summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* ipa-cldap: Support clients asking for default domainSimo Sorce2012-01-051-1/+21
|
* Add DNS check to conncheck port probeMartin Kosek2012-01-031-0/+5
| | | | | | | | | It is pointless to report failures for all checked ports when the target hostname is not resolvable - user may get easily confused. This patch changes this behavior so that conncheck fails with a proper error and does not even continue to port probing part. https://fedorahosted.org/freeipa/ticket/1984
* update i18n pot file for branch masterJohn Dennis2012-01-031-3574/+3705
|
* Fixed IPv6 validation special case: single colonPetr Vobornik2012-01-032-0/+8
| | | | | | IPv6 parsing was incorrectly evaluating ':' as a valid IPv6 address. https://fedorahosted.org/freeipa/ticket/1466
* Added client-side validation of A and AAAA DNS recordsPetr Vobornik2012-01-034-3/+64
| | | | https://fedorahosted.org/freeipa/ticket/1466
* Added validation logic to multivalued text fieldPetr Vobornik2012-01-032-2/+55
| | | | https://fedorahosted.org/freeipa/ticket/1466
* Added support of custom field validatorsPetr Vobornik2012-01-031-51/+87
| | | | | | | | | | | | | Current validation logic supports only validation based on metadata. It can be extended only by overriding field's validation method. This approach requires creating subclasses of field for each different format of desired value. It's inconvenient for cases like adding the same validation logic to two different subclasses of field. This patch is adding support for creating custom validators. Validator is an object which contains validation logic. Validation is executed in a validate(value, context) method. This method checks if the value is valid and returns a validation result. Validation result is a simple object which contains valid property and an error message if valid is false. Field is extended by validators property. It can be set in spec object or later. It should contain instances of validators for the field. Validators are run in field's validation method. This patch is a prerequisite for: https://fedorahosted.org/freeipa/ticket/1466
* Fix attempted write to attribute of read-only object.Jan Cholasta2012-01-029-17/+55
| | | | | | | | | Add new class "cachedproperty" for creating property-like attributes that cache the return value of a method call. Also fix few issues in the unit tests to enable them to succeed. ticket 1959
* Reload UI on server upgrade.Endi Sukma Dewata2011-12-213-0/+9
| | | | | | | | | | The JSON server has been modified to return the version number in all responses. The UI has been modified to keep the version obtained during env operation and check the version returned in subsequent operations. If the version changes the UI will reload itself. Ticket #946
* Reload UI when the user changes.Endi Sukma Dewata2011-12-212-0/+5
| | | | | | | | | | The JSON server has been modified to return the principal name in all responses. The UI has been modified to keep the principal obtained during whoami operation and check the principal returned in subsequent operations. If the principal changes the UI will reload itself. Ticket #1400
* Parsing of IPv4 and IPv6 addressesPetr Vobornik2011-12-219-4/+716
| | | | | | | | | Added support of parsing and validation of IPv4 and IPv6 addresses. Class IP.address can also create reverse address from any valid IPv4 or IPv6 address. This functionality is needed for tickets: https://fedorahosted.org/freeipa/ticket/1466 https://fedorahosted.org/freeipa/ticket/1975
* Refactored entity object resolution.Endi S. Dewata2011-12-2124-154/+157
| | | | | | | | | | | | | The IPA.get_entity() has been modified to accept either entity name or entity object. If it receives an entity object it will return the object itself. Otherwise, it will resolve the name in the entity registry. The other_entity variables have been modified to store a reference to the entity object instead of its name. The test cases have been modified to use real entity objects instead of just the names. Ticket #2042
* Fixed labels in Sudo, HBAC rulesPetr Vobornik2011-12-202-19/+8
| | | | | | Fixed regression in labels introduced by refactoring #1515. https://fedorahosted.org/freeipa/ticket/1515
* Better table column width computingPetr Vobornik2011-12-172-22/+44
| | | | | | | | Columns can have width set or not. Without setting the width it was computed based on tbody width and number of columns. This method is working well if no column has width set. The disadvantage of this approach is that all columns have the same width and so they are not reflecting their possible usage. Flag columns such as 'external' in rule association tables or various 'enable' flags in search facets can be narrower. If we set them fixed small width it will have different size because this width is not currently added to the computation. This is fixing this problem so dynamic and fixed width can be combined and the columns have desired width. https://fedorahosted.org/freeipa/ticket/2200
