summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Handle GSSAPI exceptions more gracefullyRob Crittenden2009-04-203-13/+116
|
* Make parentmap a autofill variable and add tests when parentmap is not passedRob Crittenden2009-04-132-0/+59
|
* Fill in default values for os and platformRob Crittenden2009-04-131-0/+18
|
* The new admin tool 'ipa' uses a different configuration file, create it.Rob Crittenden2009-04-131-7/+8
|
* Renaming the backend ldap plugin to ldapapi.py to prevent module import issuesRob Crittenden2009-04-061-0/+0
|
* Use full OID for LDAP SYNTAX identification. Don't convert Booleans and ↵Pavel Zuna2009-04-061-24/+20
| | | | Integers into respective python types as their ranges might not match. Rename module-scope functions.
* Add new LDAP backend plugin.root2009-04-031-0/+741
|
* Add 'container_hbac' env variable.root2009-04-031-1/+1
|
* Implement an installer for the Dogtag certificate system.Rob Crittenden2009-04-038-21/+945
| | | | | | | | | | | | | | | The CA is currently not automatically installed. You have to pass in the --ca flag to install it. What works: - installation - unistallation - cert/ra plugins can issue and retrieve server certs What doesn't work: - self-signed CA is still created and issues Apache and DS certs - dogtag and python-nss not in rpm requires - requires that CS be in the "pre" install state from pkicreate
* Renamed remaining plugins still using f_* b_* conventionJason Gerard DeRose2009-04-0111-0/+0
|
* Fill in the ACIs and taskgroups for most of the plugins.Rob Crittenden2009-04-011-13/+311
| | | | | | | | | | | This adds: group administration host administration host group administration delegation administration service administration automount administration netgroup administration
* Name update files so they can be easily sorted.Rob Crittenden2009-03-2516-24/+162
| | | | | We want to process some updates in a particular order (schema, structural). Using an init-inspired ordering mechanism.
* Implement a few new targets for ACIsRob Crittenden2009-03-251-8/+32
| | | | | Also switch to the StrEnum parameter type for some options so we let the framework do the enforcement
* Translate variables on all lines and sort files to be updatedRob Crittenden2009-03-251-3/+5
| | | | | | | | Only the dn and the first line of any entry that was spread across multiple lines were getting passed through the template engine. If we are given a directory to process, sort the files in that directory so the order can be predicted. Some updates rely on others.
* DNA is now configured using an update fileRob Crittenden2009-03-251-4/+0
|
* Allow a search using only the exact search filterRob Crittenden2009-03-251-4/+10
|
* Add a 'showall' command so one can pick from a list of tasks to add to a roleRob Crittenden2009-03-251-1/+35
|
* Use tuples instead of lists for class variablesRob Crittenden2009-03-253-4/+5
|
* Raise a more specific error when a user lacks the proper permissions.Rob Crittenden2009-03-253-5/+6
| | | | | The info part of the message will contain details on what permission failed on what attribute.
* Always print the dn first when printing an entryRob Crittenden2009-03-251-0/+3
|
* Add new type List that converts delimited values into a tupleRob Crittenden2009-03-203-1/+110
|
* Converted to use new baseclass, remove the one with the f_ prefixRob Crittenden2009-03-203-1254/+0
|
* Add tests for posix groupsRob Crittenden2009-03-201-4/+62
|
* Convert to use the new basegroup frameworkRob Crittenden2009-03-201-0/+272
|
* Convert to use the new basegroup frameworkRob Crittenden2009-03-201-0/+156
|
* Convert to use the new basegroup frameworkRob Crittenden2009-03-201-0/+208
|
* Modify the taskgroup plugin to use the new group baseclass and add testsRob Crittenden2009-03-203-160/+262
|
* New plugin to handle role groupsRob Crittenden2009-03-203-0/+233
| | | | | | Role groups will be part of the ACI system. It will let one create broad categories of permissions. Things like: helpdesk, user admin, group admin, whatever.
* Add generic base class that will most of the heavy lifting for groupsRob Crittenden2009-03-201-0/+422
|
* Fix build breakage and install rolegroup.updateRob Crittenden2009-03-201-1/+2
|
* kw is supposed to contain just lower-case valuesRob Crittenden2009-03-191-1/+1
|
* kw is supposed to contain just lower-case valuesRob Crittenden2009-03-191-2/+2
|
* Update the ACI class to be more robust and the beginnings of an ACI pluginRob Crittenden2009-03-182-87/+602
| | | | | | The ACI plugin is really meant for developers to help manage the ACIs. It may or may not be shipped. If it is it will be disabled by default. It is very much a shoot-in-foot problem waiting to happen.
* Fix some minor issues in group and service pluginsRob Crittenden2009-03-172-5/+3
|
* Add taskgroups pluginRob Crittenden2009-03-173-0/+234
| | | | Taskgroups are what we grant permission to with the new ACI system.
* Remember to add file as an option for certificate requestsRob Crittenden2009-03-161-0/+3
|
* Fixed Executioner.execute() so that its 'name' argument doesn't conflict ↵Jason Gerard DeRose2009-03-132-4/+18
| | | | with a param called 'name' (which is a valid param name)
* Fix broken build. dna-conf.ldif was removed.Rob Crittenden2009-03-091-1/+0
|
* Remove our copy of the DNA plugin and use the one that comes with DS.Rob Crittenden2009-03-069-1536/+11
| | | | | The DS plugin does config checking when adding new entries online so we are dropping the Posix subtree.
* Don't build radius by defaultRob Crittenden2009-03-042-9/+26
|
* Plugin to handle IPA configurationRob Crittenden2009-03-041-0/+137
|
* Set a minimum value for password policy integersRob Crittenden2009-03-041-6/+11
|
* Add maxvalue and minvalue kwargs and rules to Int and FloatRob Crittenden2009-03-032-2/+235
|
* Fix some netgroup issues related to not all groups being posixGroupsRob Crittenden2009-02-271-4/+4
|
* Update objectclasses for groups, by default not posix groups.Rob Crittenden2009-02-274-14/+70
| | | | | | This change depends on DS bugs 487574 and 487725. Groups cannot be promoted properly without these fixed. It will fail with an Object Class violation because gidNumber isn't set.
* Fixed broken autfill logic in cli.prompt_interactively()Jason Gerard DeRose2009-02-271-20/+22
|
* Enforce netgroup uniqueness, allow netgroups to be members of netgroupsRob Crittenden2009-02-273-5/+51
| | | | | When adding an entry, convert a constraint violation of "already exists" into a DuplicateEntry exception so the user gets a useful response
* Added tofiles command and some documentation to the automount pluginRob Crittenden2009-02-241-5/+133
|
* Add unit test for ipalib.frontend.Command.args_options_2_entry.Pavel Zuna2009-02-241-1/+32
|
* Add missing buildrequiresJakub Hrozek2009-02-231-0/+2
|