summaryrefslogtreecommitdiffstats
path: root/ipalib
Commit message (Collapse)AuthorAgeFilesLines
* Expand the types of groups that can be migrated to support IPA v1 migrationsRob Crittenden2010-02-171-1/+1
|
* Don't iterate over empty values in List paramsRob Crittenden2010-02-171-1/+1
|
* Used named variables in calls to print_attribute()Rob Crittenden2010-02-171-2/+2
|
* Reverse patch to not encode int values, handled at OID level properly now.Rob Crittenden2010-02-171-5/+1
|
* Convert password policy integer values to unicode instead of str.Pavel Zuna2010-02-171-2/+2
|
* Auto-generate --all and --raw for commands, that return entries.Pavel Zuna2010-02-174-130/+66
|
* Fix the pwpolicy plugin to work better with new output system.Rob Crittenden2010-02-171-9/+24
|
* Don't base64-encode integersRob Crittenden2010-02-171-1/+5
| | | | | | This is a temporary fix until we either use Params to determine output type or treat integers differently from other binary values internally (as unicode instead of str, for example).
* Use the Output tuple to determine the order of outputRob Crittenden2010-02-1514-76/+277
| | | | | | | | | | | | | | The attributes displayed is now dependant upon their definition in a Param. This enhances that, giving some level of control over how the result is displayed to the user. This also fixes displaying group membership, including failures of adding/removing entries. All tests pass now though there is still one problem. We need to return the dn as well. Once that is fixed we just need to comment out all the dn entries in the tests and they should once again pass.
* Fix the automountlocation-tofiles command and add some labelsRob Crittenden2010-02-151-8/+18
|
* Add sha1, md5 to compatJason Gerard DeRose2010-02-121-4/+34
|
* Fix deprecation error importing shaRob Crittenden2010-02-121-2/+5
|
* Add Object.label class attribute, enable in webUIJason Gerard DeRose2010-02-1215-6/+68
|
* Allow one-character Param namesRob Crittenden2010-02-124-8/+4
| | | | This is done explicitly to support the l/localityname attribute.
* Add default automount location. Auto-create auto.direct in new locations.Pavel Zuna2010-02-121-0/+3
|
* Command.output_params not contains params in Command.paramsJason Gerard DeRose2010-02-111-0/+7
|
* Fix logging in CLI and server (take 2)Jason Gerard DeRose2010-02-091-5/+10
|
* Add support for the 'no_create', 'no_update', and 'no_search' Param flagsJason Gerard DeRose2010-02-051-3/+109
|
* Implement pwplicy_find to show all group password policiesRob Crittenden2010-02-031-0/+32
| | | | | find is a bit of a misnomer here because we consider no search terms, it is all or nothing.
* Add flag to allow a cert to be re-issuedRob Crittenden2010-02-031-3/+7
| | | | | I don't want a user to accidentally re-issue a certificate so I've added a new flag, --revoke, to revoke the old cert and load the new one.
* Only change the log level if it isn't already setRob Crittenden2010-02-031-4/+5
| | | | | | This primarily affects the installer. We want to log to the install/ uninstall file in DEBUG. This was getting reset to INFO causing lots of details to not show in the logs.
* Be more careful when base64-decoding certificatesRob Crittenden2010-02-021-6/+3
| | | | | Only decode certs that have a BEGIN/END block, otherwise assume it is in DER format.
