Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use same tzinfo as the time parser to avoid TypeError from being thrown | Rob Crittenden | 2007-11-21 | 1 | -1/+1 |
| | |||||
* | Enable group inactivation by using the Class of Service plugin. | Rob Crittenden | 2007-11-20 | 7 | -14/+82 |
| | | | | | | | | | | | | | | | | | | | | This adds 2 new groups: activated and inactivated. If you, or a group you are a member of, is in inactivated then you are too. If you, or a group you are a member of, is in the activated group, then you are too. In a fight between activated and inactivated, activated wins. The DNs for doing this matching is case and white space sensitive. The goal is to never have to actually set nsAccountLock in a user directly but move them between these groups. We need to decide where in the CLI this will happen. Right it is split between ipa-deluser and ipa-usermod. To inactivate groups for now just add the group to inactivate or active. | ||||
* | Implement the password policy UI and finish IPA policy UI | Rob Crittenden | 2007-11-16 | 6 | -86/+328 |
| | | | | | | | | | | | | | | | | | | This includes a default password policy Custom fields are now read from LDAP. The format is a list of dicts with keys: label, field, required. The LDAP-based configuration now specifies: ipaUserSearchFields: uid,givenName,sn,telephoneNumber,ou,title ipaGroupSearchFields: cn,description ipaSearchTimeLimit: 2 ipaSearchRecordsLimit: 0 ipaCustomFields: ipaHomesRootDir: /home ipaDefaultLoginShell: /bin/sh ipaDefaultPrimaryGroup: ipausers ipaMaxUsernameLength: 8 ipaPwdExpAdvNotify: 4 This could use some optimization. | ||||
* | Replace references to Person and People with User and Users | Rob Crittenden | 2007-11-15 | 9 | -25/+25 |
| | |||||
* | Make the group cn an editable field though protected by default. | Rob Crittenden | 2007-11-14 | 3 | -26/+26 |
| | | | | Fix some issues with the multi-value to single-value reversion. | ||||
* | Include multi-value fields on the Add Person page | Rob Crittenden | 2007-11-14 | 7 | -117/+241 |
| | | | | Remove multi-valued cn from groups | ||||
* | Add an editors group. This is used to generally grant access for users | Rob Crittenden | 2007-11-14 | 9 | -47/+52 |
| | | | | | | | | to edit other users (the Edit link won't appear otherwise). Additional delegation is need to grant permission to individual attributes. Update the failed login page to indicate that it is a permission issue. Don't allow access to policy at all for non-admins. By default users can only edit themselves. | ||||
* | Add more fields to the IPA Policy form | Rob Crittenden | 2007-11-13 | 4 | -1/+68 |
| | |||||
* | Remove non-existent files from Makefile targets | Rob Crittenden | 2007-11-13 | 2 | -2/+0 |
| | |||||
* | The e-mail field should not be required. | Rob Crittenden | 2007-11-13 | 1 | -1/+1 |
| | |||||
* | Restrict access to some parts of the UI to those in the admins group | Rob Crittenden | 2007-11-13 | 4 | -14/+41 |
| | |||||
* | Fix editing groups when cn is a single-valued field | Rob Crittenden | 2007-11-09 | 1 | -2/+4 |
| | | | | Fix some error messages that were printing the entire detail message | ||||
* | Require uniqueness in the name/comment field of delegations | Rob Crittenden | 2007-11-09 | 2 | -6/+31 |
| | | | | | | Fix error reporting in the UI to include the detailed message Sort delegations by name when displaying them Update the name field from "Name" to "Delegation Name" | ||||
* | Underline columns on sort results page so users will know it is a link | Rob Crittenden | 2007-11-12 | 1 | -0/+19 |
| | | | | Restore the CSS to display the up/down arrow on sort columns | ||||
* | Initial support for policy editing | Rob Crittenden | 2007-11-12 | 13 | -2/+349 |
| | | | | More work is needed as the values are currently hardcoded and not saved | ||||
* | Enable multi-value field support for some attributes on the edit pages | Rob Crittenden | 2007-11-08 | 10 | -79/+472 |
| | | | | | Better error reporting in the GUI Include a document describing how multi-valued fields work | ||||
* | Update text to reflect new CSS code (sidebar now on right) | Rob Crittenden | 2007-11-06 | 1 | -1/+1 |
| | |||||
* | define Self-Service as editting your own record. | Rob Crittenden | 2007-11-02 | 3 | -4/+14 |
| | | | | | This has the side-effect of removing the realm from Loggin in as. This can be changed by using user_name instead of display_name in master.kid. | ||||
* | Distinguish between active and inactive users on the Find People page. | Rob Crittenden | 2007-11-02 | 3 | -3/+25 |
