Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Handle input range properly and catch KeyboardInterrupt and exit gracefully | Rob Crittenden | 2008-02-20 | 3 | -11/+25 |
| | | | | 433496 | ||||
* | Handle a ctrl-C gracefully while getting the new password | Rob Crittenden | 2008-02-20 | 1 | -13/+18 |
| | | | | Resolves 433053 | ||||
* | memberOf attribute should not be replicated | Rob Crittenden | 2008-02-18 | 1 | -0/+1 |
| | | | | Resolves 430017 | ||||
* | Import internationalization for kid templates patch from Masato Taruishi | Rob Crittenden | 2008-02-19 | 10 | -4/+1602 |
| | |||||
* | Initial SELinux policies for ipa_kpasswd and ipa_webgui | Rob Crittenden | 2008-02-08 | 11 | -13/+387 |
| | |||||
* | Display the path to the PKCS#12 password file at the end of installation | Rob Crittenden | 2008-02-19 | 1 | -0/+1 |
| | |||||
* | Fix bug that prevented single-character fields | Rob Crittenden | 2008-02-11 | 2 | -4/+10 |
| | | | | | | | | | | Fix bug in exception handling where we were sending the wrong thing as detail. Basically we were catching an LDAP error, generating an IPAError from it, catching that, then setting the detail of the 2nd exception to another IPAError rather than the root exception. This caused anything looking at e.detail to crap out Resolves 432136 | ||||
* | Don't create a backup of the PKCS#12 cert on replicas | Rob Crittenden | 2008-02-14 | 2 | -12/+17 |
| | | | | | | Name the file created by ipa-replica-prepare after the FQDN of the target Resolves 432904 | ||||
* | Fix bugs in handling of circular groupings in memberOf plug-in. | Nathan Kinder | 2008-02-14 | 1 | -5/+18 |
| | | | | Resolves 432140 | ||||
* | Fix incorrect form label | Rob Crittenden | 2008-02-14 | 1 | -1/+1 |
| | | | | Resolves 432731 | ||||
* | Use ldap_explode_dn instead of ldap_str2dn so we can use python-ldap 2.2.0 | Rob Crittenden | 2008-02-11 | 1 | -5/+4 |
| | |||||
* | Gracefully handle sys.exit() in python 2.4 | Rob Crittenden | 2008-02-11 | 1 | -0/+2 |
| | |||||
* | Generate the multi-value entries needed when redirecting to the edit_user | Rob Crittenden | 2008-02-08 | 1 | -24/+39 |
| | | | | | | page. This avoids a Nonetype error. Resolves 432106 | ||||
* | Install principalshow.kid | Rob Crittenden | 2008-02-08 | 1 | -0/+1 |
| | |||||
* | Missed a place to translate the realm name into an instance name | Rob Crittenden | 2008-02-08 | 1 | -1/+3 |
| | | | | Catch SystemExit exceptions otherwise a trace will be shown with python 2.4 | ||||
* | Include some missing man pages | Rob Crittenden | 2008-02-08 | 1 | -0/+3 |
| | |||||
* | Include some missing utilities in the Makefile | Rob Crittenden | 2008-02-08 | 1 | -0/+2 |
| | |||||
* | Always do a chkconfig --add/--del on install/uninstall | Rob Crittenden | 2008-02-08 | 1 | -0/+14 |
| | | | | | This makes a from-tree installation work. We also do this in the rpm spec file. Contributed by Pieter D.J. Krul | ||||
* | Add switch to be able to provide a comma separate list of encryption types | Simo Sorce | 2008-02-06 | 1 | -25/+76 |
| | | | | | we want to have in the keytab. This superceedes any default enctype. | ||||
* | Switch 'below' to 'above' to point to the right location of the CA on the page | Rob Crittenden | 2008-02-07 | 1 | -1/+1 |
| | |||||
* | Don't set blank values so we don't end up with empty attributes | Rob Crittenden | 2008-01-30 | 2 | -70/+91 |
| | | | | Resolves 429895 | ||||
* | Set the license uniformly to GPLv2 only. | Rob Crittenden | 2008-02-04 | 124 | -92/+1209 |
| | |||||
* | Create /var/run/<process>.pid to play nicers with the start scripts | Rob Crittenden | 2008-02-06 | 3 | -5/+36 |
| | | | | Need to start ipa_webgui as root and drop privs in order to write in /var/run | ||||
* | Fix broken attempt to return 0 on success, 1 on failure | Rob Crittenden | 2008-02-06 | 1 | -2/+2 |
| | |||||
* | Fix two typos | Rob Crittenden | 2008-02-05 | 1 | -2/+2 |
| | |||||
* | Add uniqueMember -> member mapping into /etc/ldap.conf on installation | Simo Sorce | 2008-02-05 | 1 | -0/+1 |