* Base64-encode binary values on the command-lineRob Crittenden2010-02-021-3/+17
|
* Remove group-specific password policy on group deletionRob Crittenden2010-01-291-0/+8
|
* Remove __public__ and __proxy__ hold-overs from Plugin classJason Gerard DeRose2010-01-283-109/+1
|
* Enabled CRUDS in webUI using wehjit 0.2.0Jason Gerard DeRose2010-01-263-1/+11
|
* Fix merge error, variable mis-named label instead of docRob Crittenden2010-01-211-1/+1
|
* User-defined certificate subjectsRob Crittenden2010-01-201-1/+17
| | | | | | | | | | | | | | | Let the user, upon installation, set the certificate subject base for the dogtag CA. Certificate requests will automatically be given this subject base, regardless of what is in the CSR. The selfsign plugin does not currently support this dynamic name re-assignment and will reject any incoming requests that don't conform to the subject base. The certificate subject base is stored in cn=ipaconfig but it does NOT dynamically update the configuration, for dogtag at least. The file /var/lib/pki-ca/profiles/ca/caIPAserviceCert.cfg would need to be updated and pki-cad restarted.
* Fix plugin to work with new output validation, add new helpersRob Crittenden2010-01-201-34/+57
| | | | | | | | Add a new get_subject() helper and return the subject when retrieving certificates. Add a normalizer so that everything before and after the BEGIN/END block is removed.
* Add DS migration plugin and password migration page.Pavel Zuna2010-01-201-0/+374
|
* Add --enable-migration option in config plugin.Pavel Zuna2010-01-201-1/+14
|
* Temporary fix for name collision of textui.print_entry.Pavel Zuna2010-01-202-3/+3
| | | | Somehow there's two of them... rename old one to print_entry1.
* Make DNS plugin support output validation and thus make it work again.Pavel Zuna2010-01-201-39/+86
|
* Correct some comment errorsRob Crittenden2010-01-191-2/+1
|
* pass DER flag to x509.get_serial_number()John Dennis2010-01-191-1/+1
|
* Allow cospriority to be updated and fix description of priority orderingRob Crittenden2010-01-191-7/+27
| | | | | | Need to add a few more places where the DN will not be automatically normalized. The krb5 server expects a very specific format and normalizing causes it to not work.
* Use 'l' instead of 'localityname' in host plugin.Pavel Zuna2010-01-141-2/+14
| | | | | It seems that 'localityname' and 'locality' aliases were dropped in newer versions of DS.
* Make host objects aware of their membership and that l==localityName.Pavel Zuna2010-01-141-0/+6
|
* Add Kerberos Ticket Policy management plugin.Pavel Zuna2010-01-132-27/+167
|
* Allow creation of new connections by unshared instances of backend.Connectible.Pavel Zuna2010-01-112-14/+22
|
* Add --all to LDAPCreate and make LDAP commands always display default ↵Pavel Zuna2010-01-117-14/+30
| | | | attributes.
* Use the caIPAserviceCert profile for issuing service certs.Rob Crittenden2010-01-081-2/+2
| | | | | | | | | | | This profile enables subject validation and ensures that the subject that the CA issues is uniform. The client can only request a specific CN, the rest of the subject is fixed. This is the first step of allowing the subject to be set at installation time. Also fix 2 more issues related to the return results migration.
* Add messages, declarative tests for rolegroup, taskgroup pluginsJason Gerard DeRose2009-12-182-7/+29
|
* Handle base64-encoded certificates better, import missing functionRob Crittenden2009-12-183-0/+11
|
* Make hosts more like real services so we can issue certs for host principalsRob Crittenden2009-12-162-12/+56
| | | | | This patch should make joining a client to the domain and using certmonger to get an initial certificate work.
* host and hostgroup summary messages, declarative tests; fix tests for 'dn'Jason Gerard DeRose2009-12-161-3/+11
|
* Add some missing labelsRob Crittenden2009-12-142-0/+5
|
* Convert to using new result output handlingRob Crittenden2009-12-142-27/+85
| | | | | This also inserts the dn into the response when adding a record. We need this in the ACI plugin when adding a taskgroup
* This plugin was replaced by the aci pluginRob Crittenden2009-12-111-93/+0
|
* Take 2: Extensible return values and validation; steps toward a single ↵Jason Gerard DeRose2009-12-1016-193/+677
| | | | output_for_cli(); enable more webUI stuff