* Distinguishing of external values in association tablesPetr Vobornik2011-12-153-54/+75
| | | | | | | | | | | | | | | | | | | | Problem: Rule association widget was displaying standard records with external records in one table. User couldn't distinguish the values. When clicking on the external record link it navigated to appropriate page for that entity. But for external value there is no record to show so it displayed error. Solution: * For tables with possible external values a 'external' column was added. It displays "True" if the value is external and nothing if not. Displaying nothing is intentional. If user sees some text in external column he imidiately knows that the record is external without even reading the "True" text. * Rows with external values don't have a link for navigating to record page. This prevents showing the error as no record exists. Additional changes: * Association table widget was stripped of get_records method. Loading records isn't its resposibility it's a resposibility of field. * Column was extended by possible suppressing of link creation. It's done by optional suppress_link argument in setup method. * To allow setting suppress_link attribute in inherited tables a new overridable method was created - setup_column. Posible future improvements: * Table is using dynamic setting of width for columns. Each column has the same width. For flag columns such as 'external' the width of the column is too big. It would be better to be able to set smaller fixed width and the rest of the columns width (without the width set) would be computed (to fit the table). * When a table has displayed buttons in its last column header the cells in column header have different vertical alignmnent. It should be united. https://fedorahosted.org/freeipa/ticket/1993
* Fixed displaying of external records in rule association widgetsPetr Vobornik2011-12-153-19/+51
| | | | | | It's a fix for regression introduced by widget refactoring #2040. https://fedorahosted.org/freeipa/ticket/2040
* Added facet tabs coloringPetr Vobornik2011-12-144-8/+28
| | | | | | Facet tabs are now colored according to their group. https://fedorahosted.org/freeipa/ticket/1976
* Require an HTTP Referer header in the server. Send one in ipa tools.Rob Crittenden2011-12-125-5/+67
| | | | | | | | | | This is to prevent a Cross-Site Request Forgery (CSRF) attack where a rogue server tricks a user who was logged into the FreeIPA management interface into visiting a specially-crafted URL where the attacker could perform FreeIPA oonfiguration changes with the privileges of the logged-in user. https://bugzilla.redhat.com/show_bug.cgi?id=747710
* User-add random password supportOndrej Hamada2011-12-126-13/+201
| | | | | | | | | | | | | | | | | | | | | | I've used code from ipalib/plugins/host.py to add support for random password generation. The '--random' option is now available in user-add and user-mod commands. If both the 'password' and 'random' options are used the 'random' option will be ignored. Two test cases were added to unit test's module test_user_plugin.py - they test creating and modifying user with random password. Two fuzzy tests were added: test for password(string that doesn't start or end with whitespace and doesn't containt other whitespace than ' ') and for whatever string(because of krbextradata). I've slightly modified ipa_generate_password in order to make passwords for users more user-friendly(reduce number of non-letters). It has two optional parameters now - first one is string of characters that should be used for generating the passwd and second one is length of password. If none parameter is set default values will be used so there's no need to modify other plugins that use random password generator. https://fedorahosted.org/freeipa/ticket/1979
* Association facets are read only in self servicePetr Vobornik2011-12-121-6/+12
| | | | | | | | This patch works with assumption that user in self-service mode doesn't have rights for enrolling/un-enrolling himself to/from group, role, hbac rule, net group, sudo rule. He can only read the attributes. Therefore in self service mode all user association facets are set read only. Checkingi and working with the actual rights would require significantly bigger effort. https://fedorahosted.org/freeipa/ticket/1972
* Fixed combobox search icon position.Endi Sukma Dewata2011-12-101-1/+1
| | | | | | | A recent CSS change inadvertently changes position of the combobox search icon. This has been fixed now. Ticket #388
* Fixed combobox icon position.Endi Sukma Dewata2011-12-091-1/+1
