| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
| |
|
| |
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/293
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/820
|
|
|
|
|
|
|
| |
There is no use for return value of Py_InitModule3. Removing it
in this patch.
https://fedorahosted.org/freeipa/ticket/710
|
|
|
|
| |
Ticket #825
|
|
|
|
|
|
|
|
| |
So far it was possible to rename any object using LDAPUpdate to a name
with empty primary key. Since this can cause nasty problems, this patch
disables empty string in --rename argument.
https://fedorahosted.org/freeipa/ticket/827
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/836
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/817
|
| |
|
|
|
|
|
|
| |
In the host plugin we may change the default objectclasses based on
the options selected. This was affecting it globally and causing
subsequent calls to fail.
|
|
|
|
|
|
|
| |
In Python 2.7 the API for time.utcoffset() changed.
We do more automatic conversions of strings so need to loosen the tests
a bit.
|
|
|
|
|
|
|
|
| |
Prevents an unauthenticated user from accessing HBAC and role
information as well as memberof which could disclose roles,
memberships in HBAC, etc.
ticket 811
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
This was from an unpushed patch I had in my tree.
|
| |
|
|
|
|
|
|
|
| |
Either one of type, filter, subtree, targetgroup, attrs or memberof is
required.
https://fedorahosted.org/freeipa/ticket/819
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth
and will potentially fail the bind altogether.
On a successful bind it will zero krbLoginFailedCount and set
krbLastSuccessfulAuth.
This will also enforce locked-out accounts.
See http://k5wiki.kerberos.org/wiki/Projects/Lockout for details on
kerberos lockout.
ticket 343
|
|
|
|
|
|
| |
Also make i18n_messages and json_metadata NO_CLI.
ticket 821
|
|
|
|
|
|
|
| |
We should still give some feedback when things go wrong when in
non-interactive mode.
ticket 828
|
|
|
|
|
|
| |
The patch adds [options] to the syntax line of ipa help <command>
https://fedorahosted.org/freeipa/ticket/733
|
|
|
|
|
|
|
| |
Try a query with a filter to see if it is at least legal. This doesn't
guarantee that the filter is at all otherwise sane.
ticket 808
|
| |
|
|
|
|
|
|
|
|
| |
This gives the root user low privileges so that when anonymous searches are
denied the init scripts can still search the directory via ldapi to get the
list of serevices to start.
Fixes: https://fedorahosted.org/freeipa/ticket/795
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/812
|
|
|
|
| |
Directory rename
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/600
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/813
|
|
|
|
| |
we were squeezing the buttons in the middle of the page. This patch shrinks the two boxes on either side and centers the buttons.
|
| |
|
|
|
|
| |
fixes it.
|
|
|
|
| |
Fix #798
|
|
|
|
| |
Fix #799
|
|
|
|
|
|
|
|
| |
There's no such thing as "maximum" in SOA record RDATA format
according to RFC 1035 and there's also no such attribute in
the schema.
Fix #788
|
|
|
|
| |
Fix #797
|
|
|
|
|
|
|
| |
The add dialogs for Hosts and Services have been updated to include
a checkbox to force adding hosts/services that are not in DNS.
The widgets has been updated to support tooltips.
|
|
|
|
|
| |
The message and buttons in the unprovision dialog box have been
updated according to the latest spec.
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/783
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/762
|
|
|
|
|
|
| |
A new CSS class has been added for buttons without icons. The
IPA.button() has been modified to use this class if there is
no icons specified.
|
|
|
|
|
|
| |
The status panel for certificates and Kerberos keys has been
modified to display only the current status with the relevant buttons.
New icons have been added to replace the red/yellow/green bullets.
|
|
|
|
| |
was adding the action controls to multiple lines. Now only one
|
|
|
|
| |
Fixes: https://fedorahosted.org/freeipa/ticket/775
|
|
|
|
|
| |
Init scripts normally do not log to syslog, instead they write errors to the
stderr pipe. Do the same.
|
|
|
|
|
|
|
|
| |
Instead pof always capturing the output, make it possible to let
it go to the standard output pipes.
Use this in ipactl to let init scripts show their output.
Fixes: https://fedorahosted.org/freeipa/ticket/765
|
|
|
|
|
|
|
|
|
|
|
|
| |
When a randomly generated password contains a space character
as the first or the last character, installation fails on
kdb5_ldap_util calling, which does not accept that. This patch
fixes the generator to generate space only on allowed position.
This patch also ensures that no password is printed to
server install log.
https://fedorahosted.org/freeipa/ticket/731
|