summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
...
* Add support for tracking and counting entitlementsRob Crittenden2011-02-027-20/+287
| | | | | | | | | | | | | | Adds a plugin, entitle, to register to the entitlement server, consume entitlements and to count and track them. It is also possible to import an entitlement certificate (if for example the remote entitlement server is unaviailable). This uses the candlepin server from https://fedorahosted.org/candlepin/wiki for entitlements. Add a cron job to validate the entitlement status and syslog the results. tickets 28, 79, 278
* Fix installing with an external CA and wait for dogtag to come upRob Crittenden2011-02-011-10/+40
| | | | | | | | | | | | | | | | | | | | | There wasn't an exception in the "is the server already installed" check for a two-stage CA installation. Made the installer slightly more robust. We create a cache file of answers so the next run won't ask all the questions again. This cache is removed when the installation is complete. Previously nothing would work if the installer was run more than once, this should be fixed now. The cache is encrypted using the DM password. The second problem is that the tomcat6 init script returns control before the web apps are up. Add a small loop in our restart method to wait for the 9180 port to be available. This also adds an additional restart to ensure that nonces are disabled. ticket 835 revise
* undo entity widget adds line level undo for the entity-select-widget now ↵Adam Young2011-02-011-2/+13
| | | | shows the undo link on filter change does JSON queries on keyup instead of keypress https://fedorahosted.org/freeipa/ticket/886
* Add new schema to store information about permissions.Rob Crittenden2011-02-012-0/+51
| | | | | | | | | There are some permissions we can't display because they are stored outside of the basedn (such as the replication permissions). We are adding a new attribute to store extra information to make this clear, in this case SYSTEM. ticket 853
* use entity select widget for permissionsAdam Young2011-02-013-150/+97
| | | | https://fedorahosted.org/freeipa/ticket/879
* Force sync in both direction before changing replication agreementsSimo Sorce2011-02-011-9/+1
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/887
* Fixed attribute name for delegation member group.Endi S. Dewata2011-02-011-1/+1
|
* Added undo for permission rights.Endi S. Dewata2011-02-012-110/+38
| | | | https://fedorahosted.org/freeipa/ticket/884
* Fixed missing object reference.Endi S. Dewata2011-01-311-2/+2
|
* aci association fixesAdam Young2011-01-313-36/+41
| | | | | declarative priv definition fixes role_add_privilege and privilege_add_permisison
* Add an address for a nameserver when a new zone is created during installJakub Hrozek2011-01-311-3/+3
| | | | https://fedorahosted.org/freeipa/ticket/881
* association fixesAdam Young2011-01-312-9/+29
| | | | | PLaces custom association facets into the proper facet groups usesthe associators if they are specifiedfor an association
* Use a common group for all DS instancesSimo Sorce2011-01-313-72/+83
| | | | | | | | Also remove the option to choose a user. It is silly to keep it, when you can't choose the group nor the CA directory user. Fixes: https://fedorahosted.org/freeipa/ticket/851
* Removed permission description from UIEndi S. Dewata2011-01-311-10/+3
| | | | https://fedorahosted.org/freeipa/ticket/877
* reduce scope of remove link it was global ↵Adam Young2011-01-311-37/+35
| | | | https://fedorahosted.org/freeipa/ticket/212
* Rename permissions and privileges to be more readable.Rob Crittenden2011-01-313-261/+216
| | | | | | | This also drops description from permissions since it seems redundant and fixes up the help text a little. ticket 792
* widget unit testsAdam Young2011-01-315-1/+195
| | | | unit test for basic functionality, text, and checkbox widgets
* Fixed IPA.widget's load, save, and is_dirty.Endi S. Dewata2011-01-301-10/+27
| | | | This patch fixes the problem leaving the user details page.
* delegation work aroundAdam Young2011-01-291-3/+10
| | | | Since the delegation enityt is using membergroup as the property name at this stage, we can use that as the value until the pluing is consistant
* Fixed permission reset and is_dirty unit testEndi S. Dewata2011-01-291-0/+1
| | | | | | The reset and is_dirty functionality for permission has been fixed. New widgets have been created for select and a collection of checkboxes. New test data files have been added for each target type.
* populate attribute table for delegation addAdam Young2011-01-291-0/+4
|
* Fixed permission reset and is_dirty.Endi S. Dewata2011-01-299-1069/+766
| | | | | | The reset and is_dirty functionality for permission has been fixed. New widgets have been created for select and a collection of checkboxes. New test data files have been added for each target type.
* placeholder functionAdam Young2011-01-291-0/+2
| | | | | | ipa_target_section does not overload is_dirty, and it alwayrs returns true, meaning you can never leave the page once you visit it. THis commit pushes a simple placeholder function that always returns fales. Follow on work will be required to correctly inplement the is_dirty functonality
* Add permission dialog adjustments.Endi S. Dewata2011-01-2912-492/+598
| | | | | | | | | | | | The IPA.dialog has been modified to support sections. The add dialog for permission has been modified to include the target section. The base dialog classes have been moved from widget.js into a new file called dialog.js. This patch also includes ayoung's fix for parameter name and format for the permission attributes. https://fedorahosted.org/freeipa/ticket/791
* Don't perform some API self-tests in production mode for performance reasonsRob Crittenden2011-01-282-0/+2
| | | | | | | | | | | | The API does a fair number of self tests and locking to assure that the registered commands are consistent and will work. This does not need to be done on a production system and adds additional overhead causing somewhere between a 30 and 50% decrease in performance. Because makeapi is executed when a build is done ensure that it is executed in developer mode to ensure that the framework is ok. ticket 751
* unmatched aciattrsAdam Young2011-01-284-12/+32
| | | | instead of reporting an error on unmatched aciattrs, append them to the table.