| | | | | | | A recent CSS change inadvertently changes position of the combobox icon. This has been fixed now. Ticket #388
* Fixed unmatched checkbox name.Endi Sukma Dewata2011-12-091-1/+1
| | | | | | The name of the Unmatched checkbox in HBAC Test has been corrected. Ticket #388
* Reordered facets in ACIPetr Vobornik2011-12-091-3/+3
| | | | | | | | | Facets in ACI have new order: * Roles: members, privileges, settings * Privileges: permissions, settings, roles * Permissions: settings, privileges https://fedorahosted.org/freeipa/ticket/2104
* Additional better displaying of long namesPetr Vobornik2011-12-094-49/+53
| | | | | | | | - facet group headers, error dialog, non-scrollable tables, can manage long names Size calculation of scrollable and non-scrollable tables was united. Now these types of tables differ only by style. https://fedorahosted.org/freeipa/ticket/1821
* Check through all LDAP servers in the domain during IPA discoveryAlexander Bokovoy2011-12-091-9/+25
| | | | | | | | | When discovering IPA LDAP servers through DNS records, look through all servers found until first success. A master might be not available or denied access but replica may succeed. Ticket #1827 https://fedorahosted.org/freeipa/ticket/1827
* Add a second module init call for newer samba versionsSumit Bose2011-12-091-0/+6
|
* ipa-kdb: return properly when no PAC is availableSimo Sorce2011-12-091-10/+3
|
* Merge branch 'master' of git+ssh://git.fedorahosted.org/git/freeipaAlexander Bokovoy2011-12-099-100/+1533
|\
| * Fixed problem loading DNS records.Endi Sukma Dewata2011-12-091-21/+27
| | | | | | | | | | | | | | | | The DNS records list page was not loaded correctly due to a recent change in HBAC Test. The page has been updated to use the load_all() to show all records in the zone. Ticket #388
| * Added HBAC Test input validation.Endi Sukma Dewata2011-12-092-1/+101
| | | | | | | | | | | | | | The HBAC Test pages have been modified to validate required input before executing the test. Ticket #388
| * Fixed matched/unmatched checkboxes in HBAC TestEndi Sukma Dewata2011-12-097-78/+1405
| | | | | | | | | | | | | | | | | | The checkboxes in HBAC Test run page have been fixed to show/hide matched or unmatched rules. The New Test button has been fixed to deselect the inputs in all facets. The test data has been updated as well. Ticket #388
* | Fix dependency for samba4-devel packageAlexander Bokovoy2011-12-091-1/+4
| |
* | Add SELinux user mapping framework.Rob Crittenden2011-12-0914-4/+1309
|/ | | | | | | | This will allow one to define what SELinux context a given user gets on a given machine. A rule can contain a set of users and hosts or it can point to an existing HBAC rule that defines them. https://fedorahosted.org/freeipa/ticket/755
* Better displaying of long names in tables and facet headersPetr Vobornik2011-12-093-20/+63
| | | | | | | | | | | | | | | | | | | | | | | | | Tables columns have computed width. If value in one column is very long it widens the column and shortens others. This change causes that body columns are not aligned with header columns which makes the table less readable. Applying 'word-break: break-all' style breaks the word to multiple lines and solves the problem. Simililar problem is in details facet when displaying text values. Very long values widens the table and a horizontal slider is displayed, which is bad. Applying same solution. In facet headers and breadcrumb navigation breaking the pkey looks bad - there should be only on line of pkey. To solve this, the pkey is limited to 63 characters (empirically measured). Long pkeys are cut. Uncut pkey is set as a title to avoid losing information. Whole breadcrump could be about 140 chars (with current styles). 10 chars is reserved for entity link, 60 for pkey the rest (about 60) for parent pkeys. The assumtion is that the parent pkeys wouldn't be so long so they won't be cut anyway. Column width calculation in tables was iproved. Now it counts with cell spacing, padding, border. It uses these assumtions: cell-spacing: 2px cell-padding: 6px th:right, left; td: left cell-border: th:1px; td:0px It would be better to get these measures dynamically. Right now it is good enough - better than previous calculation. Result: data cells are aligned with their header. This alignment fails if vertical scrollbar is displayed (existing problem). Also added padding to headers in association adder dialog. https://fedorahosted.org/freeipa/ticket/1890
* Remove old RPMROOT contents before it is used for rpmbuildJohn Dennis2011-12-091-0/+1
|
* ipa-kdb: Add delgation access control supportSimo Sorce2011-12-085-1/+342
|
* ipa-kdb: enhance deref searchesSimo Sorce2011-12-083-13/+39
| | | | | Allow to deref more than one attribute. The attrs searched are the same for all deref attributes at this time.
