summaryrefslogtreecommitdiffstats
path: root/ipalib
Commit message (Collapse)AuthorAgeFilesLines
...
* Remove all services when a host is removed Revoke certificate (if any) when ↵Rob Crittenden2009-05-132-14/+35
| | | | a service is removed
* Improve revocation_reason argumentRob Crittenden2009-05-131-1/+8
|
* Add a reason to the NotFound exception so we can provide more robust errorsRob Crittenden2009-05-136-12/+12
|
* Force xmlrpc tests to run with in_tree=True so config files in /etc/ipa/ ↵Jason Gerard DeRose2009-05-113-46/+83
| | | | don't get read; cleaned up config.Env automagic with regard to running in-tree vs. installed
* We decided not to issue a certificate on joinRob Crittenden2009-05-071-53/+2
|
* Store the new certificate in a service record. Clean up some argument names ↵Rob Crittenden2009-05-071-15/+67
| | | | to match the current standard.
* Make MalformedServicePrincipal take a reason arg and add Base64DecodeErrorRob Crittenden2009-05-061-3/+19
|
* Add validator and normalizer for service principals Add --certificate ↵Rob Crittenden2009-05-061-37/+98
| | | | argument Update default objectclasses Use the crud.Search method for service-find
* Some minor cosmetic changesRob Crittenden2009-05-041-2/+4
|
* When reading a password, if there is no tty, read from stdin instead.Rob Crittenden2009-05-041-2/+14
| | | | | | This will allow one to pipe a password in: echo -e "secret123\secret123\n" | ipa password someuser
* Add posixGroup to the objectclass list if gidnumber is setRob Crittenden2009-05-041-5/+13
| | | | 498335
* Issue an SSL server cert when joining the IPA domainRob Crittenden2009-05-041-17/+30
|
* A class for dealing with a temporary NSS certificate databaseRob Crittenden2009-05-041-7/+45
|
* Add DNS management plugin port to the new ldap backend.Pavel Zuna2009-04-301-0/+797
|
* Change help interface to display builtin commands and a list of topics based ↵Pavel Zuna2009-04-301-20/+77
| | | | on plugin modules.
* Use right attribute name for e-mail in user2 plugin.Pavel Zuna2009-04-301-2/+2
|
* Add missing required attribute, nisdomainnameRob Crittenden2009-04-301-0/+16
|
* Use correct attribute for e-mail addressRob Crittenden2009-04-291-1/+1
| | | | Resolves 498269
* Fixed cli.run() catching SystemExit exception under Python2.4Jason Gerard DeRose2009-04-281-1/+1
| | | | Resolves BZ #498088
* trivial update to standardize terms in docstringDavid O'Brien2009-04-281-1/+1
|
* Import the RequiresRoot error and make note to replace this at some pointRob Crittenden2009-04-241-1/+1
|
* Rename errors2.py to errors.py. Modify all affected files.Pavel Zuna2009-04-2319-75/+75
|
* Make LDAP entry output slightly nicer, don't print u's in front of unicode ↵Pavel Zuna2009-04-231-7/+23
| | | | strings etc.
* Introduce AlreadyGroupMember exception, raised when a member is attempted to ↵Pavel Zuna2009-04-221-0/+16
| | | | be re-added to a group.
* Add user plugin port with some bugs fixed to the new LDAP backend.Pavel Zuna2009-04-221-0/+405
|
* Add conditional (env.use_ldap2 is True) modifications required by new LDAP ↵Pavel Zuna2009-04-222-7/+19
| | | | backend.
* Add new env variables. 'container_dns' for DNS plugin, 'use_ldap2' for new ↵Pavel Zuna2009-04-221-0/+2
| | | | LDAP backend debugging.
* Finish work replacing the errors module with errors2Rob Crittenden2009-04-206-466/+194
| | | | | | Once this is committed we can start the process of renaming errors2 as errors. I thought that combinig this into one commit would be more difficult to review.
* Handle GSSAPI exceptions more gracefullyRob Crittenden2009-04-202-6/+107
|
* Make parentmap a autofill variable and add tests when parentmap is not passedRob Crittenden2009-04-131-0/+1
|
* Fill in default values for os and platformRob Crittenden2009-04-131-0/+18
|
* Add 'container_hbac' env variable.root2009-04-031-1/+1
|
* Implement an installer for the Dogtag certificate system.Rob Crittenden2009-04-031-0/+1
| | | | | | | | | | | | | | | The CA is currently not automatically installed. You have to pass in the --ca flag to install it. What works: - installation - unistallation - cert/ra plugins can issue and retrieve server certs What doesn't work: - self-signed CA is still created and issues Apache and DS certs - dogtag and python-nss not in rpm requires - requires that CS be in the "pre" install state from pkicreate
* Renamed remaining plugins still using f_* b_* conventionJason Gerard DeRose2009-04-0110-0/+0
|
* Implement a few new targets for ACIsRob Crittenden2009-03-251-8/+32
| | | | | Also switch to the StrEnum parameter type for some options so we let the framework do the enforcement
* Add a 'showall' command so one can pick from a list of tasks to add to a roleRob Crittenden2009-03-251-1/+35
|
* Use tuples instead of lists for class variablesRob Crittenden2009-03-253-4/+5
|
* Raise a more specific error when a user lacks the proper permissions.Rob Crittenden2009-03-252-4/+1
| | | | | The info part of the message will contain details on what permission failed on what attribute.
* Always print the dn first when printing an entryRob Crittenden2009-03-251-0/+3
|
* Add new type List that converts delimited values into a tupleRob Crittenden2009-03-202-1/+51
|
* Converted to use new baseclass, remove the one with the f_ prefixRob Crittenden2009-03-203-1254/+0
|
* Convert to use the new basegroup frameworkRob Crittenden2009-03-201-0/+272
|
* Convert to use the new basegroup frameworkRob Crittenden2009-03-201-0/+156
|
* Convert to use the new basegroup frameworkRob Crittenden2009-03-201-0/+208
|
* Modify the taskgroup plugin to use the new group baseclass and add testsRob Crittenden2009-03-201-159/+73
|
* New plugin to handle role groupsRob Crittenden2009-03-201-0/+85
| | | | | | Role groups will be part of the ACI system. It will let one create broad categories of permissions. Things like: helpdesk, user admin, group admin, whatever.
* Add generic base class that will most of the heavy lifting for groupsRob Crittenden2009-03-201-0/+422
|
* kw is supposed to contain just lower-case valuesRob Crittenden2009-03-191-1/+1
|
* kw is supposed to contain just lower-case valuesRob Crittenden2009-03-191-2/+2
|
* Update the ACI class to be more robust and the beginnings of an ACI pluginRob Crittenden2009-03-182-87/+602
| | | | | | The ACI plugin is really meant for developers to help manage the ACIs. It may or may not be shipped. If it is it will be disabled by default. It is very much a shoot-in-foot problem waiting to happen.