summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fix kwargs usage in automount pluginJakub Hrozek2010-12-071-15/+12
| | | | https://fedorahosted.org/freeipa/ticket/580
* Fix default attributes in config plugin (ipadefaultemaildomain).Pavel Zuna2010-12-071-1/+1
| | | | Ticket #573
* Add new parameter type IA5Str and use this to enforce the right charset.Rob Crittenden2010-12-078-20/+80
| | | | ticket 496
* nested entity navigation Made the mechanism for caluculating nested eneties ↵Adam Young2010-12-071-3/+5
| | | | more general, so that we don't have to hard code for SUDO and HBAC, and now to support ACI
* Do not migrate krbPrincipalKeyJakub Hrozek2010-12-071-0/+7
| | | | https://fedorahosted.org/freeipa/ticket/455
* Make the migration plugin more configurableJakub Hrozek2010-12-071-28/+108
| | | | | | | | | | | | This patch adds new options to the migration plugin: * the option to fine-tune the objectclass of users or groups being imported * the option to select the LDAP schema (RFC2307 or RFC2307bis) Also makes the logic that decides whether an entry is a nested group or user (for RFC2307bis) smarter by looking at the DNS. Does not hardcode primary keys for migrated entries. https://fedorahosted.org/freeipa/ticket/429
* Give back smaller and more readable ranges by default.Simo Sorce2010-12-071-5/+6
| | | | | | | Instead of allocating a completely random start between 1M and 2G and a range of 1M values, give 10000 possible 200k ranges. They all start at a 200k boundary so they generate more readable IDs, at least until there arent't too many users/replicas involved.
* Dialog i18nEndi S. Dewata2010-12-0617-137/+74
| | | | | | | | | | The ipa_add_dialog has been fixed to initialize the fields which will get the labels from metadata. Hard-coded labels have been removed from field declarations. The superior() method has been removed because it doesn't work with multi-level inheritance. Superclass method for now is called using <class name>_<method> (e.g. widget_init).
* SUDO Command Groups adjustmentsEndi S. Dewata2010-12-062-12/+18
| | | | | The association facet for SUDO Command Groups has been removed and replaced with an association table in the details page.
* Column i18nEndi S. Dewata2010-12-0613-127/+1932
| | | | | | | | | | The ipa_column has been modified to get the label from metadata during initialization. The ipa_table_widget has been modified to initialize the columns. Hard-coded labels have been removed from column declarations. The ipa_adder_dialog has been modified to execute a search at the end of setup.
* HBAC Service Groups adjustmentsEndi S. Dewata2010-12-0612-377/+403
| | | | | | | | | | | | | | The association facet for HBAC Service Groups has been removed and replaced with an association table in the details page. The ipa_association_table_widget has been modified to support multiple columns in the table itself and in the adder dialog. The ipa_association_adder_dialog and ipa_association_facet have been refactored. The ipa_sudorule_association_widget and ipa_rule_association_widget has been removed because their functionalities have been merged into ipa_association_table_widget.
* entity i18nAdam Young2010-12-0611-226/+375
| | | | | | | | | | | Updated the user,group,host, hostgroup, netgroup, service, and all policy entities to use the newer framework functions, in order to replaced the old array style definitions which did not support i18n. update a few of the newer framerwork functions to get the lables from the meta data. Fixed the unit tests which were expecting a details facet for users, no longer automatically created
* Make use of mozldap vs openldap for plugins selectableSimo Sorce2010-12-0611-18/+40
|
* Add more information and examples on targets.Rob Crittenden2010-12-061-6/+33
| | | | ticket 310
* Ensure list of attrs to retrieve is unique, optimize getting indirect membersRob Crittenden2010-12-061-3/+9
| | | | | | | | | | | This fixes search where we were asking for the member attribute 10 or more times. When retrieving indirect members make sure we always pass around the size and time limits so we don't have to look it up with every call to find_entries() ticket 557
* Remove accessTime from HBAC.Rob Crittenden2010-12-062-45/+47
| | | | ticket 545
* Check if the group existsJan Zeleny2010-12-061-0/+6
| | | | | | | | When setting default group, we should check if the group exists. If not, it could lead to some issues with adding new users after the new default group is set. https://fedorahosted.org/freeipa/ticket/504
* Document that the default group has to existJan Zeleny2010-12-061-1/+2
| | | | | | | | | After calling ipa config --defaultgroup=xxx with nonexistent group xxx, the result will be that no new user can be added. The operation will always fail in the middle because it is not possible to add the new user to desired default group. https://bugzilla.redhat.com/show_bug.cgi?id=654117#c4
* When deleting multiple entries use --continue, not --continuous.Rob Crittenden2010-12-031-1/+1
| | | | ticket 561
* Don't look up the CoS entry with the global password policy.Rob Crittenden2010-12-031-2/+2
| | | | ticket 523
* Provide list of available attributes for use in ACI UI.Rob Crittenden2010-12-036-3/+26
| | | | | | | Also include flag indicating whether the object is bindable. This will be used to determine if the object can have a selfservice ACI. ticket 446
* Fixed association linksEndi S. Dewata2010-12-038-9/+34
| | | | | | | | | | | | | | | | | | | The create_association_facets() has been modified such that it does not generate duplicate links. This is done by assigning the proper labels and hiding non-assignable associations. Each association will get a label based on the attribute used: - memberof: Membership in <entity name> - member.*: <entity name> Members - managedby: Managed by <entity name> The following associations will be hidden: - memberindirect - enrolledby The internal.py was modified to return localized labels. The test data has been updated.