* ipa-kdb: Delegation ACL schemaSimo Sorce2011-12-081-0/+5
|
* Add connection failure recovery to IPAdminMartin Kosek2011-12-081-6/+29
| | | | | | | | | | | Recover from connection failures in IPAdmin LDAP bind functions and rather try reconnect in scope of a given timeout instead of giving up after the first failed connection. The recovery fixes ipa-ldap-updater on F-16 which always failed because of a missing dirsrv socket. https://fedorahosted.org/freeipa/ticket/2175
* Reorder privileges so that memberof for permissions are generated properly.Rob Crittenden2011-12-084-21/+34
| | | | | | | | | | | | The privilege was added after the permission causing the memberof to not be generated. Add a new task to regenerate memberof for existing PBAC to fix upgrades. https://fedorahosted.org/freeipa/ticket/2058 https://fedorahosted.org/freeipa/ticket/2059 https://fedorahosted.org/freeipa/ticket/2060 https://fedorahosted.org/freeipa/ticket/2061
* Use absolute paths when trying to find certmonger request id.Rob Crittenden2011-12-081-9/+14
| | | | | | | | | The value stored in certmonger is not guaranteed to be normalized nor is the value passed-in (could be a relative path and may or not contain trailing slash). We do direct string compares so they need to match exactly or we won't find the request. https://fedorahosted.org/freeipa/ticket/1942
* ticket 2172 - If "make rpms" fails so will the next makeJohn Dennis2011-12-082-11/+11
| | | | | | | | | | | | | If "make rpms" fails it doesn't clean up the rpmbuild directory it created. The next make-lint will also fail because it finds files under rpmbuild. make-lint is invoked by "make rpms", a vicous cycle. The patch contains two sets of changes Include "rpmbuild" in the IGNORE_PATHS list of make-lint. Fix the Makefile to use $(RPMBUILD) consistently, there were a number of hardcoded uses of "rpmbuild" as a direcotry.
* ipa-kdb: Fix copy and paste typoSimo Sorce2011-12-071-1/+1
|
* Search facets show translated boolean valuesPetr Vobornik2011-12-085-8/+45
| | | | | | | | Created format method for getting translated messages for boolean values - IPA.boolean_format. Used in hosts, sudo rules, hbac rules and hbac test. https://fedorahosted.org/freeipa/ticket/2027
* Fixed I18n labels for HBAC TestEndi Sukma Dewata2011-12-074-34/+59
| | | | | | | Hard-coded labels in HBAC Test have been moved into internal.py to allow translation. Ticket #388
* Fixed CSS for HBAC TestEndi Sukma Dewata2011-12-072-43/+186
| | | | | | | The tables in HBAC Test have been modified to expand according to window size. Hard-coded CSS codes have been moved into ipa.css. Ticket #388
* Added external fields for HBAC Test.Endi Sukma Dewata2011-12-073-53/+127
| | | | | | | A text field has been added for specifying external user, host, and service for HBAC testing. Ticket #388
* Fixed search filter in HBAC Test.Endi Sukma Dewata2011-12-071-1/+8
| | | | | | The search filter in HBAC Test has been fixed to work properly. Ticket #388.
* Fixed navigation buttons for HBAC Test.Endi Sukma Dewata2011-12-076-33/+136
| | | | | | | The Back, Next, and New Test buttons in HBAC Test have been fixed to work properly. Ticket #388
generated by cgit (git 2.34.1) at 2025-09-02 21:46:46 +0000