* services listAdam Young2011-01-283-163/+82
| | | | | | | | Declaritive Service definition Fixed a problem with multiple calls to create breaking the link between the select box and the text box swapped the select and the text https://fedorahosted.org/freeipa/ticket/442
* Fixed delegation UI issuesEndi S. Dewata2011-01-286-69/+80
| | | | | | | | | | | | | | | | | | This patch fixes several issues in delegation UI: When adding a new delegation, only the first attribute selected was saved. Now all attributes will be saved properly. When loading the details page, the custom widgets did not store the original values properly so is_dirty() did not work correctly. Now this has been fixed except for the memberof attribute because of these issues: - https://fedorahosted.org/freeipa/ticket/869 - https://fedorahosted.org/freeipa/ticket/870 When saving the details page, the attrs were saved as an array which was rejected by the server. Now it is stored as comma- separated list.
* Address entryusn initialization on replica installationSimo Sorce2011-01-281-0/+5
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/637
* Put some safeguards against misconfiguration on the kdc accountSimo Sorce2011-01-281-0/+2
| | | | Ticket: https://fedorahosted.org/freeipa/ticket/862
* jsl warningsAdam Young2011-01-284-4/+5
|
* aci rights widgetAdam Young2011-01-282-10/+38
| | | | | | | Fixes is_dirty and save https://fedorahosted.org/freeipa/ticket/77 https://fedorahosted.org/freeipa/ticket/667
* default disable deleteAdam Young2011-01-282-1/+31
|
* entity filter textAdam Young2011-01-281-1/+1
|
* modifyprivilegemembership permission has nestedgroup OCMartin Kosek2011-01-281-1/+1
| | | | | | | modifyprivilegemembership permission object class in LDAP should be groupofnames, not nestedgroup. https://fedorahosted.org/freeipa/ticket/858
* Add support for account unlockingJan Zeleny2011-01-283-2/+14
| | | | | | | | This patch adds command ipa user-unlock and some LDAP modifications which are required by Kerberos for unlocking to work. Ticket: https://fedorahosted.org/freeipa/ticket/344
* block anonymous access to sudo info https://fedorahosted.org/freeipa/ticket/865Jr Aquino2011-01-271-0/+6
|
* Make sure all DS instances are managed by ipactlSimo Sorce2011-01-271-20/+18
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/860
* dirtyAdam Young2011-01-277-22/+128
| | | | | If a page is dirty, do not allow additional navigation until changes are saved or committed https://fedorahosted.org/freeipa/ticket/726
* Adjusted aci's target feilds, adjusted action panel styles, adjusted ↵Kyle Baker2011-01-273-15/+100
| | | | Delegation and Configuration.
* reset target section target section needed to cache results for use in ↵Adam Young2011-01-271-3/+6
| | | | results moved load logic into reset and load now calls reset
* adding label for RBACAdam Young2011-01-272-19/+39
|
* declarative for aciAdam Young2011-01-278-283/+124
| | | | | | A couple of the ACI definitions were incorrect, and the end result was that fields were not getting initialized. USing the declarative approach cleaned up the cause. Also fixed a few broken unit tests
* declarative defintionsAdam Young2011-01-2724-371/+313
| | | | | | | | | | | | | | Delay the creation of entities until after ipa init is called made the user and group entity definitions declarative removed unused facet from groups adjusted unit tests made review changes: factories are now in an associative array entity init called right after factory init dialogs in entity init fixed type on search
* ACI plugin supports prefixesMartin Kosek2011-01-263-48/+48
| | | | | | | | | | | | | | | | | | | | | | | | When more than one plugin produce ACIs, they share common namespace of ACI name. This may lead to name collisions between the ACIs from different plugins. This patch introduces a mandatory "prefix" attribute for non-find ACI operations which allow plugins to use their own prefixes (i.e. namespaces) which is then used when a name of the ACI is generated. Permission, Delegation and Selfservice plugins has been updated to use their own prefixes thus avoiding name collisions by using their own namespaces. Default ACIs in LDIFs has been updated to follow this new policy. Permission plugin now uses its CN (=primary key) instead of description in ACI names as Description may not be unique. This change requires an IPA server reinstall since the default ACI set has been changed. https://fedorahosted.org/freeipa/ticket/764
* Check field's validity before executing add.Endi S. Dewata2011-01-265-18/+22
|
* target style cleanupAdam Young2011-01-262-50/+83
| | | | | Target section had radio buttonsreversed, and a few other style changes Note that this has the styling removed for the aci-target dl items
* assoc entity selected classAdam Young2011-01-261-1/+1
| | | | Iassociation entities should look differnt than Details when they are selected
* dns visible if enabledAdam Young2011-01-263-4/+12
| | | | | | use the result of the is_dns_enabled command to show or hid the dns tab Also, Javascript lint cleanup from recent patches.
* dns containerAdam Young2011-01-261-25/+33
| | | | the dns records page was adding controls to the wrong tag. This pushes everything down one level, fixing the formatting.