* Removed HBAC Access TimeEndi S. Dewata2010-12-031-14/+2
| | | | | The interface for access time has been removed from HBAC details page. The code has been commented out, but not removed.
* dns2 ui replaceing calls for the dns plugin to the dns2 plugin no has ↵Adam Young2010-12-0310-165/+1352
| | | | attribute permissions and all other benefits of building on the baseldap plugin
* Added some fields to user objectJan Zeleny2010-12-031-2/+46
| | | | | | | Some fields were missing from user object, this change adds them along with their l10n https://fedorahosted.org/freeipa/ticket/305
* Fixed buttons in enrollment dialogEndi S. Dewata2010-12-021-15/+37
| | | | | The Find, Add, and Remove buttons in the enrollment dialog have been replaced with ipa_buttons.
* tooltips uses the doc field for tooltips on text fields on the details pagesAdam Young2010-12-021-1/+6
|
* Do not create reverse zone by defaultJakub Hrozek2010-12-024-5/+16
| | | | | | | Prompt for creation of reverse zone, with the default for unattended installations being False. https://fedorahosted.org/freeipa/ticket/418
* Add labels for passwords, fix output of exceptions, fix passwd output.Rob Crittenden2010-12-023-9/+14
| | | | | | | | | | | Passwords didn't have internationalizable labels. Exceptions that occured during required input weren't printed as unicode so weren't being translated properly. Don't use output_for_cli() directly in the passwd plugin, use output.Output. ticket 352
* This is the second half of a patch. Only the part that had to beRob Crittenden2010-12-026-5/+6
| | | | | | | | | | | | | | | | | | | | | | | re-based got pushed for some reason. Use better description for group names in help and always prompt for members When running <foo>-[add|remove]-member completely interactively it didn't prompt for managing membership, it just reported that 0 members were handled which was rather confusing. This will work via a shell if you want to echo too: $ echo "" | ipa group-add-member g1 This returns 0 members because nothing is read for users or group members. $ echo -e "g1\nadmin\n" | ipa group-add-member This adds the user admin to the group g1. It adds it as a user because user membership is prompted for first. ticket 415
* Drop outdated install/tools/README and add QuickStart link to top READMERob Crittenden2010-12-022-67/+6
| | | | ticket 420
* Use better description for group names in help and always prompt for membersRob Crittenden2010-12-021-5/+8
| | | | | | | | | | | | | | | | | | | When running <foo>-[add|remove]-member completely interactively it didn't prompt for managing membership, it just reported that 0 members were handled which was rather confusing. This will work via a shell if you want to echo too: $ echo "" | ipa group-add-member g1 This returns 0 members because nothing is read for users or group members. $ echo -e "g1\nadmin\n" | ipa group-add-member This adds the user admin to the group g1. It adds it as a user because user membership is prompted for first. ticket 415
* Updated output when calling hbac-showJan Zeleny2010-12-021-2/+6
| | | | | | | | Some attributes weren't included in the output of hbac-show command. This patch fixes it. https://fedorahosted.org/freeipa/ticket/494 https://fedorahosted.org/freeipa/ticket/495
* Normalize and convert default params, tooJakub Hrozek2010-12-021-1/+1
| | | | https://fedorahosted.org/freeipa/ticket/555
* UI for host managedbyEndi S. Dewata2010-12-021-0/+66
| | | | | | | A custom facet has been added to manage the host's managedby attribute. The facet defines the add and remove methods, the columns for the association table and enrollment dialog, and the link for the primary key column.
* associate search automatically perfomr the no-args search for ↵Adam Young2010-12-021-1/+5
| | | | enrollment-adder pages
* Multicolumn enrollment dialogEndi S. Dewata2010-12-0212-188/+382
| | | | | | | | | | | | | | | | | | | | | | | | | | | The enrollment dialog has been modified to use scrollable tables that supports multiple columns to display the search results and selected entries. The columns are specified by calling create_adder_column() on the association facet. By default the tables will use only one column which is to display the primary keys. The following enrollment dialogs have been modified to use multiple columns: - Group's member_user - Service's managedby_host - HBAC Service Group's member_hbacsvc - SUDO Command Group's member_sudocmd The ipa_association_table_widget's add() and remove() have been moved into ipa_association_facet so they can be customized by facet's subclass. The ipa_table's add_row() has been renamed to add_record(). Some old code has been removed from ipa_facet_create_action_panel(). The code was used to generate association links from a single facet. It's no longer needed because now each association has its own facet. The test data has been updated. The IPA.nested_tabs() has been fixed to return the entity itself if IPA.tab_set is not defined. This is needed to pass unit test.
