summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add back in some CSS that was removed in the big UI update.Rob Crittenden2007-12-051-0/+17
| | | | This adds back required field colors and colored error and warning msgs.
* Fix message about no spaces in password - spaces workKarl MacMillan2007-12-061-1/+1
| | | | fine with ssl setup shell script removed.
* The uid_hidden field needs to be retained until after validation succeedsRob Crittenden2007-12-061-6/+6
| | | | | otherwise if it ever fails, uid_hidden will be lost which can cause uid to not be set which cascades into lots of other errors.
* Improve the error message when an entry is not found.Rob Crittenden2007-12-061-4/+17
| | | | | | | | | We used to return the entire argument string ala: ('dc=freeipa,dc=org', 2, 'uid=foo', ['*']) This adds a regex to try to print anything after = in the filter. Not perfect but better.
* Make uid an editable field in the Edit UI so we can do RDN changesRob Crittenden2007-12-067-20/+49
| | | | | | | Fix group RDN changes Remove a copy/paste error in the group UI update that caused 2 updates Fix variable name so groups don't get user objectclasses Remove color CSS for field backgrounds as they override disabled field display
* Utilize user and group objectclass lists in cn=ipaconfigRob Crittenden2007-12-063-6/+36
| | | | Change the syntax on user and group objectclasses in cn=ipaconfig
* Merge.Karl MacMillan2007-12-0631-122/+866
|\
| * Add some javascript so we can put focus on the first field of the page.Rob Crittenden2007-12-064-0/+18
| |
| * Add 'Edit Policy' button at top of page.Rob Crittenden2007-12-061-0/+3
| |
| * Always show the edit link on your own recordRob Crittenden2007-12-061-2/+2
| |
| * Move dn removal to the XML-RPC side and remove empty attributesRob Crittenden2007-12-052-5/+23
| |
| * Notify the user when the search results have been truncatedRob Crittenden2007-12-052-0/+6
| |
| * Add UI for service principal creation and keytab retrievalRob Crittenden2007-12-0512-2/+498
| |
| * Merge.Karl MacMillan2007-12-052-47/+44
| |\
| | * Fix errors with ipautil.CalledProcessError and cleanup some imports.Karl MacMillan2007-12-042-47/+44
| | |
| * | Phase 1 of allowing admins to set the default object classes for users & groupsRob Crittenden2007-12-049-55/+248
| |/ | | | | | | | | | | | | This adds the UI and does error checking of the selected object classes but it doesn't actually use the values yet. It also generalizes some functions for doing multi-valued fields.
| * Groups may be iterated over so should be an empty list, not NoneRob Crittenden2007-12-051-1/+1
| |
| * Convert krbmaxpwdlife and krbminpwdlife from seconds into days and hoursRob Crittenden2007-12-032-7/+18
| |
| * Fix client installation toolSimo Sorce2007-12-041-2/+4
| |
| * Increase default max password lifetime from 10 to 90 daysRob Crittenden2007-12-031-1/+1
| |
* | Committed generated spec files.Karl MacMillan2007-12-031-0/+2
|/
* Update build requires for libcap.Karl MacMillan2007-12-031-0/+2
|
* Improved ACIsSimo Sorce2007-11-301-9/+12
|
* minor typosSimo Sorce2007-11-302-2/+8
|
* Compatibility changes to work on RHEL 5 with python 2.4rcritten@redhat.com2007-11-3013-35/+51
|
* Min Pwd Change Time Check after Password reset and other minor fixesSimo Sorce2007-11-302-26/+34
|
* Revert logging setup change because it has unintendedKarl MacMillan2007-12-031-3/+3
| | | | consequences during ipa-server-install.
* Require that the default users group existsRob Crittenden2007-11-302-10/+21
| | | | Fix some copy-paste errors from the password policy update
* Don't allow the admins or editors groups to be removed.Rob Crittenden2007-11-302-0/+25
| | | | Don't allow the default group for users to be removed.
* delete_group() takes a DN, not a CN. Also do slightly better error reporting.Rob Crittenden2007-11-301-1/+13
|
* Remove optional arguments from the XML-RPC interfaceRob Crittenden2007-11-291-15/+15
|
* Change the password expiration message to be more precise.Rob Crittenden2007-11-292-4/+4
|
* Add utility to lock user accounts. Remove lock capability from ipa-deluserRob Crittenden2007-11-267-25/+147
| | | | | Fix bootstrap.ldif to add new Class of Service entries properly Include some man pages that weren't being installed
* Add ipa-python to maintainer-clean and clean up .pyc filesRob Crittenden2007-11-2815-0/+17
|
* Remove unnecessary attribute left over from testingRob Crittenden2007-11-261-1/+0
|
* Fix mode on ipa-keytab-util.Karl MacMillan2007-11-212-2/+4
|
* Add ipa-keytab-util to spec.Karl MacMillan2007-11-212-0/+2
|
* Add xml-rpc interface for getting keytabs.Karl MacMillan2007-11-2113-4/+524
| | | | Warning: this lacks any sort of authorization.
* Move packages to ipa from freeipa.Karl MacMillan2007-11-219-53/+77
|
* Bump the version numbers for release. Also removeKarl MacMillan2007-11-219-23/+23
| | | | | | specific version check on freeradius. Packages aren't available and the freeradius support isn't ready anyway.
* Generate master password from Simo.Karl MacMillan2007-11-214-27/+17
|
* Added replication.pyKarl MacMillan2007-11-211-0/+316
|
* Initial replication setup.Karl MacMillan2007-11-2114-253/+705
| | | | | | | | | | | | | | | | | | | This add replication setup through two new commands: ipa-replica-prepare and ipa-replica-install. The procedure is to run ipa-replica-prepare on an existing master. This will collect information about the realm and the current master and create a file storing all of the information. After copying that file to the new replica, ipa-replica-install is run (with -r to create a read-only replica). This version of the patch also includes fixes for the sasl mappings on the replicas. Remaining features: - ssl for replication. - automatic configuration of mesh topology for master (or a simpler way to replicate multiple masters. - tool for view / configuring current replication.
* more s/unique// wrt groups members/objectclassesSimo Sorce2007-11-212-3/+3
|
* Use groupOfNames and member, not groupOfUniqueNames and uniqueMemberSimo Sorce2007-11-203-21/+21
|
* Fix subtle errors in kpasswdSimo Sorce2007-11-201-25/+73
|
* Use same tzinfo as the time parser to avoid TypeError from being thrownRob Crittenden2007-11-211-1/+1
|
* Fix indentation error that occured in mergeRob Crittenden2007-11-211-11/+11
|
* Enable group inactivation by using the Class of Service plugin.Rob Crittenden2007-11-2015-44/+301
| | | | | | | | | | | | | | | | | | | | This adds 2 new groups: activated and inactivated. If you, or a group you are a member of, is in inactivated then you are too. If you, or a group you are a member of, is in the activated group, then you are too. In a fight between activated and inactivated, activated wins. The DNs for doing this matching is case and white space sensitive. The goal is to never have to actually set nsAccountLock in a user directly but move them between these groups. We need to decide where in the CLI this will happen. Right it is split between ipa-deluser and ipa-usermod. To inactivate groups for now just add the group to inactivate or active.
* Fix bad segfault when pwvals is nullSimo Sorce2007-11-191-34/+24
|