summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* action buttons for dnsAdam Young2011-01-251-2/+2
|
* aci attribute table two columnsAdam Young2011-01-252-20/+20
|
* remove icons from association buttonsAdam Young2011-01-251-2/+0
|
* Enforce uniqueness on (key,info) pairs in automount keysJakub Hrozek2011-01-254-40/+248
| | | | https://fedorahosted.org/freeipa/ticket/293
* Populate shared tree with replica related valuesSimo Sorce2011-01-253-0/+52
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/820
* Unused value in initdefault_encoding_utf8Martin Kosek2011-01-251-3/+1
| | | | | | | There is no use for return value of Py_InitModule3. Removing it in this patch. https://fedorahosted.org/freeipa/ticket/710
* Fix crash when displaying values composed of white-space chars only in CLI.Pavel Zuna2011-01-241-0/+2
| | | | Ticket #825
* Disable renaming to empty stringJan Zeleny2011-01-241-0/+2
| | | | | | | | So far it was possible to rename any object using LDAPUpdate to a name with empty primary key. Since this can cause nasty problems, this patch disables empty string in --rename argument. https://fedorahosted.org/freeipa/ticket/827
* Make the -u option optional in unattended modeSimo Sorce2011-01-241-8/+11
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/836
* Do not set a replication dn when using SASL/GSSAPI replicationSimo Sorce2011-01-241-23/+16
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/817
* Remove trailing spaceSimo Sorce2011-01-241-1/+1
|
* Make a copy of objectclasses so a call can't update them globally.Rob Crittenden2011-01-242-5/+6
| | | | | | In the host plugin we may change the default objectclasses based on the options selected. This was affecting it globally and causing subsequent calls to fail.
* Fix failed tests. API for utcoffset changed and strings are more robust.Rob Crittenden2011-01-242-7/+8
| | | | | | | In Python 2.7 the API for time.utcoffset() changed. We do more automatic conversions of strings so need to loosen the tests a bit.
* Block anonymous access to HBAC, role and some member information.Rob Crittenden2011-01-242-0/+11
| | | | | | | | Prevents an unauthenticated user from accessing HBAC and role information as well as memberof which could disclose roles, memberships in HBAC, etc. ticket 811
* Removed 'name' from 'Sudo Command Group name'.Endi S. Dewata2011-01-2421-29/+29
|
* Added scrollable panel for delete dialog box.Endi S. Dewata2011-01-245-9/+14
|
* Added spaces around radio buttons.Endi S. Dewata2011-01-243-4/+52
|
* Fix exception doctest failureRob Crittenden2011-01-241-2/+2
|
* Remove del-all from dnsrecord_del from API.txtRob Crittenden2011-01-211-2/+1
| | | | This was from an unpushed patch I had in my tree.
* Add new option to dns_del and always ask permission options to API.txtRob Crittenden2011-01-211-19/+20
|
* Make ipa permission-add ask for optional attributesJan Zeleny2011-01-211-0/+6
| | | | | | | Either one of type, filter, subtree, targetgroup, attrs or memberof is required. https://fedorahosted.org/freeipa/ticket/819
* Update kerberos password policy values on LDAP binds.Rob Crittenden2011-01-217-0/+712
| | | | | | | | | | | | | | | On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth and will potentially fail the bind altogether. On a successful bind it will zero krbLoginFailedCount and set krbLastSuccessfulAuth. This will also enforce locked-out accounts. See http://k5wiki.kerberos.org/wiki/Projects/Lockout for details on kerberos lockout. ticket 343
* Rename INTERNAL to NO_CLI for commands we hide from the cli.Rob Crittenden2011-01-219-27/+29
| | | | | | Also make i18n_messages and json_metadata NO_CLI. ticket 821
* Improve output when options are not found in non-interactive client installRob Crittenden2011-01-211-1/+3
| | | | | | | We should still give some feedback when things go wrong when in non-interactive mode. ticket 828
* Make command syntax less confusing in helpJan Zeleny2011-01-211-0/+1
| | | | | | The patch adds [options] to the syntax line of ipa help <command> https://fedorahosted.org/freeipa/ticket/733
* Add some basic filter validation to permissions and disallow empty filtersRob Crittenden2011-01-213-4/+32
| | | | | | | Try a query with a filter to see if it is at least legal. This doesn't guarantee that the filter is at all otherwise sane. ticket 808
* Fix dns_is_enabled commandSimo Sorce2011-01-201-3/+3
|
* Allow SASL/EXTERNAL authentication for the root userSimo Sorce2011-01-204-1/+34
| | | | | | | | This gives the root user low privileges so that when anonymous searches are denied the init scripts can still search the directory via ldapi to get the list of serevices to start. Fixes: https://fedorahosted.org/freeipa/ticket/795
* Make krb5kdc use the ldapi socket to talk to dirsrvSimo Sorce2011-01-202-1/+3
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/812
* rename static to uiAdam Young2011-01-20245-20/+24
| | | | Directory rename
* Provide API to check if IPA DNS is enabled on some serverSimo Sorce2011-01-192-0/+30
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/600
* Fix ipa_uuid to not interfer with proper error reportingSimo Sorce2011-01-191-3/+2
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/813
* enroll dialog layoutAdam Young2011-01-191-3/+3
| | | | we were squeezing the buttons in the middle of the page. This patch shrinks the two boxes on either side and centers the buttons.