* Certificate management with self-signed CAEndi S. Dewata2010-12-021-26/+43
| | | | | | | | | | The certificate_status_widget has been modified to check for the environment variable ra_plugin to determine the CA used by IPA server. If self-signed CA is used, some operations will not be available (e.g. checking certificate status, revoking/restoring certificate), so the corresponding interface will be hidden. Other operations such as creating new certificate and viewing certificate are still available.
* remove task and role groups since these entites are no longer exposed in the ↵Adam Young2010-12-022-53/+0
| | | | Meta data, including them in the code causes breakage at initialization
* Add new version of DNS plugin: complete rework with baseldap + unit tests.Pavel Zuna2010-12-013-0/+926
| | | | | Ticket #36 Ticket #450
* Re-implement access control using an updated model.Rob Crittenden2010-12-0132-2525/+3073
| | | | | | | | | | | | | | | | | | | The new model is based on permssions, privileges and roles. Most importantly it corrects the reverse membership that caused problems in the previous implementation. You add permission to privileges and privileges to roles, not the other way around (even though it works that way behind the scenes). A permission object is a combination of a simple group and an aci. The linkage between the aci and the permission is the description of the permission. This shows as the name/description of the aci. ldap:///self and groups granting groups (v1-style) are not supported by this model (it will be provided separately). This makes the aci plugin internal only. ticket 445
* admin determinationAdam Young2010-12-011-2/+13
| | | | | extends the logic for showing the admin or self service ui to admins by checking for membership in the group admins added check for group admins
* action panel sibling added function to get sibling entities from the tab ↵Adam Young2010-12-0113-253/+168
| | | | set. remove explicit sibling code from entity pages Modified the Label fields on HBAC and SUDO to make them appear cleaner in the UI
* Enable EntryUSN plugin by default, with global scopeSimo Sorce2010-11-304-1/+16
| | | | | | | This will allow clients to use entryusn values to track what changed in the directory regardles of replication delays. Fixes: https://fedorahosted.org/freeipa/ticket/526
* Prompt correctly for required Password params.Pavel Zuna2010-11-301-10/+13
| | | | Ticket #361
* Multicolumn association facetEndi S. Dewata2010-11-3020-253/+1168
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The association facet has been modified to support multiple columns. By default the facet will have one column which is the primary key of the associated object (e.g. username of a group member), so the existing code will work like before. Other fields (e.g. user's full name) can be added by subclassing the ipa_association_facet class and specifying the additional columns to display. These additional fields will be retrieved using a batch operation. Previously a single association facet instance will be used for all associations in an entity. Now each association will have its own association facet. This way each association facet can be customized differently as needed. The <entity>-enroll URL parameter has been removed because it's no longer needed. The ipa_entity.create_association_facets() is provided to generate the default association facets with one column for the primary key. The column click handler has been moved out of ipa_column to provide more flexibility for customization. The get_action_panel() and get_client_area() have been modified to search within the entity's container. The group entity has been fully converted to use the new UI framework. Association facets that have been modified to use multiple columns are: - User Group's member_user - HBAC Service Group's member_hbacsvc - SUDO Command Group's member_sudocmd - Service's managedby_host New test data files have been added. Unit tests have been updated.
* Reduce the number of attributes a host is allowed to write.Rob Crittenden2010-11-302-4/+8
| | | | | | | | | | The list of attributes that a host bound as itself could write was overly broad. A host can now only update its description, information about itself such as OS release, etc, its certificate, password and keytab. ticket 416
* Create user private groups with a uniqueid.Rob Crittenden2010-11-303-3/+5
| | | | | | | | | | If we don't then we need to add it when a group is detached causing aci issues. I had to move where we create the UPG template until after the DS restart so the schema is available. ticket 542
* Init smods to prevent crash if encode_keys failsJakub Hrozek2010-11-291-1/+1
|
* Handle error messages during various HBAC operationsJan Zeleny2010-11-291-0/+8
| | | | | | | | | | | During some HBAC operations, various error messages were handled incorrectly - displaying only generic error messages instead of correct ones, which were defined for the module. This patch adds catching these generic exceptions and raising new exceptions with the correct error message. https://fedorahosted.org/freeipa/ticket/487
generated by cgit (git 2.34.1) at 2025-09-03 17:08:59 +0000