summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fix two typosRob Crittenden2008-02-051-2/+2
|
* Add uniqueMember -> member mapping into /etc/ldap.conf on installationSimo Sorce2008-02-051-0/+1
|
* Return 1 on error, 0 on successRob Crittenden2008-02-051-0/+2
|
* Use file to store the current CA serial numberRob Crittenden2008-02-057-43/+162
| | | | | | | No longer create a PKCS#12 file that contains the CA No longer send the entire CA to each replica, generate the SSL certs on master Fix number of bugs in ipa-replica-install and prepare Produce status output during replica creation
* Remove = sign between [set|add|del]attr=attr=value to improve readability.Rob Crittenden2008-02-041-3/+3
|
* Add --usage as a command-line option.Rob Crittenden2008-02-011-0/+2
| | | | Resolves 431283
* Marked with wrong license. IPA is GPLv2.Rob Crittenden2008-01-3112-40/+76
|
* Use orig_user_dict to get krbprincipalname when changing passwords.Rob Crittenden2008-01-311-1/+6
| | | | Add an extra exception handler so we don't return a 500 on errors.
* Ensure that the ipa_webgui error log exists and has correct permissions.Rob Crittenden2008-01-312-2/+16
| | | | Resolves 431089
* Add option to list common attributes for use with --setattr,--addattr,--delattrRob Crittenden2008-01-314-4/+37
|
* Handle the --usage option by actually displaying the usageRob Crittenden2008-01-3115-18/+34
| | | | | | Fix some missing options in --usage Remove a few debugging statements Resolves 430704
* Use proper string validation routine.Rob Crittenden2008-01-311-1/+1
| | | | Resolves 430709
* Use correct variable for domain when restoring a file.Rob Crittenden2008-01-311-1/+1
| | | | Resolves 430724
* Fix discrepencies between built-in help and the man page.Rob Crittenden2008-01-252-15/+19
| | | | Resolves bz 429814
* Enable logging so we can catch startup errors either in the console orRob Crittenden2008-01-301-3/+51
| | | | | | the error log. Add a foreground and debug flag Resolves 430011
* Put user-modifiable files into /etc/ipa/html so they can be marked asRob Crittenden2008-01-302-4/+64
| | | | | config(noreplace). Resolves 430004
* Missed closing quoteRob Crittenden2008-01-291-1/+1
|
* Remove reference to radius that wasn't used and was causing program to fail.Rob Crittenden2008-01-291-1/+1
| | | | Resolves 429853
* Include some additional information when installing IPA.Rob Crittenden2008-01-252-4/+16
| | | | | Remove 8080 as a port that needs to be opened bz 430088
* Fix misspelling of the word indices.Rob Crittenden2008-01-253-4/+4
|
* Fix not so random random passwordsMark McLoughlin2008-01-221-4/+2
| | | | | | | | | | | | | | If you run ipa_generate_password() multiple times, one after the other, then you get the same password each time. This is because it uses the current time to seed the pseudo random number generator. The easiest solution is to just use the default method which seeds itself from /dev/urandom if available, and uses a fractional time value otherwise. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Re-factor the ipa_webgui and ipa_kpasswd instance codeMark McLoughlin2008-01-226-66/+41
| | | | | | | | | The ipa_webgui and ipa_kpasswd instance code is identical and I want to add another similar instance down the line, so re-factor the code into a service.SimpleServiceInstance class. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Initialise DsInstance.pkcs12_infoMark McLoughlin2008-01-221-0/+1
| | | | | | | | DsInstance.pkcs12_info isn't currently initialised in the constructore so, e.g. __enable_ssl() assumes that create_instance() has initialised it. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Small refactor of dsinstance.config_dirname()Mark McLoughlin2008-01-222-13/+13
| | | | | | | | | | | | | If, in future, we change the server ID so that it's not derived from the realm name, there's a fair few places that need to be changed. Make that easier by having config_dirname() take the server ID rather than the realm name. That makes sense anyway so we don't have to realm_to_serverid() so much. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Remove questions from ipaserver.dsinstanceMark McLoughlin2008-01-222-25/+34
| | | | | | | | | | | | | Let's assume that all ipaserver.dsinstance could be used somewhere where asking questions on stdout/stdin is not approriate and re-factor the code to be suitable in those situations too. i.e. make check_existing_installation() return a list of server IDs and make check_ports() return an (unsecure, secure) tuple indication which ports are in use. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Use consistent naming for tools.Rob Crittenden2008-01-259-17/+17
| | | | Resolves 430243
* Listen only on the localhost interfaceRob Crittenden2008-01-251-0/+4
| | | | Resolves bz 430191
* Dropped the last 's' in the sessions cache directoryRob Crittenden2008-01-241-1/+1
|
* Major mistake on my part by adding sessions to the wrong place. This brokeRob Crittenden2008-01-241-1/+1
| | | | ipa_webgui.