| | |||||
* | groups come back as a list where the first element is the number of | Rob Crittenden | 2007-11-02 | 1 | -0/+1 |
| | | | | groups returned. Skip that element. | ||||
* | Update the UI look and feel | Rob Crittenden | 2007-11-01 | 33 | -411/+473 |
| | |||||
* | TurboGears log files and log rotation | Rob Crittenden | 2007-11-01 | 2 | -16/+29 |
| | | | | | | | | | | | The error log is rotated weekly on Sunday. 4 backups are saved. The access log is not stored since it would be a duplicate of the Apache logs. It can be enabled if desired. Had to move the call to daemonize() in ipa-webgui so that the fork is done before TurboGears is initialized. Otherwise the log files end up getting closed. | ||||
* | Rename memberOf to group_members in xml-rpc interface. | Karl MacMillan | 2007-10-31 | 1 | -2/+2 |
| | |||||
* | Have the GUI use memberOf() instead of looping through the member DNs | Rob Crittenden | 2007-10-31 | 1 | -25/+5 |
| | | | | Fix a bug in the local transport version of memberOf() | ||||
* | Add delete user and group to webgui. | Kevin McCarthy | 2007-10-23 | 4 | -4/+93 |
| | | | | NOTE: this doesn't handle referential integrity. | ||||
* | Set the user password when adding a user | Rob Crittenden | 2007-10-26 | 1 | -2/+11 |
| | |||||
* | Rename the form fields parameter to be clearer: | Kevin McCarthy | 2007-10-25 | 8 | -250/+250 |
| | | | | | | user -> user_fields group -> group_fields delegate -> delegate_fields | ||||
* | webgui side of custom fields. | Kevin McCarthy | 2007-10-24 | 5 | -2/+96 |
| | |||||
* | Fix devel mode for the webgui. | Kevin McCarthy | 2007-10-23 | 1 | -3/+2 |
| | |||||
* | Add an LDAP attribute -> label mapping function to XML-RPC layer | Rob Crittenden | 2007-10-22 | 1 | -28/+2 |
| | | | | Move some ACI functions around in preparation for cli delegation | ||||
* | Add add/edit/show for manager and secretary fields. | Kevin McCarthy | 2007-10-19 | 9 | -24/+293 |
| | |||||
* | Remove dependency between ipa-pyton and ipa-server | Karl MacMillan | 2007-10-19 | 1 | -1/+3 |
| | | | | | | | Current ipa-python imports and calls code from ipaserver (which is in the ipa-server package). This makes it impossible to use the admin tools or the ipa-python package on a system without the server bits installed. This fixes that in a fairly minimal way. | ||||
* | Finish the email autosuggest. | Kevin McCarthy | 2007-10-18 | 1 | -26/+14 |
| | | | | | For now I've added a new API call. The field-specific searching is a ways off. | ||||
* | Fix HTML errors on empty fields. Move roomnumber to address section. | Kevin McCarthy | 2007-10-19 | 3 | -33/+35 |
| | |||||
* | Add a flash message to the top of the page when there are validation errors. | Kevin McCarthy | 2007-10-19 | 3 | -5/+22 |
| | |||||
* | Add exception template. | Karl MacMillan | 2007-10-19 | 1 | -0/+1 |
| | |||||
* | Add an exception/error handler to the web gui. | Kevin McCarthy | 2007-10-18 | 2 | -0/+92 |
| | |||||
* | Fix build issues related to the autotools conversion | Rob Crittenden | 2007-10-18 | 3 | -0/+8 |
| | |||||
* | Add logger objects to each controller. | Kevin McCarthy | 2007-10-17 | 7 | -9/+26 |
| | | | | Fix up the config settings for logging. | ||||
* | Sort users by last name. Make labeleduri a link. | Kevin McCarthy | 2007-10-17 | 2 | -5/+7 |
| | |||||
* | Add print media CSS. Rename delegation edit button to 'update'. | Kevin McCarthy | 2007-10-17 | 5 | -8/+25 |
| | |||||
* | Merge. | Karl MacMillan | 2007-10-17 | 8 | -30/+125 |
|\ | |||||
| * | patch queue: jslint_fixes.patch | Kevin McCarthy | 2007-10-16 | 2 | -4/+4 |
| | | |||||
| * | Remove coffee-spewing color from delete button. Adjust nav-link and size. | Kevin McCarthy | 2007-10-16 | 2 | -4/+3 |
| | | |||||
| * | Adds deletion for delegations. | Kevin McCarthy | 2007-10-16 | 3 | -0/+68 |
| | | | | | | | | The deletion is only triggered via javascript, so they must hit confirm. | ||||
| * | Fixes to acilist: make use POST, use field labels. | Kevin McCarthy | 2007-10-15 | 4 | -19/+33 |
| | | |||||
| * | Fix for when there's a single ACI. | Kevin McCarthy | 2007-10-15 | 1 | -0/+4 |
| | | |||||
| * | Fix list delegations to show field labels. | Kevin McCarthy | 2007-10-15 | 3 | -2/+13 |
| | | | | | | | | Also fix script tags on delegateform.kid. | ||||
| * | Rename delegatenewform to delegateform. | Kevin McCarthy | 2007-10-15 | 2 | -2/+1 |
| | | |||||
* | | Autotool ipa-server - patch from William Jon McCann <mccann@jhu.edu>. | Karl MacMillan | 2007-10-17 | 14 | -38/+276 |
|/ |