summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* webui: fix group type paddingotp-usabilityPetr Vobornik2014-07-311-1/+1
|
* webui: disable batch action buttons by defaultPetr Vobornik2014-07-313-0/+6
| | | | | | | | action buttons associated with batch actions were enabled by default, but they were disabled right after facet creation and a load of data. It caused a visual flicker. UX is enhanced by making them disabled by default.
* webui: sshkey widget - usability fixesPetr Vobornik2014-07-312-3/+19
| | | | | | - save one click by opening edit dialog right after adding new row - add margin between fingerprint and "show/edit" button - fix honoring of writable/read-only flags upon row creation
* webui: improve rule table cssPetr Vobornik2014-07-313-3/+14
| | | | | | | | | - category radio line has line-height large enough to contain undo button -> content doesn't move several pixels on change - remove vertical padding from btns in table headers to maintain about the same height - remove invisible border from link buttons to have the same height for disabled and enabled button
* webui: convert widget.less indentation to spacesPetr Vobornik2014-07-311-49/+49
|
* webui-ci: fix reset password checkPetr Vobornik2014-07-311-3/+3
| | | | | | | After login, CI checks if password needs a reset by checking if reset password fields are displayed. This check failed since login facet was removed from DOM after successful auth. Weakening the selector fixes it.
* webui: hide non-readable fieldsPetr Vobornik2014-07-313-0/+45
|
* wip - otp empty field hidingPetr Vobornik2014-07-311-5/+15
|
* webui: hide empty fields and sectionsPetr Vobornik2014-07-312-10/+96
|
* webui: improve value change reportingPetr Vobornik2014-07-316-19/+21
|
* webui: widget initializationPetr Vobornik2014-07-301-0/+9
|
* webui: better value-change reportingPetr Vobornik2014-07-301-10/+4
|
* webui: better error reportingPetr Vobornik2014-07-302-12/+14
|
* webui: add i18n for the rest of QR code stringsPetr Vobornik2014-07-283-8/+15
|
* webui: add token from user pagePetr Vobornik2014-07-283-3/+60
| | | | | | Add 'Add OTP Token' action to user action menu. This option is disabled in self-service when viewing other users.
* webui: login screen - improved button switchingPetr Vobornik2014-07-282-16/+54
|
* webui: improved info msgs on login/token sync/reset pwd pagesPetr Vobornik2014-07-285-7/+17
|
* webui: display expired session notification in a more visible areaPetr Vobornik2014-07-281-3/+4
|
* webui: better authentication types descriptionPetr Vobornik2014-07-284-2/+26
| | | | | | Tooltips were added to "User authentication types" and "Default user objectclasses" to describe their relationship and a meaning of not-setting a value.
* webui: tooltip supportPetr Vobornik2014-07-281-0/+48
|
* webui: rename tooltip to titlePetr Vobornik2014-07-288-47/+43
|
* webui: add measurement unit to token time step fieldPetr Vobornik2014-07-281-2/+8
|
* webui: better otp token type labelPetr Vobornik2014-07-283-6/+10
|
* webui: hide fields based on otp token typePetr Vobornik2014-07-281-1/+68
|
* webui: review pending operation after expired sessionPetr Vobornik2014-07-283-5/+23
| | | | | | | | | Disable automatic re-execution of command after pending authentication. It's possible to enable it again globally by 'freeipa/config':`rpc_retry_auth`. https://fedorahosted.org/freeipa/ticket/4374
* ipalib: idrange: Make non-implemented range types fail the validationTomas Babej2014-07-281-2/+3
| | | | | | | | | | The ipa-ipa-trust and ipa-ad-winsync ID Range types were allowed to pass the validation tests, however, they are not implemented nor checked by the 389 server plugin. https://fedorahosted.org/freeipa/ticket/4323 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* webui: add bounce url to reset_password.htmlPetr Vobornik2014-07-281-0/+24
| | | | | | | | | | | | | | | | | | | | reset_password.html now redirects browser to URL specified in 'redirect' uri component (if present). The component has to be URI encoded. ie (in browser console): $ encodeURIComponent('http://pvoborni.fedorapeople.org/doc/#!/guide/Debugging') --> "http%3A%2F%2Fpvoborni.fedorapeople.org%2Fdoc%2F%23!%2Fguide%2FDebugging" --> https://my.freeipa.server/ipa/ui/reset_password.html?redirect=http%3A%2F%2Fpvoborni.fedorapeople.org%2Fdoc%2F%23!%2Fguide%2FDebugging https://fedorahosted.org/freeipa/ticket/4440 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: remove remaining action-button-disabled occurrencesPetr Vobornik2014-07-282-39/+5
| | | | | | | | Buttons in hbactest check for 'action-button-disabled' but it's never set. https://fedorahosted.org/freeipa/ticket/4258 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: replace action_buttons with action_widgetPetr Vobornik2014-07-285-133/+88
| | | | | | | | | | Simplify code base by reuse of 'disable' feature of button_widget. All occurrences of action-button which were disabled/enabled were replaced by button-widget. https://fedorahosted.org/freeipa/ticket/4258 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: detach facet nodesPetr Vobornik2014-07-282-0/+10
| | | | | | | | | Detach/attach facet nodes when switching facets instead of hiding/showing. Keeps dom-tree more simple. Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: internet explorer fixesPetr Vobornik2014-07-282-2/+8
| | | | | | | | | Fixed: 1. IE doesn't support value 'initial' in CSS rule. 2. setting innerHTML='' also destroys content of child nodes in LoginScreen in IE -> reattached buttons have no text. Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: fix nested items creation in dropdown listPetr Vobornik2014-07-281-6/+8
| | | | | | Items nested in other items were created in root list instead of nested list. Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: support wildcard attribute level rightsPetr Vobornik2014-07-281-9/+15
| | | | | | | | | Reproduction: * add 'extensibleObject' object class to target object https://fedorahosted.org/freeipa/ticket/4380 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* baseldap: return 'none' attr level right as unicode stringPetr Vobornik2014-07-251-1/+1
