summaryrefslogtreecommitdiffstats
path: root/ipa-server/ipa-gui
Commit message (Collapse)AuthorAgeFilesLines
* Fix error in validation when editing new groups via the UIRob Crittenden2008-11-191-0/+2
| | | | 471808
* Remove the column width from #details table.details tdRob Crittenden2008-11-121-1/+0
| | | | | | This should make the User Find results page look nicer. 470428
* Fix error in validation when adding new groups via the UIRob Crittenden2008-10-311-0/+2
| | | | 469256
* Remove reference to very unlikely service examples that are notSimo Sorce2008-09-181-4/+1
| | | | currently kerberized (and may never be due to their nature).
* Fix some copy/paste and other syntax errors from the validators commit.Rob Crittenden2008-08-142-5/+4
| | | | 450613, 457124
* Use larger set from which to choose chars for random passwords.Simo Sorce2008-08-111-2/+1
| | | | | Use SystemRandom() instead of Random() so that the randomicity is non-deterministic.
* Change user and group validators to match shadow-utilsRob Crittenden2008-08-073-3/+32
| | | | | | | | This sets the regex to [a-zA-Z0-9_.][a-zA-Z0-9_.-]{0,30}[a-zA-Z0-9_.$-]? Also change the validators to return True/False 450613, 457124
* Use % format string to fix nbsp problem in userlist.kid (fixes #453779)Jason Gerard DeRose2008-07-301-7/+9
|
* Fix encoding issue when manually loading templates for formsRob Crittenden2008-07-296-7/+40
| | | | | | | | | | | | | | | We used to manually load the template files for the edit pages using turbogears.meta.load_kid_template(). Unfortunately this went through the one code path where encoding was completely ignored. It ended up defaulting to sys.getdefaultencoding() which is 'ascii'. So even though most of the templates are loaded as 'utf-8' the few that really mattered weren't. The fix is to call kid.load_template() ourselves and set the encoding of the class we just loaded to either the setting in the app.cfg file or to the normal default value of 'utf-8'. 454076
* Change Title label to Job Title for clarityRob Crittenden2008-07-294-29/+37
| | | | 453780
* Ignore empty values when converting a multi-valued form field back to a ↵Rob Crittenden2008-06-091-1/+2
| | | | | | list. This will prevent validation errors when validate.UniqueList() is executed. 449785
* Add our own SIGTERM handler so we can do clean shutdowns.Rob Crittenden2008-06-091-2/+13
| | | | | | Also fix foreground mode. 450211
* Fix issue of double logging in ipa_error.log.Rob Crittenden2008-06-036-4/+60
| | | | | | | | | | | We open the log in ipa_webgui and this was being inherited by TurboGears which uses the same log so everything was getting logged twice. Shut down the log in ipa_webgui at the last possible moment. This will not catch configuration errors. Add a Not Found template. Only print a traceback on 500 errors.
* Move non-user-configurable configuration elements to TurboGears app.cfg file.Rob Crittenden2008-05-223-31/+58
| | | | 432908
* Add validators.py to the list of files.Rob Crittenden2008-05-201-0/+1
| | | | 445286
* Do uniqueness check on phone numbers and cn entered via the UI.Rob Crittenden2008-05-203-4/+80
| | | | 445286
* The admin user doesn't have the inetorgperson objectclass so don't have a ↵Rob Crittenden2008-05-131-0/+10
| | | | | | | | | givenname attribute. The UI is currently hardcoded to require "first name" which renders the admin user uneditable via the UI. This is a hack that will allow admin to be edited, assuming that one doesn't try to add a firstname field. 440548
* Refine our web space some more so that everything we reference is in /ipaRob Crittenden2008-05-075-29/+29
| | | | | | | | | | | | | | | UI: /ipa/ui XML-RPC: /ipa/xml errors: /ipa/errors config: /ipa/config I had to hardcode that URI into the CSS pages but TurboGears handles the rest of the translations with tg.url(). Added a version to ipa.conf and ipa-rewrite.conf so we can update them in the future if needed with ipa-upgradeconfig 440443
* Fix the client-side search size limit.Rob Crittenden2008-04-251-1/+1
| | | | | | | | | | | | | | I've changed the variable name searchlimit to sizelimit to match the name in python-ldap (and hopefully therefore be more readable). The big change was changing the default value from 0 to -1. As 0 we were never using the value from cn=ipaconfig python-ldap expects this to be an int type In the UI sizelimit was hardcoded at 0 for users 439880
* Add nfs as a service principal type.Rob Crittenden2008-04-231-0/+1
| | | | 440242
* Don't let a user change their own uid. Fix some related errors if they try.Rob Crittenden2008-04-232-3/+8
| | | | 440895
* Add missing imageRob Crittenden2008-04-031-0/+1
|
* Don't try to update ipauserobjectclasses or ipagroupobjectclassesRob Crittenden2008-04-022-9/+13
| | | | | | | | since they aren't being displayed anymore. They will just get blanked. Also add some error handling in ipahelper.fix_incoming_fields() 438256
* On the delegation edit screen allow the direct entry of a group nameRob Crittenden2008-03-241-4/+28
| | | | | | Fix the redirection errors, it was going to back to the Add delegation page 438257
