| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/1011
Does not completely fix the problem in the ticket, but it does mitigate the failure.
|
|
|
|
|
|
|
|
|
|
|
| |
In a details page, usually any changes done to the fields will not be
applied until the user clicks the Update button. However, if the page
contains an association table, any addition/deletion to the table will
be applied immediately.
To avoid any confusion, the user is now required to save or reset all
changes to the page before modifying the association. A dialog box will
appear if the page contains any unsaved changes.
|
|
|
|
|
| |
The correct attribute name for SUDO command group membership is
memberof_sudocmdgroup and it contains the group name instead of dn.
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/1007
|
|
|
|
| |
Ticket 1005
|
|
|
|
| |
ticket 1005
|
|
|
|
|
|
|
| |
Association facets based on memberofindirect attribute have been
removed because the attribute is non-assignable.
Ticket 1027
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/1022
|
|
|
|
|
|
|
|
|
|
| |
By calling directly sasl_interactive_bind_s() we were not calling __lateinit()
This in turn resulted in some variables like dbdir not to be set on the
IPAadmin object.
Keep all bind types in the same place so the same common sbind steps can be
performed in each case.
Related to: https://fedorahosted.org/freeipa/ticket/1022
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch replaces xgettext with a custom pygettext to generate
translatable strings from plugin files in ipalib/plugins. pygettext
was modified to handle plural forms (credit goes to Jan Hendrik Goellner)
and had some bugs fixed by myself. We only use it for plugins, because
it's the only place where we need to extract docstrings for the built-in
help system.
I also had to make some changes to the way the built-in documentation
systems gets docstrings from modules for this to work.
|
|
|
|
|
|
|
|
| |
Read access is denied to the sudo container for unauthenticated users.
This shared user can be used to provide authenticated access to the
sudo information.
https://fedorahosted.org/freeipa/ticket/998
|
| |
|
|
|
|
|
| |
The order of the Add and Delete buttons has been reversed to be
consistent with those in other facets.
|
|
|
|
| |
end user can replace the logo, the banner or both
|
| |
|
| |
|
|
|
|
| |
clikcable link as the left most column confused users.
|
|
|
|
| |
classes match the styles for available.
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/899
|
|
|
|
|
| |
The IPA.cmd() has been modified to set the error dialog box's title
properly.
|
|
|
|
|
|
|
|
| |
This patch fixes Entitlements privileges and ACIs. There were
missing descriptions or the ACIs could not be processed by
Permissino plugin because of missing prefix.
https://fedorahosted.org/freeipa/ticket/997
|
|
|
|
|
|
|
|
|
|
|
| |
Created some default roles as examples. In doing so I realized that
we were completely missing default rules for HBAC, SUDO and password
policy so I added those as well.
I ran into a problem when the updater has a default record and an add
at the same time, it should handle it better now.
ticket 585
|
|
|
|
|
|
| |
text box, tyhe most likely thing that the user will want to change on the page.
https://fedorahosted.org/freeipa/ticket/983
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/490
|
| |
|
|
|
|
|
| |
Hard-coded messages through out the code have been replaced by i18n
messages obtained from json_metadata and i18n_messages.
|
|
|
|
| |
ticket 962
|
| |
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/831
|
|
|
|
|
|
|
|
|
|
|
| |
Many WebUI identifiers were defined in a global namespace. This is
not a good programming practice and may result in name clashes,
for example with other libraries.
This patch moves these variables to IPA namespace or its
sub-namespaces, when meaningful.
https://fedorahosted.org/freeipa/ticket/212
|
| |
|
|
|
|
|
|
|
|
| |
A link has been added into the details page to expand/collapse all
sections.
Previously each section's <div> container is identified using a long
ID. It is now identified using the section name.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Support of navigator.preferences that is used to access browser
configuration was dropped in Firefox 4. This disables automatic
configuration of user preferences in this browser that is needed
to use Kerberos single sign-on.
This patch detectes a lack of this interface and tries to
configure the browser using new Services module introduced in
Gecko 2 (used in Firefox 4, SeaMonkey 2.1).
https://fedorahosted.org/freeipa/ticket/975
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/930
|
| |
|
|
|
|
|
|
|
|
| |
The association config has been removed because it incorrectly assumes there is only one association between two entities. Now each association is defined separately using association facets.
The service.py has been modified to specify the correct relationships. The API.txt has been updated.
https://fedorahosted.org/freeipa/ticket/960
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/615
|
|
|
|
|
|
|
|
| |
Trying to run ipactl as non-root results in a slew of bogus
error messages, some of which come because dirsrv can't read certain
files as the wrong user, some based on our handling of that fact.
ticket 936
|
|
|
|
|
|
|
|
|
|
|
| |
1. Fix a unicode() problem creating the DNS entries
2. Fix a strange NSS error when generating the certificates against
a dogtag server.
The NSS errors are quite strange. When generating the first certificate
nss_shutdown() fails because the database isn't initialized yet but
nss_is_initialized() returned True. The second pass fails because
something is in use.
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add pointer to self to /etc/hosts to avoid chicken/egg problems when
restarting DNS.
On servers set both dns_lookup_realm and dns_lookup_kdc to false so we don't
attempt to do any resolving. Leave it to true on clients.
Set rdns to false on both server and client.
https://fedorahosted.org/freeipa/ticket/931
|
|
|
|
|
|
|
|
| |
The current version of the DNS Plugin does not support searching by record, so that is commented out.
The search field wasn't working either. The search criteria had to be appended to the params array, just after the zone.
https://fedorahosted.org/freeipa/ticket/907
|
|
|
|
|
|
| |
The group.upg NIS map was an experiment in providing UPG groups
dynamically, and is not one of the maps that I'd ever expect a NIS
client to "know" to search. We should probably just drop it.
|
|
|
|
| |
ticket 950
|
|
|
|
|
|
|
| |
This was resulting in a traceback because while conn was not None
it wasn't connected either.
ticket 920
|
|
|
|
|
|
| |
Previously the add service dialog box shows a 'Principal:' label with
no text field next to it. It now has been removed. The dialog box
has been widened to avoid line wrapping of the buttons.
|