summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix kinit invocation in ipa-client-installSimo Sorce2011-03-011-1/+2
|
* Revert "Set hard limit on number of commands in batch request to 256."Adam Young2011-03-012-19/+0
| | | | This reverts commit 79d22f8341026450ba7ca564e24812c9351c7e70.
* Replaced SUDO with Sudo in UI test data.Endi S. Dewata2011-03-0110-22/+22
| | | | Ticket 1005
* Use Sudo rather than SUDO as a label.Rob Crittenden2011-03-019-54/+54
| | | | ticket 1005
* Removed association facets based on memberofindirect.Endi S. Dewata2011-03-011-0/+1
| | | | | | | Association facets based on memberofindirect attribute have been removed because the attribute is non-assignable. Ticket 1027
* Fix replica setup using replication admin kerberos credentialsSimo Sorce2011-03-012-1/+7
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/1022
* Use wrapper for sasl gssapi binds so it behaves like other bindsSimo Sorce2011-03-014-12/+13
| | | | | | | | | | By calling directly sasl_interactive_bind_s() we were not calling __lateinit() This in turn resulted in some variables like dbdir not to be set on the IPAadmin object. Keep all bind types in the same place so the same common sbind steps can be performed in each case. Related to: https://fedorahosted.org/freeipa/ticket/1022
* Make activated/inactivated groups optionalSimo Sorce2011-03-013-34/+40
| | | | | | directly change nsAccountLock on the entry if they are not used Fixes: https://fedorahosted.org/freeipa/ticket/1021
* Fix user synchronization.Simo Sorce2011-03-011-0/+2
| | | | | | | | | We need to set uidNumber and gidNumber to the magic values so that DNA can assign appropriate Ids, otherwise the synchronization of users from AD will fail with an error about posixAccount requiring a missing (uidNumber) attribute. Fixes: https://fedorahosted.org/freeipa/ticket/1020
* Unbreak the ipa winsync plugin.Simo Sorce2011-03-011-1/+1
| | | | | | Fix RDN construction. Fixes: https://fedorahosted.org/freeipa/ticket/1015
* Fix winsync agreements setupSimo Sorce2011-03-011-23/+38
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/1006
* Set the loginShell attribute on winsynced entries if configuredSimo Sorce2011-03-014-1/+66
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/266
* Final i18n unit test fixes.Pavel Zuna2011-03-014-14/+16
|
* Use pygettext to generate translatable strings from plugin files.Pavel Zuna2011-03-015-12/+834
| | | | | | | | | | | | This patch replaces xgettext with a custom pygettext to generate translatable strings from plugin files in ipalib/plugins. pygettext was modified to handle plural forms (credit goes to Jan Hendrik Goellner) and had some bugs fixed by myself. We only use it for plugins, because it's the only place where we need to extract docstrings for the built-in help system. I also had to make some changes to the way the built-in documentation systems gets docstrings from modules for this to work.
* Fix i18n related failures in unit tests.Pavel Zuna2011-03-015-57/+29
|
* Fix translatable strings in ipalib plugins.Pavel Zuna2011-03-0122-40/+57
| | | | Needed for xgettext/pygettext processing.