* background into MakefileAdam Young2011-01-181-0/+1
|
* update API removal of idnssoamaximum from dns APIs broke the build. THis ↵Adam Young2011-01-181-6/+3
| | | | fixes it.
* Fix password/random logic in host plugin.Pavel Zuna2011-01-181-6/+9
| | | | Fix #798
* Fix updating of DNS records by the host plugin.Pavel Zuna2011-01-181-5/+5
| | | | Fix #799
* Remove SOA maximum parameters from DNS zone.Pavel Zuna2011-01-181-5/+0
| | | | | | | | There's no such thing as "maximum" in SOA record RDATA format according to RFC 1035 and there's also no such attribute in the schema. Fix #788
* Fix crash when building DN of host with name ending with period.Pavel Zuna2011-01-181-4/+5
| | | | Fix #797
* Force flag for Hosts and Services.Endi S. Dewata2011-01-184-34/+88
| | | | | | | The add dialogs for Hosts and Services have been updated to include a checkbox to force adding hosts/services that are not in DNS. The widgets has been updated to support tooltips.
* Unprovision message and buttons adjustments.Endi S. Dewata2011-01-182-12/+2
| | | | | The message and buttons in the unprovision dialog box have been updated according to the latest spec.
* Do not try to dereference bindpw if it is nullSimo Sorce2011-01-181-2/+7
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/783
* Move HBAC services and service groups to cn=hbacJan Zeleny2011-01-1814-53/+53
| | | | https://fedorahosted.org/freeipa/ticket/762
* CSS class for buttons without icons.Endi S. Dewata2011-01-182-2/+15
| | | | | | A new CSS class has been added for buttons without icons. The IPA.button() has been modified to use this class if there is no icons specified.
* New certificate and Kerberos key status behavior.Endi S. Dewata2011-01-187-122/+169
| | | | | | The status panel for certificates and Kerberos keys has been modified to display only the current status with the relevant buttons. New icons have been added to replace the red/yellow/green bullets.
* dns action controlsAdam Young2011-01-181-1/+2
| | | | was adding the action controls to multiple lines. Now only one
* Fix selinux policies for ipa_kpasswdSimo Sorce2011-01-181-0/+1
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/775
* Let ipactl output errors to stderrSimo Sorce2011-01-181-7/+1
| | | | | Init scripts normally do not log to syslog, instead they write errors to the stderr pipe. Do the same.
* Add a way to print output from commandsSimo Sorce2011-01-183-34/+48
| | | | | | | | Instead pof always capturing the output, make it possible to let it go to the standard output pipes. Use this in ipactl to let init scripts show their output. Fixes: https://fedorahosted.org/freeipa/ticket/765
* Password generation and logging in ipa-server-installMartin Kosek2011-01-183-4/+18
| | | | | | | | | | | | When a randomly generated password contains a space character as the first or the last character, installation fails on kdb5_ldap_util calling, which does not accept that. This patch fixes the generator to generate space only on allowed position. This patch also ensures that no password is printed to server install log. https://fedorahosted.org/freeipa/ticket/731