| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
|
| |
kerberos principal name
Add an identity an visit class to TurboGears that can handle the user
without requiring a database
Update the UI to show the user correctly.
Note that this is currently disabled. It is hardcoded to always return the
principal test@FREEIPA.ORG in proxyprovider.py
It doesn't handle an unauthorized request because that can never happen.
|
|
|
|
| |
(Password updating still doesn't work due to ACI though)
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
Add TurboGears to required package list
Clear password on Edit Person page.
Change uidnumber/gidnumber on Add Person to say 'Generated by server'
|
| |
|
| |
|
|\ |
|
| |
| |
| |
| | |
Updated installation instructions
|
| |
| |
| |
| |
| | |
- Make password not required for add person
- Fix for searching on '*' or ''
|
| |
| |
| |
| |
| | |
- remove password generator button
- add confirm password field
|
| |
| |
| |
| |
| | |
also switch to recreate ldap.conf and krb5.conf from scratch on clients,
avoid nasty failures in case the original files contained strange directives
|
| | |
|
| |
| |
| |
| |
| |
| | |
Change account status to use select list and 'active'/'inactive' values.
Improve autosuggest to keep suggesting unless you overwrite a suggestion
(if you correct the name, it will re-suggest).
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
- Rename buttons
- Add fake "logged in as" text
- Increase font size and spacing for sidebar
- Fix search messages for no results
- Open ipa footer link in new window
|
| |
| |
| |
| |
| | |
Add userhelper module to provide ui logic.
Fix uid/email suggest to lowercase first.
|
| | |
|
| |
| |
| |
| |
| |
| | |
Handle both SASL auth and proxied authentication
Refactor LDAP connection code to be simpler
Other small bug fixes
|
| | |
|
| | |
|
|/
|
|
|
| |
also switch to recreate ldap.conf and krb5.conf from scratch on clients,
avoid nasty failures in case the original files contained strange directives
|
|
|
|
| |
this way freeipa-client does not depend on freeipa-server
|
|\ |
|
| |
| |
| |
| | |
Fix genModList to lowercase all keys and use CIDict.
|
| | |
|
| | |
|
| |
| |
| |
| | |
Scriptaculous <http://script.aculo.us/> is released under an MIT license.
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Set password for admin user using the Directory Mangaer account
and the mozldapldappaswd binary to get and SSL connection
Fix some timeout problems with deploying keytabs
Fix ipa_pwd_extop to actuallt correctly detect an SSL connection
Do not ask for the user to use for the directory unless 'dirsrv' is
an existing user which may clash, create it silently
|
| | |
|
|\| |
|
| | |
|
| |
| |
| |
| | |
we need to access the generated keytabs
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
This way it returns results even if the search times out.
The find_users() search now returns a counter as the first result, which
is set to -1 if the results are partial.
|
| |
| |
| |
| |
| |
| | |
Add fields to search results
Put result() call inside try block - it's throwing an exception
Trap ADMINLIMIT and SIZELIMIT exceptions
|
| |
| |
| |
| |
| |
| | |
Implement adding a group to a group
Some other small fixups
Add new cmd-line tool ipa-delgroup
|
| |
| |
| |
| |
| |
| |
| | |
The code is still not perfect and rely on a yet unreleased
nss_ldap package that fix dns discovery problems within nss_ldap
itself.
Also the manipulation of krb5.conf need to be improved
|
| |
| |
| |
| | |
we need to access the generated keytabs
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
or something very close to this one
Add default groups and admin user
TODO: need to discuss more in deep uid/gid generation, this will
probably change as soon as the DNA plugin is activated
|
|\| |
|
| |
| |
| |
| |
| |
| |
| |
| | |
removes the need for LDIF conversion. It will make TurboGears direct
code faster, but should keep xmlrpc about the same speed.
The patch also swaps out ldap.cidict for the IPA CIDict class. IPA code
should only use the CIDict class now.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- "configurable" fields to search on
- tokenize search words
- prioritize exact matches over partial matches
- split match filter generation into a re-usable function.
Other updates:
- use finally block to return ldap connections
- update web gui to use new get_user methods
|
| | |
|
| |
| |
| |
| | |
Put a try/except around attempts to determine user uniqueness
|
|/ |
|