summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Make LDAP entry output slightly nicer, don't print u's in front of unicode ↵Pavel Zuna2009-04-231-7/+23
| | | | strings etc.
* Fix filter generator in ldapapi. Shouldn't produce invalid filters anymore.Pavel Zuna2009-04-231-6/+12
|
* Throw AlreadyGroupMember instead of EmptyModlist when trying to re-add ↵Pavel Zuna2009-04-221-3/+4
| | | | member to a group.
* Introduce AlreadyGroupMember exception, raised when a member is attempted to ↵Pavel Zuna2009-04-221-0/+16
| | | | be re-added to a group.
* Change ldap2.__handle_errors into the global _handle_errors function.Pavel Zuna2009-04-221-52/+53
|
* Make it possible to construct partial match filters using make_filter_* ↵Pavel Zuna2009-04-221-6/+20
| | | | methods. Add missing _sasl_auth variable.
* Add user plugin port with some bugs fixed to the new LDAP backend.Pavel Zuna2009-04-221-0/+405
|
* Add conditional (env.use_ldap2 is True) modifications required by new LDAP ↵Pavel Zuna2009-04-222-7/+19
| | | | backend.
* Add new env variables. 'container_dns' for DNS plugin, 'use_ldap2' for new ↵Pavel Zuna2009-04-221-0/+2
| | | | LDAP backend debugging.
* Convert the RA plugin to use nsslib and remove the configure methodsRob Crittenden2009-04-201-134/+39
|
* Issue DS and Apache server certs during CA installation.Rob Crittenden2009-04-205-104/+364
| | | | | | | Notes: - will create a CA instance (pki-ca) if it doesn't exist - maintains support for a self-signed CA - A signing cert is still not created so Firefox autoconfig still won't work
* Remove unwanted white spaceRob Crittenden2009-04-201-12/+12
|
* Finish work replacing the errors module with errors2Rob Crittenden2009-04-2015-854/+350
| | | | | | Once this is committed we can start the process of renaming errors2 as errors. I thought that combinig this into one commit would be more difficult to review.
* Handle GSSAPI exceptions more gracefullyRob Crittenden2009-04-203-13/+116
|
* Make parentmap a autofill variable and add tests when parentmap is not passedRob Crittenden2009-04-132-0/+59
|
* Fill in default values for os and platformRob Crittenden2009-04-131-0/+18
|
* The new admin tool 'ipa' uses a different configuration file, create it.Rob Crittenden2009-04-131-7/+8
|
* Renaming the backend ldap plugin to ldapapi.py to prevent module import issuesRob Crittenden2009-04-061-0/+0
|
* Use full OID for LDAP SYNTAX identification. Don't convert Booleans and ↵Pavel Zuna2009-04-061-24/+20
| | | | Integers into respective python types as their ranges might not match. Rename module-scope functions.
* Add new LDAP backend plugin.root2009-04-031-0/+741
|
* Add 'container_hbac' env variable.root2009-04-031-1/+1
|
* Implement an installer for the Dogtag certificate system.Rob Crittenden2009-04-038-21/+945
| | | | | | | | | | | | | | | The CA is currently not automatically installed. You have to pass in the --ca flag to install it. What works: - installation - unistallation - cert/ra plugins can issue and retrieve server certs What doesn't work: - self-signed CA is still created and issues Apache and DS certs - dogtag and python-nss not in rpm requires - requires that CS be in the "pre" install state from pkicreate
* Renamed remaining plugins still using f_* b_* conventionJason Gerard DeRose2009-04-0111-0/+0
|
* Fill in the ACIs and taskgroups for most of the plugins.Rob Crittenden2009-04-011-13/+311
| | | | | | | | | | | This adds: group administration host administration host group administration delegation administration service administration automount administration netgroup administration
* Name update files so they can be easily sorted.Rob Crittenden2009-03-2516-24/+162
| | | | | We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
* Implement a few new targets for ACIsRob Crittenden2009-03-251-8/+32
| | | | | Also switch to the StrEnum parameter type for some options so we let the framework do the enforcement
* Translate variables on all lines and sort files to be updatedRob Crittenden2009-03-251-3/+5
| | | | | | | | Only the dn and the first line of any entry that was spread across multiple lines were getting passed through the template engine. If we are given a directory to process, sort the files in that directory so the order can be predicted. Some updates rely on others.
* DNA is now configured using an update fileRob Crittenden2009-03-251-4/+0
|
* Allow a search using only the exact search filterRob Crittenden2009-03-251-4/+10
|
* Add a 'showall' command so one can pick from a list of tasks to add to a roleRob Crittenden2009-03-251-1/+35
|
* Use tuples instead of lists for class variablesRob Crittenden2009-03-253-4/+5
|
* Raise a more specific error when a user lacks the proper permissions.Rob Crittenden2009-03-253-5/+6
| | | | | The info part of the message will contain details on what permission failed on what attribute.
* Always print the dn first when printing an entryRob Crittenden2009-03-251-0/+3
|
* Add new type List that converts delimited values into a tupleRob Crittenden2009-03-203-1/+110
|
* Converted to use new baseclass, remove the one with the f_ prefixRob Crittenden2009-03-203-1254/+0
|
* Add tests for posix groupsRob Crittenden2009-03-201-4/+62
|
* Convert to use the new basegroup frameworkRob Crittenden2009-03-201-0/+272
|
* Convert to use the new basegroup frameworkRob Crittenden2009-03-201-0/+156
|
* Convert to use the new basegroup frameworkRob Crittenden2009-03-201-0/+208
|
* Modify the taskgroup plugin to use the new group baseclass and add testsRob Crittenden2009-03-203-160/+262
|
* New plugin to handle role groupsRob Crittenden2009-03-203-0/+233
| | | | | | Role groups will be part of the ACI system. It will let one create broad categories of permissions. Things like: helpdesk, user admin, group admin, whatever.
* Add generic base class that will most of the heavy lifting for groupsRob Crittenden2009-03-201-0/+422
|
* Fix build breakage and install rolegroup.updateRob Crittenden2009-03-201-1/+2
|
* kw is supposed to contain just lower-case valuesRob Crittenden2009-03-191-1/+1
|
* kw is supposed to contain just lower-case valuesRob Crittenden2009-03-191-2/+2
|
* Update the ACI class to be more robust and the beginnings of an ACI pluginRob Crittenden2009-03-182-87/+602
| | | | | | The ACI plugin is really meant for developers to help manage the ACIs. It may or may not be shipped. If it is it will be disabled by default. It is very much a shoot-in-foot problem waiting to happen.
* Fix some minor issues in group and service pluginsRob Crittenden2009-03-172-5/+3
|
* Add taskgroups pluginRob Crittenden2009-03-173-0/+234
| | | | Taskgroups are what we grant permission to with the new ACI system.
* Remember to add file as an option for certificate requestsRob Crittenden2009-03-161-0/+3
|
* Fixed Executioner.execute() so that its 'name' argument doesn't conflict ↵Jason Gerard DeRose2009-03-132-4/+18
| | | | with a param called 'name' (which is a valid param name)