summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Typos in freeIPA messagesMartin Kosek2011-02-025-10/+14
| | | | | | | | | | This patch fixes several reported typos in IPA messages and in comments. Contributors file has been updated + the original author of the patch reporting the typos was added. https://fedorahosted.org/freeipa/ticket/848
* IPv6 enhancementsJakub Hrozek2011-02-024-39/+62
| | | | | | | * Make host-add, host-del and reverse zone creation IPv6 aware * Make Bind listen on IPv6 interfaces, too https://fedorahosted.org/freeipa/ticket/398
* core widget unit tests baseline set of unit tests for checking that each ↵Adam Young2011-02-026-6625/+6710
| | | | widget conforms to the contract
* Fix minor bug in host-add logic.Pavel Zuna2011-02-021-2/+2
| | | | Ticket #798
* Fix crash in ipa help for NO_CLI plugins.Pavel Zuna2011-02-021-14/+2
| | | | Fix #854
* Add support for tracking and counting entitlementsRob Crittenden2011-02-0215-26/+1116
| | | | | | | | | | | | | | Adds a plugin, entitle, to register to the entitlement server, consume entitlements and to count and track them. It is also possible to import an entitlement certificate (if for example the remote entitlement server is unaviailable). This uses the candlepin server from https://fedorahosted.org/candlepin/wiki for entitlements. Add a cron job to validate the entitlement status and syslog the results. tickets 28, 79, 278
* Fix installing with an external CA and wait for dogtag to come upRob Crittenden2011-02-012-10/+63
| | | | | | | | | | | | | | | | | | | | | There wasn't an exception in the "is the server already installed" check for a two-stage CA installation. Made the installer slightly more robust. We create a cache file of answers so the next run won't ask all the questions again. This cache is removed when the installation is complete. Previously nothing would work if the installer was run more than once, this should be fixed now. The cache is encrypted using the DM password. The second problem is that the tomcat6 init script returns control before the web apps are up. Add a small loop in our restart method to wait for the 9180 port to be available. This also adds an additional restart to ensure that nonces are disabled. ticket 835 revise
* undo entity widget adds line level undo for the entity-select-widget now ↵Adam Young2011-02-011-2/+13
| | | | shows the undo link on filter change does JSON queries on keyup instead of keypress https://fedorahosted.org/freeipa/ticket/886
* Add new schema to store information about permissions.Rob Crittenden2011-02-014-2/+80
| | | | | | | | | There are some permissions we can't display because they are stored outside of the basedn (such as the replication permissions). We are adding a new attribute to store extra information to make this clear, in this case SYSTEM. ticket 853
* Permission rename test failingMartin Kosek2011-02-011-9/+5
| | | | | | | | This patch fixes test for Permission plugin - mainly permission-mod part. Description field that the tests expected and which was removed in ticket 792 was removed from the tests. https://fedorahosted.org/freeipa/ticket/892
* use entity select widget for permissionsAdam Young2011-02-013-150/+97
| | | | https://fedorahosted.org/freeipa/ticket/879
* Force sync in both direction before changing replication agreementsSimo Sorce2011-02-012-24/+26
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/887
* Fixed attribute name for delegation member group.Endi S. Dewata2011-02-011-1/+1
|
* Fix changing membergroup in a delegation.Rob Crittenden2011-02-013-19/+29
| | | | | | | | This is mostly due to inconsistent option name usage but also due to the aci plugin not always treating memberof as a special kind of filter. ticket 869
* Added undo for permission rights.Endi S. Dewata2011-02-012-110/+38
| | | | https://fedorahosted.org/freeipa/ticket/884
* Fixed missing object reference.Endi S. Dewata2011-01-311-2/+2
|
* aci association fixesAdam Young2011-01-313-36/+41
| | | | | declarative priv definition fixes role_add_privilege and privilege_add_permisison
* Add an address for a nameserver when a new zone is created during installJakub Hrozek2011-01-314-14/+28
| | | | https://fedorahosted.org/freeipa/ticket/881
* association fixesAdam Young2011-01-312-9/+29
| | | | | PLaces custom association facets into the proper facet groups usesthe associators if they are specifiedfor an association
* Fix privilege name we are assigning to DNS principal.Rob Crittenden2011-01-311-1/+1
| | | | This fixes an installation failure.
* Use a common group for all DS instancesSimo Sorce2011-01-316-137/+141
| | | | | | | | Also remove the option to choose a user. It is silly to keep it, when you can't choose the group nor the CA directory user. Fixes: https://fedorahosted.org/freeipa/ticket/851
* Removed permission description from UIEndi S. Dewata2011-01-311-10/+3
| | | | https://fedorahosted.org/freeipa/ticket/877
* reduce scope of remove link it was global ↵Adam Young2011-01-311-37/+35
| | | | https://fedorahosted.org/freeipa/ticket/212
* Rename permissions and privileges to be more readable.Rob Crittenden2011-01-317-307/+239
| | | | | | | This also drops description from permissions since it seems redundant and fixes up the help text a little. ticket 792
* widget unit testsAdam Young2011-01-315-1/+195
| | | | unit test for basic functionality, text, and checkbox widgets
* Fixed permission lookupJan Zeleny2011-01-313-12/+16
| | | | | | | | Lookup based on --filter wasn't implemented at all. It did't show until now, because of bug sitting on top of it which was resulting in internal error. This patch fixes the bug and adds the filtering functionality. https://fedorahosted.org/freeipa/ticket/818
* Fixed IPA.widget's load, save, and is_dirty.Endi S. Dewata2011-01-301-10/+27
| | | | This patch fixes the problem leaving the user details page.