* Translate docstrings.Pavel Zuna2011-03-012-4/+8
|
* Fallback to default locale (en_US) if env. setting is corrupt.Pavel Zuna2011-03-011-1/+5
|
* Send Accept-Language header over XML-RPC and translate on server.Pavel Zuna2011-03-012-7/+40
| | | | | Fix #904 Fix #917
* Remove deprecated i18n code from ipalib/request and all references to it.Pavel Zuna2011-03-014-203/+2
| | | | Ticket #903
* Set SuiteSpotGroup when setting up our 389-ds instances.Rob Crittenden2011-02-242-1/+5
| | | | | | | | The group is now required because 389-ds has tightened the permissions on /var/run/dirsrv. We use the same group for both our LDAP instances and /var/run/dirsrv ends up as root:dirsrv mode 0770. ticket 1010
* Become IPA v2 RC 2 (2.0.0.rc2)Rob Crittenden2011-02-231-1/+1
|
* Sudo command groups are not supposed to allow nesting.Rob Crittenden2011-02-234-22/+5
| | | | | | | It was a design decision to not allow nesting sudo command groups, remove it. ticket 1004
* Collect memberof information for sudo commands.Rob Crittenden2011-02-234-3/+34
| | | | | | | | | | | | We weren't searching the cn=sudo container so all members of a sudocmdgroup looked indirect. Add a label for sudo command groups. Update the tests to include verifying that membership is done properly. ticket 1003
* Create default disabled sudo bind userJr Aquino2011-02-235-3/+36
| | | | | | | | Read access is denied to the sudo container for unauthenticated users. This shared user can be used to provide authenticated access to the sudo information. https://fedorahosted.org/freeipa/ticket/998
* Fix typo, add example for when user krbtpolicy takes effect.Rob Crittenden2011-02-231-2/+2
| | | | ticket 594
* Make permission and privilege help text clearerRob Crittenden2011-02-232-8/+18
| | | | ticket 996
* Add man page for the IPA configuration fileRob Crittenden2011-02-233-2/+188
| | | | ticket 969
* splitting banner requires new file in Makefile.amAdam Young2011-02-231-0/+1
|
* Fixed buttons for DNS records.Endi S. Dewata2011-02-231-6/+6
| | | | | The order of the Add and Delete buttons has been reversed to be consistent with those in other facets.
* split logo This allows for more flexilibity in customizing the site, as an ↵Adam Young2011-02-223-1/+1
| | | | end user can replace the logo, the banner or both
* Space above line in table footerAdam Young2011-02-221-0/+1
|
* move expand and collpase all to the right hand sideAdam Young2011-02-222-1/+8
|
* reorder user search columns UXD found in testing that not having the ↵Adam Young2011-02-221-1/+1
| | | | clikcable link as the left most column confused users.
* adder dialogs with external made the styles for the internal and external ↵Adam Young2011-02-221-5/+8
| | | | classes match the styles for available.
* Net group to NetgroupAdam Young2011-02-221-1/+1
|
* I18n update for dialog box buttons.Endi S. Dewata2011-02-228-118/+164
| | | | https://fedorahosted.org/freeipa/ticket/899
* Fixed error dialog box.Endi S. Dewata2011-02-221-18/+4
| | | | | The IPA.cmd() has been modified to set the error dialog box's title properly.
* Entitlements ACIs not visible to Permission pluginMartin Kosek2011-02-221-3/+6
| | | | | | | | This patch fixes Entitlements privileges and ACIs. There were missing descriptions or the ACIs could not be processed by Permissino plugin because of missing prefix. https://fedorahosted.org/freeipa/ticket/997
* Add default roles and permissions for HBAC, SUDO and pw policyRob Crittenden2011-02-225-4/+331
| | | | | | | | | | | Created some default roles as examples. In doing so I realized that we were completely missing default rules for HBAC, SUDO and password policy so I added those as well. I ran into a problem when the updater has a default record and an add at the same time, it should handle it better now. ticket 585
* Set hard limit on number of commands in batch request to 256.Rob Crittenden2011-02-222-0/+19
| | | | ticket 984
* Validate NAPTR recordsJakub Hrozek2011-02-222-4/+30
| | | | https://fedorahosted.org/freeipa/ticket/840
* Set krb5_realm in sssd.conf in the ipa provider.Rob Crittenden2011-02-221-2/+4
| | | | ticket 925
* Move some BuildRequires so building with ONLY_CLIENT works.Rob Crittenden2011-02-221-14/+14
| | | | ticket 978
* search filter focus afdter a search loads, focus moved to the search filter ↵Adam Young2011-02-212-2/+15
| | | | | | text box, tyhe most likely thing that the user will want to change on the page. https://fedorahosted.org/freeipa/ticket/983
* 18 Use TLS for ipadiscovery during ipa-client-install ↵Jr Aquino2011-02-211-0/+24
| | | | https://fedorahosted.org/freeipa/ticket/974
* Fixed error message for invalid Kerberos ticket.Endi S. Dewata2011-02-213-8/+9
| | | | https://fedorahosted.org/freeipa/ticket/490
* Updated test data files.Endi S. Dewata2011-02-213-6751/+14726
|
* I18n update.Endi S. Dewata2011-02-2128-868/+975
| | | | | Hard-coded messages through out the code have been replaced by i18n messages obtained from json_metadata and i18n_messages.
* Make nsslib IPv6 awareJakub Hrozek2011-02-212-17/+96
|