summaryrefslogtreecommitdiffstats
path: root/ipalib/plugins/hbac.py
Commit message (Collapse)AuthorAgeFilesLines
* Print expected error message in hbac-modJan Zeleny2010-12-101-1/+5
| | | | | | | This patch catches NotFound exception and calls handling function which then sends exception with unified error message. https://fedorahosted.org/freeipa/ticket/487
* Remove accessTime from HBAC.Rob Crittenden2010-12-061-19/+24
| | | | ticket 545
* Updated output when calling hbac-showJan Zeleny2010-12-021-2/+6
| | | | | | | | Some attributes weren't included in the output of hbac-show command. This patch fixes it. https://fedorahosted.org/freeipa/ticket/494 https://fedorahosted.org/freeipa/ticket/495
* Handle error messages during various HBAC operationsJan Zeleny2010-11-291-0/+8
| | | | | | | | | | | During some HBAC operations, various error messages were handled incorrectly - displaying only generic error messages instead of correct ones, which were defined for the module. This patch adds catching these generic exceptions and raising new exceptions with the correct error message. https://fedorahosted.org/freeipa/ticket/487
* Add LDAPObject setting to handle different attributes for RDN and PKEY.Pavel Zuna2010-10-281-24/+2
|
* Fix problem testing for mutual exclusivity in hbac plugin.Rob Crittenden2010-10-181-8/+16
| | | | This should fix the hbac tests.
* If an HBAC category is 'all' don't allow individual objects to be added.Rob Crittenden2010-10-081-0/+44
| | | | | | | | Basically, make 'all' mutually exclusive. This makes debugging lots easier. If say usercat='all' there is no point adding specific users to the rule because it will always apply to everyone. ticket 164
* Add an example for creating an HBAC service and service group.Rob Crittenden2010-09-231-0/+9
| | | | | | | Try to tie in the hbacsvc and hbacsvcgroup plugins better through an example. ticket 159
* Update command documentation based on feedback from docs team.Rob Crittenden2010-08-271-29/+37
| | | | ticket #158
* First pass at per-command documentationRob Crittenden2010-06-221-0/+38
|
* Add groups of services to HBACRob Crittenden2010-05-171-9/+56
| | | | | | | Replace serviceName with memberService so we can assign individual services or groups of services to an HBAC rule. 588574
* Increase the attributes we display by default and fix up some labels.Rob Crittenden2010-05-051-2/+8
|
* Code cleanup: remove unused stuff, take 1.Pavel Zuna2010-03-011-14/+0
|
* Translatable Param.label, Param.docJason Gerard DeRose2010-02-241-10/+15
|
* Add Object.label class attribute, enable in webUIJason Gerard DeRose2010-02-121-0/+3
|
* Add --all to LDAPCreate and make LDAP commands always display default ↵Pavel Zuna2010-01-111-1/+1
| | | | attributes.
* Take 2: Extensible return values and validation; steps toward a single ↵Jason Gerard DeRose2009-12-101-8/+6
| | | | output_for_cli(); enable more webUI stuff
* Rename GeneralizedTime to AccessTime.Pavel Zuna2009-12-011-3/+3
|
* Add {user,host,sourcehost}Category to HBAC and make accessTime multivalue.Pavel Zuna2009-12-011-2/+94
|
* Handle ipaEnabledFlag as bool (TRUE/FALSE) instead of string (enabled/disabled).Pavel Zuna2009-11-181-4/+4
|
* Fix bug in HBAC and netgroup plugin get_primary_key_from_dn methods.Pavel Zuna2009-10-081-1/+4
|
* Add HBAC plugin and introduce GeneralizedTime parameter type.Pavel Zuna2009-10-051-0/+260