* delegation work aroundAdam Young2011-01-291-3/+10
| | | | Since the delegation enityt is using membergroup as the property name at this stage, we can use that as the value until the pluing is consistant
* Fixed permission reset and is_dirty unit testEndi S. Dewata2011-01-291-0/+1
| | | | | | The reset and is_dirty functionality for permission has been fixed. New widgets have been created for select and a collection of checkboxes. New test data files have been added for each target type.
* populate attribute table for delegation addAdam Young2011-01-291-0/+4
|
* Fixed permission reset and is_dirty.Endi S. Dewata2011-01-299-1069/+766
| | | | | | The reset and is_dirty functionality for permission has been fixed. New widgets have been created for select and a collection of checkboxes. New test data files have been added for each target type.
* placeholder functionAdam Young2011-01-291-0/+2
| | | | | | ipa_target_section does not overload is_dirty, and it alwayrs returns true, meaning you can never leave the page once you visit it. THis commit pushes a simple placeholder function that always returns fales. Follow on work will be required to correctly inplement the is_dirty functonality
* Add permission dialog adjustments.Endi S. Dewata2011-01-2912-492/+598
| | | | | | | | | | | | The IPA.dialog has been modified to support sections. The add dialog for permission has been modified to include the target section. The base dialog classes have been moved from widget.js into a new file called dialog.js. This patch also includes ayoung's fix for parameter name and format for the permission attributes. https://fedorahosted.org/freeipa/ticket/791
* ipa permission-mod --rename does not workMartin Kosek2011-01-282-9/+86
| | | | | | | | | | | This patch fixes nonfunctional rename operation in permission plugin. Also makes sure, that no change is made to the underlying ACI in pre_callback() when the target permission already exists. Several tests for the rename operation have been created to ensure that the it won't break again unnoticed. https://fedorahosted.org/freeipa/ticket/814
* Don't perform some API self-tests in production mode for performance reasonsRob Crittenden2011-01-286-8/+20
| | | | | | | | | | | | The API does a fair number of self tests and locking to assure that the registered commands are consistent and will work. This does not need to be done on a production system and adds additional overhead causing somewhere between a 30 and 50% decrease in performance. Because makeapi is executed when a build is done ensure that it is executed in developer mode to ensure that the framework is ok. ticket 751
* unmatched aciattrsAdam Young2011-01-284-12/+32
| | | | instead of reporting an error on unmatched aciattrs, append them to the table.
* services listAdam Young2011-01-283-163/+82
| | | | | | | | Declaritive Service definition Fixed a problem with multiple calls to create breaking the link between the select box and the text box swapped the select and the text https://fedorahosted.org/freeipa/ticket/442
* Fixed delegation UI issuesEndi S. Dewata2011-01-286-69/+80
| | | | | | | | | | | | | | | | | | This patch fixes several issues in delegation UI: When adding a new delegation, only the first attribute selected was saved. Now all attributes will be saved properly. When loading the details page, the custom widgets did not store the original values properly so is_dirty() did not work correctly. Now this has been fixed except for the memberof attribute because of these issues: - https://fedorahosted.org/freeipa/ticket/869 - https://fedorahosted.org/freeipa/ticket/870 When saving the details page, the attrs were saved as an array which was rejected by the server. Now it is stored as comma- separated list.
* Address entryusn initialization on replica installationSimo Sorce2011-01-281-0/+5
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/637
* Put some safeguards against misconfiguration on the kdc accountSimo Sorce2011-01-281-0/+2
| | | | Ticket: https://fedorahosted.org/freeipa/ticket/862
* Fix delegation helpJakub Hrozek2011-01-281-6/+6
|
* Fix filter_keys in ipa-getkeytabJakub Hrozek2011-01-281-2/+6
| | | | https://fedorahosted.org/freeipa/ticket/723
* Fix API.txtJakub Hrozek2011-01-281-7/+13
|
* Enforce that all NS records are resolvableJakub Hrozek2011-01-283-1/+123
| | | | | | | Bind cannot load a zone if any of its name server records is not resolvable. https://fedorahosted.org/freeipa/ticket/838
* Add example of DNS SRV record and a simple validatorJakub Hrozek2011-01-282-4/+27
| | | | https://fedorahosted.org/freeipa/ticket/846
* Delete the whole DNS record with no parametersJakub Hrozek2011-01-283-22/+71
| | | | | | | | | Error out when deleting a nonexistent DNS record Also fixes the DNS unit tests. https://fedorahosted.org/freeipa/ticket/816 https://fedorahosted.org/freeipa/ticket/829
* jsl warningsAdam Young2011-01-284-4/+5
|
* aci rights widgetAdam Young2011-01-282-10/+38
| | | | | | | Fixes is_dirty and save https://fedorahosted.org/freeipa/ticket/77 https://fedorahosted.org/freeipa/ticket/667
* default disable deleteAdam Young2011-01-282-1/+31
|
* entity filter textAdam Young2011-01-281-1/+1
|