
Add utility functions:
format_list()
parse_key_value_pairs()
Add utility class:
AttributeValueCompleter
Unify attribute usage in radius ldap schema
|
| | |
|
| | |
|
| | |
|
| | |
|
|\| |
|
| |
| |
| |
| | |
add the radiusprofile to the list of objectclasses used when creating a user
|
|/
|
|
| |
add the radiusprofile to the list of objectclasses used when creating a user
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
Fix a bug in the local transport version of memberOf()
|
|
|
|
| |
Make find-groups use memberOf to have a prettier dispaly of members
|
|
|
|
| |
NOTE: this doesn't handle referential integrity.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We don't need the elaborate python requires, since a requires
for e.g. "python-abi = 2.5" is automatically added.
We also don't need the elaborate build requires, since all
it does is query the currently installed version of python
and require that you have it's appropriate python-devel
installed. But if python-devel is installed at all, this
should hold true.
(Also, IMHO the .spec files should be removed from mercurial
since they are automatically generated)
Signed-off-by: Mark McLouglin <markmc@redhat.com>
|
|
|
|
| |
Move some ACI functions around in preparation for cli delegation
|
|
|
|
|
|
|
| |
Current ipa-python imports and calls code from ipaserver (which is in
the ipa-server package). This makes it impossible to use the admin
tools or the ipa-python package on a system without the server bits
installed. This fixes that in a fairly minimal way.
|
|
|
|
|
| |
For now I've added a new API call. The field-specific searching is
a ways off.
|
| |
|
| |
|
|
|
|
|
| |
Karl MacMillan
Remove #!/usr/bin/python from many files to quiet rpmlint
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
will need in the delegation UI.
|
|
|
|
| |
Also a couple double-escaping fixes I missed in the last patch.
|
| |
|
| |
|
|
|
|
|
|
| |
Modify the way we detect SELinux to use selinuxenabled instead of using
a try/except.
Handle SASL/GSSAPI authentication failures when getting a connection
|
|
|
|
|
|
|
| |
the exception to contain the complete command.
Add a check to make sure installer is running as root.
Add signal handler to detect a user-cancelled installation.
Detect existing DS instances and prompt to remove them.
|
|
|
|
|
| |
Add new class of errors for connections
Raise an exception if a connection cannot be made due to missing ccache
|
|
|
|
|
|
|
| |
Don't read ipa.conf to get the realm, the kerberos libs do that for you.
Use the krbPrincipalName to change passwords
Make it possible to specify the principal at user creation.
Mail is not a required attribute so far, don't require it.
|
|
|
|
| |
Added a couple more API calls to make the inverse operations easier.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Install the turbogears web gui including an init script. This
patch includes a few related changes:
* create a production configuration
* rename the web gui startup scrip to ipa-webgui
* add an init script
* chkconfig on the ipa-webgui init script
* make the start script properly daemonize the app when not
in a development directory.
* Install everything to the correct places (/usr/sbin/ipa-webgui
and /usr/share/ipa/ipagui mainly).
There are some things still left to do:
* Sort out the logging - the config needs to be adjusted so
that logging messages end up in /var/log.
|
|
|
|
|
|
|
| |
* Remove the rpmbuild tree with the dist-clean target.
* Move ipa-server-setupssl from /usr/sbin to /usr/share/ipa
* Check in requirement change for generated freeipa-python.spec
* Fix interactive hostname in ipa-server-install.
|
|
|
|
|
| |
Renamed some of the user_group parameters to be self-evident.
Binary wrapping isn't necessary on strings, so removed from xmlrpc calls.
|
|
|
|
| |
Fixes a bug with the group by member where is wasn't trapping not found errors.
|
| |
|
|
|
|
|
|
|
| |
Add ipa-passwd tool
Add simple field validation package
This patch adds a package requirement, python-krbV. This is needed to
determine the current user based on their kerberos ticket.
|
|\ |
|
| |
| |
| |
| | |
Use the filter generation code to search on multiple fields.
|
| |
| |
| |
| |
| | |
Limit editgroup user ajax search.
Minor UI cleanup for editgroup.
|