summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Don't print error on fresh installSimo Sorce2007-10-121-3/+5
|
* Add inetUser objectclass. Remove test-users ldif.Kevin McCarthy2007-10-113-34/+5
|
* This is a really simple (and dumb) ACI parser for the ACI's weKevin McCarthy2007-10-112-0/+211
| | | | will need in the delegation UI.
* Refactor the __get_entry into __get_base_entry and __get_sub_entry().Kevin McCarthy2007-10-111-11/+31
| | | | | The API needs to be thought about, but this is a quick fix w/minimal impact to allow get_entry_by_dn do work on non-leaf entries.
* Merge.Karl MacMillan2007-10-099-106/+80
|\
| * Combine get_user/group by dn/cn into get_entry_by_cn/dn.Kevin McCarthy2007-10-099-106/+80
| | | | | | | | Also a couple double-escaping fixes I missed in the last patch.
* | Karl MacMillan wrote:Karl MacMillan2007-10-0916-87/+72
|/ | | | | | | | | | | | | > > This largish patch makes the build and installation work on 64bit > > machines. The only catch here is that to get a 64bit build you need to > > set LIBDIR on make: > > > > make install LIBDIR=/usr/lib64 > > > > The spec file does this correctly. I couldn't find any reliable way to > > guess this that works both on real systems and in the almost entirely > > empty rpm build root (you can't, for example, check for the existence > > of /usr/lib64).
* Fix the webgui to allocate a new IPAClient for each request.Kevin McCarthy2007-10-083-26/+40
|
* DELETEs have to come first, in order for "case change" operations to work.Kevin McCarthy2007-10-081-2/+2
|
* Small group fixes: remove index, change to use hidden_fields (like UserFields)Kevin McCarthy2007-10-083-20/+10
|
* Several escaping fixes:Kevin McCarthy2007-10-052-5/+10
| | | | | | - illegal dn characters need to be escaped - null characters in search filters - dynamicedit.js was double html escaping (the python layer does it already)
* Hi,Karl MacMillan2007-10-091-194/+241
| | | | | | | | | | | | | | | | | | | Here is another patch for the installer. It does a few things: * use socket.getfqdn() but fallback to gethostname() * streamlines the hostname prompting * fixes a bunch of spelling and grammatical errors * fixes a bug in the hostname reading/verification logic * allows "yes" and "no" as answers * modularizes and reuses code where possible * changes some of the prompts to be more like the FDS installer - some text is copied (which is easy to use IMO) * tries to make the prompts fit on smaller screens (<80 chars) Hope you agree that it is better. :) Thanks, Jon
* New LDAP connection pool that does lockingRob Crittenden2007-10-082-25/+64
|
* Fix for Internet Explorer, which is picky about commas.Kevin McCarthy2007-10-051-1/+1
|
* On 10/4/07, Rob Crittenden <rcritten@redhat.com> wrote:Karl MacMillan2007-10-081-6/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | > William Jon McCann wrote: > > Hi, > > > > After playing with the install (repeatedly) I ended up with a lot of > > duplicate values in: > > /etc/sysconfig/dirsrv > > /etc/sysconfig/ipa-kpasswd > > > > Here is a patch that should fix this. It modifies the file "in-place" > > and removes lines that matching the key (or commented key) and then > > appends the new key=value. > > > > Jon > > Cool, I've wanted to fix this for a while (and recently aborted a switch > from open with "a" to "w"). > > What happens if the file doesn't exist yet? Do we need to wrap the > fileinput loop in either a try/except or just look to see if the file > exists first (my vote)? > > Something like: > > def update_key_val_in_file(filename, key, val): > if os.path.exists(filename): > pattern = "^[\s#]*%s\s*=" % re.escape(key) > p = re.compile(pattern) > for line in fileinput.input(filename, inplace=1): > if not p.search(line): > sys.stdout.write(line) > fileinput.close() > f = open(filename, "a") > f.write("%s=%s\n" % (key, val)) > f.close() Good point. In genera,l I prefer doing a try because it is a little less racy but in this case it doesn't make a difference. Updated patch attached. Thanks, Jon
* Split the controllers out into separate user and group controllers.Kevin McCarthy2007-10-0420-975/+1021
|
* Fix the autosuggest ordering so faster operations go first.Kevin McCarthy2007-10-041-20/+20
| | | | Also fix a bug with the initials autosuggest code.
* patch queue: admin_account_fix.patchKevin McCarthy2007-10-041-1/+1
|
* Fixes none values in first/last name to display properly.Kevin McCarthy2007-10-044-6/+7
|
* Trickle the group_cn to group_dn down the layers. Fix controller calls.Kevin McCarthy2007-10-033-36/+36
|
* Fix copy/paste bugmccann@jhu.edu2007-10-031-1/+1
|
* Try to catch more error conditions during installationrcritten@redhat.com2007-10-036-44/+124
| | | | | | Modify the way we detect SELinux to use selinuxenabled instead of using a try/except. Handle SASL/GSSAPI authentication failures when getting a connection
* Add the rest of the user fields to the user pages.Kevin McCarthy2007-10-036-60/+908
|
* Patch to fix the installer crashing if selinux is disabled. Also changesmccann@jhu.edu2007-10-022-2/+58
| | | | | | | the exception to contain the complete command. Add a check to make sure installer is running as root. Add signal handler to detect a user-cancelled installation. Detect existing DS instances and prompt to remove them.