| | | | | | | | | Returning non-unicode causes serialization into base64 which causes havoc in Web UI. https://fedorahosted.org/freeipa/ticket/4454 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* Add TOTP watermark supportHEADmasterNathaniel McCallum2014-07-252-74/+88
| | | | | | | | | | | | | | | | This prevents the reuse of TOTP tokens by recording the last token interval that was used. This will be replicated as normal. However, this patch does not increase the number of writes to the database in the standard authentication case. This is because it also eliminates an unnecessary write during authentication. Hence, this patch should be write-load neutral with the existing code. Further performance enhancement is desired, but is outside the scope of this patch. https://fedorahosted.org/freeipa/ticket/4410 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* Allow hashed passwords in DSMartin Kosek2014-07-252-2/+7
| | | | | | | | | Without nsslapd-allow-hashed-passwords being turned on, user password migration fails. https://fedorahosted.org/freeipa/ticket/4450 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* Fix ipa-getkeytab for pre-4.0 serversNathaniel McCallum2014-07-251-17/+21
| | | | | | | | | | Also, make the error messages for this fallback case less scary and clean up some indentation issues in the nearby code which made this code difficult to read. https://fedorahosted.org/freeipa/ticket/4446 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* Improve password validity check.David Kupka2014-07-241-4/+31
| | | | | | | Allow use of characters that no longer cause troubles. Check for leading and trailing characters in case of 389 Direcory Manager password. Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Do not require dogtag-pki-server-themeMartin Kosek2014-07-241-1/+0
| | | | | | | | | Theme package is contains resources for PKI web interface. This interface is not needed by FreeIPA as it rather utilizes it's API. As recommended in https://bugzilla.redhat.com/show_bug.cgi?id=1068029#c5, remove this hard dependency. Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* baseldap: Remove redundant search from LDAPAddReverseMember and ↵Tomas Babej2014-07-231-6/+0
| | | | | | LDAPRemoveReverseMember Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* Always record that pkicreate has been executed.David Kupka2014-07-221-3/+10
| | | | | | | | | Record that pkicreate/pkispawn has been executed to allow cleanup even if the installation did not finish correctly. https://fedorahosted.org/freeipa/ticket/2796 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Update freeipa-server krb5-server dependency to 1.11.5-5Nathaniel McCallum2014-07-221-1/+1
| | | | | | | | Previous versions of libkrb5 can't handle expired passwords inside the FAST tunnel. This breaks the password change UI in FreeIPA. Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Fix login password expiration detection with OTPNathaniel McCallum2014-07-212-31/+15
| | | | | | | | | | | | | | | | | | | | | The preexisting code would execute two steps. First, it would perform a kinit. If the kinit failed, it would attempt to bind using the same credentials to determine if the password were expired. While this method is fairly ugly, it mostly worked in the past. However, with OTP this breaks. This is because the OTP code is consumed by the kinit step. But because the password is expired, the kinit step fails. When the bind is executed, the OTP token is already consumed, so bind fails. This causes all password expirations to be reported as invalid credentials. After discussion with MIT, the best way to handle this case with the standard tools is to set LC_ALL=C and check the output from the command. This eliminates the bind step altogether. The end result is that OTP works and all password failures are more performant. https://fedorahosted.org/freeipa/ticket/4412 Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
* webui: fix disabled state of service's PAC typePetr Vobornik2014-07-211-31/+47
| | | | | | | | | | | Nested options (MS-PAC and PAD) of service's PAC type should be disabled if no value is supplied (default value is "Inherited from server configuration"). That was not the case - regression. This patch fixes it and along with it simplifies the update method of option_widget_base to be more comprehensible. Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: disable ipapermbindruletype if permission in a privilegePetr Vobornik2014-07-211-1/+10
| | | | | | | User is not able to change Bind Rule Type if permission is already member of a privilege. Let's disable it and don't confuse user. Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: fix selection of empty value in a select widgetPetr Vobornik2014-07-211-1/+1
| | | | | | | | | | Little regression - select widget could not handle empty or no array as an input value. It broke 'undo' operation in Permissions' 'Type' attribute while switching between '' and some value. Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: show managed fields as readonly and not disabledPetr Vobornik2014-07-211-4/+2
| | | | | | | | | Visible read-only fields are no longer displayed as disabled in permission details facet. https://fedorahosted.org/freeipa/ticket/4254 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: fix add of input group classPetr Vobornik2014-07-211-1/+4
| | | | | | | | | | The input-group class was added based on visibility of child elements. This failed when it had to be determined *before* displaying the widget. Now it's added if the buttons are not hidden by `display: none` CSS rule. Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: reflect readonly statePetr Vobornik2014-07-211-27/+110
| | | | | | | | | | | Separate update of read-only state from update of value. It should be possible to switch from read-only UI to editable UI without value change. https://fedorahosted.org/freeipa/ticket/4254 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
* webui: option_widget_base: sort optionsPetr Vobornik2014-07-212-2/+18
| | | | | | https://fedorahosted.org/freeipa/ticket/4253 Reviewed-By: Endi Sukma Dewata <edewata@redhat.com>
generated by cgit (git 2.34.1) at 2024-05-04 16:39:05 +0000