* Don't try to add the default group to a user when creating the group.Rob Crittenden2008-03-311-4/+19
| | | | | | This is done automatically and trying to do so will return an error. 432106
* Fix account activation.Rob Crittenden2008-03-311-6/+11
| | | | | | | | | | | | | | | | We do account activation by using a Class of Service based on group membership. A problem can happen if the entry itself has an nsaccountlock attribute and you try doing Class of Service work as well because the local attribute has priority. So try to detect that the entry has a local nsAccountLock attribute and report an appropriate error. Don't allow the admins or editors groups to be de-activated. Return a better error message if account [in]activation fails. Catch errors when doing group [in]activation. 439230
* Do case-less comparisons when considering objectclass but store theRob Crittenden2008-03-282-0/+4
| | | | | | | | | | current value to prevent unnecessary LPAP updates (and failed writes) Don't check against these lists on updates, only add them on new entries. Disable the ability to configure in the UI these values for now. 438256
* When getting members let user indicate what type of member they want.Rob Crittenden2008-03-274-7/+77
| | | | | | | | | | The memberOf attribute includes members that are directly in the group via the "member" attribute and those that are included as a result of being in a group that is in the group. The UI needs to be able to distinguish between the two. 438706
* Add additional detail to error messages.Rob Crittenden2008-03-255-24/+24
| | | | | | | | | This runs the risk of showing too much and confusing users but on the other hand it often includes required information detailing why the error occurred such as what attribute the user lacks write access too and why changing a password failed. 438057
* Don't error out if the user isn't in any groups.Rob Crittenden2008-03-261-0/+3
| | | | 438222
* Re-root the IPA web UI to /ipa and the XML-RPC interface to /ipaxml.Rob Crittenden2008-03-243-12/+19
| | | | 438021
* We are really changing the kerberos principal key and not the password whenRob Crittenden2008-03-245-45/+45
| | | | | | | | | | we do updates, so use the right terminology internally. Also fix the actual field we update (and grant permission appropriately in delegations). The DS password handles updating userPassword and any Samba passwords as necessary. 438256
* Remove ACI that was causing RDN changes to failRob Crittenden2008-03-101-4/+1
| | | | | | Fix for session code so RDN change can succeed 433523
* Remove some duplicate id's that are not valid HTMLRob Crittenden2008-03-053-5/+2
| | | | | Remove the footer. It was a leftover from the original TurboGears-generated project that Kevin McCarthy had modified.
* Remove the ability for the average user to add/delete groups on user edit pageRob Crittenden2008-03-041-3/+3
| | | | | | | If they have any delegations at all (are in editors group) they will have these links. 433387
* In the UI we don't want to display Edit links unless someone can actuallyRob Crittenden2008-02-272-11/+63
| | | | | | | | | | | | edit things. We use the 'editors' group for this. This group itself grants no permission other than displaying certain things in the UI. In order to be in the editors group a user must be a member of a group that is the source group in a delegation. The memberof plugin will do all the hard work to be sure that a user's memberof contains cn=editors if they are in a delegated group. 432874
* Require that service principals resolve to a DNS A record.Rob Crittenden2008-02-261-1/+1
| | | | | | There is a --force option for those who know what they are doing. 433483
* Use the label "Full Name" for "Common Name"Rob Crittenden2008-02-262-2/+2
| | | | 433525
* Remove HTML from Javascript error message and fix up language to be clearerRob Crittenden2008-02-221-1/+1
| | | | 433374
* Don't clear out the uid from the session until the record has been updated.Rob Crittenden2008-02-201-3/+3
|
* Don't let a regular user edit their own active status or managerRob Crittenden2008-02-201-1/+4
| | | | 433384
* Use basestring class when testing to see if an object is a string to supportRob Crittenden2008-02-214-10/+12
| | | | | | both Unicode and byte strings. 433651
* IE 6 doesn't support transparent PNGRob Crittenden2008-02-204-3/+1
| | | | | | Remove stray character and a debug line from the CSS 429984
* Include and use policy icon in the UIRob Crittenden2008-02-205-3/+4
| | | | 430954
* Objects used by new CSS layout.Rob Crittenden2008-02-2010-0/+0
|
* Only show Delete button for admins, editors and don't let user delete them selfRob Crittenden2008-02-181-2/+4
| | | | Resolves 433382
* Update of CSS from Máirín Duffy including some per-object imagesRob Crittenden2008-02-1921-171/+375
|
* Use the proper access methods in IPA policy subcontroller.Rob Crittenden2008-02-181-17/+17
| | | | Resolves 433062
* Import internationalization for kid templates patch from Masato TaruishiRob Crittenden2008-02-198-0/+1588
|
* Initial SELinux policies for ipa_kpasswd and ipa_webguiRob Crittenden2008-02-081-10/+17
|