* I broke add_groups_to_user and remove_groups_from_user with myrcritten@redhat.com2007-10-021-6/+2
| | | | "use group DN" patch. This fixes it.
* Do group operations based on the group DN, not the CNrcritten@redhat.com2007-10-024-39/+66
| | | | | Add new class of errors for connections Raise an exception if a connection cannot be made due to missing ccache
* Rely more on kerberos.Simo Sorce2007-10-017-88/+111
| | | | | | | Don't read ipa.conf to get the realm, the kerberos libs do that for you. Use the krbPrincipalName to change passwords Make it possible to specify the principal at user creation. Mail is not a required attribute so far, don't require it.
* Assorted UI fixes:Kevin McCarthy2007-10-0214-44/+122
| | | | | | | | | | | | - Change sort functions to be on entities, so can use on the view pages too - Fix bug: empty ajax search on useredit blows up - Filter illegal characters from suggest uid/email methods - Rename first/last name fields - Make default font family sans-serif - Speed up effect appear/fade rendering - Add buttons to top and bottom of pages - Make grouplist sortable - Add noscript warning to welcome page
* Add group management to the newgroup page.Kevin McCarthy2007-10-014-11/+139
|
* Allow group selection on the create user page.Kevin McCarthy2007-10-017-47/+176
|
* Add group management to the user edit page.Kevin McCarthy2007-09-288-8/+373
| | | | Added a couple more API calls to make the inverse operations easier.
* Don't include opts in any public argument lists. It is used internally only.rcritten@redhat.com2007-10-011-0/+3
|
* Check passwords are not emptySimo Sorce2007-09-281-3/+12
|
* IPv6ify, untestedSimo Sorce2007-09-281-20/+55
|
* Added tag milestone_4 for changeset 8227ce764d491a942389f7a9f654f69d2701cb12kmacmill@speckledhen.hosted.redhat.com2007-10-021-0/+1
|
* Extract the shared dynamic edit code.milestone_4Kevin McCarthy2007-09-284-142/+181
| | | | Rename groupeditsearch.kid to dynamiceditsearch.kid
* Sort the group members on the view and edit group pages.Kevin McCarthy2007-09-281-0/+32
|
* Refactoring to allow better member rendering.Kevin McCarthy2007-09-284-37/+104
| | | | | | | | | Created a MemberDisplayInfo to hold the info needed to render a member. Changed round trip persistance to use that class. Created a single renderMemberInfo method to render the members. Changed dynamic as well as static lists to use renderMemberInfo. Lastly, render groups members in italics. Change view group to render group members in italics.
* Adds nested group handling to the view and edit group pages.Kevin McCarthy2007-09-275-108/+139
| | | | | Renames the ajax seach page, because it's tightly bound to the group edit page. This isn't super polished, but the basic functionality is there.
* patch queue: add_filters.patchKevin McCarthy2007-09-271-0/+3
|
* Make timelimit a parameter to the find methods.Kevin McCarthy2007-09-274-18/+14
|
* patch queue: group_users_use_dns.patchKevin McCarthy2007-09-277-71/+139
|
* Install the web guiKarl MacMillan2007-09-2814-77/+350
| | | | | | | | | | | | | | | | | | | Install the turbogears web gui including an init script. This patch includes a few related changes: * create a production configuration * rename the web gui startup scrip to ipa-webgui * add an init script * chkconfig on the ipa-webgui init script * make the start script properly daemonize the app when not in a development directory. * Install everything to the correct places (/usr/sbin/ipa-webgui and /usr/share/ipa/ipagui mainly). There are some things still left to do: * Sort out the logging - the config needs to be adjusted so that logging messages end up in /var/log.
* Misc small fixesKarl MacMillan2007-09-288-8/+11
| | | | | | | * Remove the rpmbuild tree with the dist-clean target. * Move ipa-server-setupssl from /usr/sbin to /usr/share/ipa * Check in requirement change for generated freeipa-python.spec * Fix interactive hostname in ipa-server-install.
* Make apache work with selinuxKarl MacMillan2007-09-281-0/+3
| | | | | | The default configuration of the apache selinux policy doesn't allow apache to connect to the turbogears gui. This sets the correct boolean to allow that connection.
* Misc small fixes:Kevin McCarthy2007-09-256-24/+37
| | | | | | | | | | - Members of groups are clickable - Combine name and uid into a single column in find users - Remove license plate from searching - Mailto links on user emails - Add timelimit to finds. This is experimental... - Fix usersearch to only search on objectClass=Person - Change search to use get parameter
* Adds methods to manipulate groups by dns.Kevin McCarthy2007-09-265-84/+214
| | | | | Renamed some of the user_group parameters to be self-evident. Binary wrapping isn't necessary on strings, so removed from xmlrpc calls.
* Fix a couple of XML-RPC functions that were missing the opts argumentrcritten@redhat.com2007-09-263-4/+67
| | | | Include a kerberized XML-RPC client that will list the XML-RPC API
* patch queue: helptext.patchKevin McCarthy2007-09-263-0/+48
|
* Add IPA icon file.Kevin McCarthy2007-09-251-0/+0
|
generated by cgit (git 2.34.1) at 2025-09-05 03:55:50 +0000