| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Restart the 389-ds instance to ensure all schema is loaded that
dogtag may have installed as files.
According to bug
https://bugzilla.redhat.com/show_bug.cgi?id=680984 this it is only needed
on clones.
ticket 1024
|
|
|
|
|
|
|
| |
Jakub did the initial diagnosis of this, I added a fix for removing
the last entry when removing members and a test case.
ticket 1000
|
|
|
|
|
|
|
|
|
|
|
|
| |
IPA server/replica uninstallation may fail when it tries to restore
a Directory server configuration file in sysrestore directory, which
was already restored before.
The problem is in Directory Server uninstaller which uses and modifies
its own image of sysrestore directory state instead of using the
common uninstaller image.
https://fedorahosted.org/freeipa/ticket/1026
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
When IPA replica or server is configured it does not check for
possibly installed client. This will cause the installation to
fail in the very end.
This patch adds a check for already configured client and suggests
removing it before server/replica installation.
https://fedorahosted.org/freeipa/ticket/1002
|
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1011
Does not completely fix the problem in the ticket, but it does mitigate the failure.
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
In a details page, usually any changes done to the fields will not be
applied until the user clicks the Update button. However, if the page
contains an association table, any addition/deletion to the table will
be applied immediately.
To avoid any confusion, the user is now required to save or reset all
changes to the page before modifying the association. A dialog box will
appear if the page contains any unsaved changes.
|
|
|
|
|
| |
The correct attribute name for SUDO command group membership is
memberof_sudocmdgroup and it contains the group name instead of dn.
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/1007
|
| |
|
|
|
|
| |
This reverts commit 79d22f8341026450ba7ca564e24812c9351c7e70.
|
|
|
|
| |
Ticket 1005
|
|
|
|
| |
ticket 1005
|
|
|
|
|
|
|
| |
Association facets based on memberofindirect attribute have been
removed because the attribute is non-assignable.
Ticket 1027
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/1022
|
|
|
|
|
|
|
|
|
|
| |
By calling directly sasl_interactive_bind_s() we were not calling __lateinit()
This in turn resulted in some variables like dbdir not to be set on the
IPAadmin object.
Keep all bind types in the same place so the same common sbind steps can be
performed in each case.
Related to: https://fedorahosted.org/freeipa/ticket/1022
|
|
|
|
|
|
| |
directly change nsAccountLock on the entry if they are not used
Fixes: https://fedorahosted.org/freeipa/ticket/1021
|
|
|
|
|
|
|
|
|
| |
We need to set uidNumber and gidNumber to the magic values so that DNA can
assign appropriate Ids, otherwise the synchronization of users from AD will
fail with an error about posixAccount requiring a missing (uidNumber)
attribute.
Fixes: https://fedorahosted.org/freeipa/ticket/1020
|
|
|
|
|
|
| |
Fix RDN construction.
Fixes: https://fedorahosted.org/freeipa/ticket/1015
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/1006
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/266
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch replaces xgettext with a custom pygettext to generate
translatable strings from plugin files in ipalib/plugins. pygettext
was modified to handle plural forms (credit goes to Jan Hendrik Goellner)
and had some bugs fixed by myself. We only use it for plugins, because
it's the only place where we need to extract docstrings for the built-in
help system.
I also had to make some changes to the way the built-in documentation
systems gets docstrings from modules for this to work.
|
| |
|
|
|
|
| |
Needed for xgettext/pygettext processing.
|
| |
|
| |
|
|
|
|
|
| |
Fix #904
Fix #917
|
|
|
|
| |
Ticket #903
|
|
|
|
|
|
|
|
| |
The group is now required because 389-ds has tightened the permissions
on /var/run/dirsrv. We use the same group for both our LDAP instances
and /var/run/dirsrv ends up as root:dirsrv mode 0770.
ticket 1010
|
| |
|
|
|
|
|
|
|
| |
It was a design decision to not allow nesting sudo command groups,
remove it.
ticket 1004
|
|
|
|
|
|
|
|
|
|
|
|
| |
We weren't searching the cn=sudo container so all members of a
sudocmdgroup looked indirect.
Add a label for sudo command groups.
Update the tests to include verifying that membership is done
properly.
ticket 1003
|
|
|
|
|
|
|
|
| |
Read access is denied to the sudo container for unauthenticated users.
This shared user can be used to provide authenticated access to the
sudo information.
https://fedorahosted.org/freeipa/ticket/998
|
|
|
|
| |
ticket 594
|
|
|
|
| |
ticket 996
|
|
|
|
| |
ticket 969
|
| |
|
|
|
|
|
| |
The order of the Add and Delete buttons has been reversed to be
consistent with those in other facets.
|
|
|
|
| |
end user can replace the logo, the banner or both
|
| |
|
| |
|
|
|
|
| |
clikcable link as the left most column confused users.
|
|
|
|
| |
classes match the styles for available.
|
| |
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/899
|
|
|
|
|
| |
The IPA.cmd() has been modified to set the error dialog box's title
properly.
|
|
|
|
|
|
|
|
| |
This patch fixes Entitlements privileges and ACIs. There were
missing descriptions or the ACIs could not be processed by
Permissino plugin because of missing prefix.
https://fedorahosted.org/freeipa/ticket/997
|