* Missed one replacement of pyasn1 -> python-pyasn1Rob Crittenden2008-01-241-1/+1
|
* Include --prefix in all invocations of autogen.sh.Rob Crittenden2008-01-241-2/+2
| | | | Resolves bz 430002
* Use Fedora package names for PyKerberos (python-kerberos) and pyasn1Rob Crittenden2008-01-245-10/+24
| | | | (python-pyasn1) for the specfile Requires.
* Add a copy of the LICENSE and populate some README'sRob Crittenden2008-01-236-0/+486
|
* Enable server-side sessions. It is currently using files for sessions.Rob Crittenden2008-01-237-3/+38
|
* Fix issues reported by rpmlint.Rob Crittenden2008-01-1843-148/+188
| | | | | | | | | | | | | | - Removing shebangs (#!) from a bunch of python libraries - Don't use a variable name in init scripts for the lock file - Keep the init script name consistent with the binary name, so renamed ipa-kpasswd.init to ipa_kpasswd.init - Add status option to the init scripts - Move most python scripts out of /usr/share/ipa and into the python site-packages directories (ipaserver and ipaclient) - Remove unnecessary sys.path.append("/usr/share/ipa") - Fix the license string in the spec files - Rename ipa-webgui to ipa_webgui everywhere - Fix a couple of issues reported by pychecker in ipa-python
* Fix case where a question was being asked in unattended mode.Rob Crittenden2008-01-171-2/+10
| | | | | Catch permission errors on install. Initialize srv so the error message works if the user presses enter
* Add cyrus-sasl-gssapi as a requirement.Rob Crittenden2008-01-162-2/+2
|
* Add ipa-server-install --uninstallMark McLoughlin2008-01-118-6/+148
| | | | | | | | Add a --uninstall option to ipa-server-install which tries to restore the system to the way it was before ipa-server-install was run using the state backed up through sysrestore.py. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Backup system state in ipa-server-installRob Crittenden2008-01-1415-20/+375
| | | | | | | | | | | | | This patch adds a sysrestore module which allows ipa-server-install code to backup any system state so that it can be restored again with e.g. ipa-server-install --uninstall. The idea is that any files ipa-server-install modifies gets backed up to /var/cache/ipa/sysrestore/ while any "meta" state, like whether a service is enabled with chkconfig, is saved to /var/cache/ipa/sysrestore.state. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Update the .spec filenames in EXTRA_DISTMark McLoughlin2008-01-112-2/+2
| | | | Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Use tempfile.mkdtemp() rather than hardcoded tmpdirMark McLoughlin2008-01-111-9/+4
| | | | | | | httpinstance.py currently uses a hardcoded /tmp/ipa temporary directory. Make it use tempfile.mkdtemp() instead. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Refactor some krbinstance templating codeMark McLoughlin2008-01-111-25/+12
| | | | Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Use service.py helpersMark McLoughlin2008-01-111-1/+1
| | | | | | | In dsinstance.py, there's one place we could use the service.py helpers where we don't currently. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Add service.is_enabled() helperMark McLoughlin2008-01-112-1/+26
| | | | | | Add a simple helper to check whether a service is enabled. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Add service.is_running() helperMark McLoughlin2008-01-112-10/+12
| | | | | | | | Add a simple helper to check whether a service is running and make ipa-server-install use it to check whether ntpd is running. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Find and delete service principals from the command-line.Rob Crittenden2008-01-114-0/+249
|
* Service principal deletionRob Crittenden2008-01-117-2/+138
|
* Remove registration of get_keytabRob Crittenden2008-01-031-1/+0
|
* Run ipa-webgui as apache and not as rootRob Crittenden2008-01-111-1/+3
|
* Fix help text of -a argumentRob Crittenden2008-01-111-1/+1
|