| | |||||
* | Return 1 on error, 0 on success | Rob Crittenden | 2008-02-05 | 1 | -0/+2 |
| | |||||
* | Use file to store the current CA serial number | Rob Crittenden | 2008-02-05 | 7 | -43/+162 |
| | | | | | | | No longer create a PKCS#12 file that contains the CA No longer send the entire CA to each replica, generate the SSL certs on master Fix number of bugs in ipa-replica-install and prepare Produce status output during replica creation | ||||
* | Remove = sign between [set|add|del]attr=attr=value to improve readability. | Rob Crittenden | 2008-02-04 | 1 | -3/+3 |
| | |||||
* | Add --usage as a command-line option. | Rob Crittenden | 2008-02-01 | 1 | -0/+2 |
| | | | | Resolves 431283 | ||||
* | Marked with wrong license. IPA is GPLv2. | Rob Crittenden | 2008-01-31 | 12 | -40/+76 |
| | |||||
* | Use orig_user_dict to get krbprincipalname when changing passwords. | Rob Crittenden | 2008-01-31 | 1 | -1/+6 |
| | | | | Add an extra exception handler so we don't return a 500 on errors. | ||||
* | Ensure that the ipa_webgui error log exists and has correct permissions. | Rob Crittenden | 2008-01-31 | 2 | -2/+16 |
| | | | | Resolves 431089 | ||||
* | Add option to list common attributes for use with --setattr,--addattr,--delattr | Rob Crittenden | 2008-01-31 | 4 | -4/+37 |
| | |||||
* | Handle the --usage option by actually displaying the usage | Rob Crittenden | 2008-01-31 | 15 | -18/+34 |
| | | | | | | Fix some missing options in --usage Remove a few debugging statements Resolves 430704 | ||||
* | Use proper string validation routine. | Rob Crittenden | 2008-01-31 | 1 | -1/+1 |
| | | | | Resolves 430709 | ||||
* | Use correct variable for domain when restoring a file. | Rob Crittenden | 2008-01-31 | 1 | -1/+1 |
| | | | | Resolves 430724 | ||||
* | Fix discrepencies between built-in help and the man page. | Rob Crittenden | 2008-01-25 | 2 | -15/+19 |
| | | | | Resolves bz 429814 | ||||
* | Enable logging so we can catch startup errors either in the console or | Rob Crittenden | 2008-01-30 | 1 | -3/+51 |
| | | | | | | the error log. Add a foreground and debug flag Resolves 430011 | ||||
* | Put user-modifiable files into /etc/ipa/html so they can be marked as | Rob Crittenden | 2008-01-30 | 2 | -4/+64 |
| | | | | | config(noreplace). Resolves 430004 | ||||
* | Missed closing quote | Rob Crittenden | 2008-01-29 | 1 | -1/+1 |
| | |||||
* | Remove reference to radius that wasn't used and was causing program to fail. | Rob Crittenden | 2008-01-29 | 1 | -1/+1 |
| | | | | Resolves 429853 | ||||
* | Include some additional information when installing IPA. | Rob Crittenden | 2008-01-25 | 2 | -4/+16 |
| | | | | | Remove 8080 as a port that needs to be opened bz 430088 | ||||
* | Fix misspelling of the word indices. | Rob Crittenden | 2008-01-25 | 3 | -4/+4 |
| | |||||
* | Fix not so random random passwords | Mark McLoughlin | 2008-01-22 | 1 | -4/+2 |
| | | | | | | | | | | | | | | If you run ipa_generate_password() multiple times, one after the other, then you get the same password each time. This is because it uses the current time to seed the pseudo random number generator. The easiest solution is to just use the default method which seeds itself from /dev/urandom if available, and uses a fractional time value otherwise. Signed-off-by: Mark McLoughlin <markmc@redhat.com> | ||||
* | Re-factor the ipa_webgui and ipa_kpasswd instance code | Mark McLoughlin | 2008-01-22 | 6 | -66/+41 |
| | | | | | | | | | The ipa_webgui and ipa_kpasswd instance code is identical and I want to add another similar instance down the line, so re-factor the code into a service.SimpleServiceInstance class. Signed-off-by: Mark McLoughlin <markmc@redhat.com> | ||||
* | Initialise DsInstance.pkcs12_info | Mark McLoughlin | 2008-01-22 | 1 | -0/+1 |
| | | | | | | | | DsInstance.pkcs12_info isn't currently initialised in the constructore so, e.g. __enable_ssl() assumes that create_instance() has initialised it. Signed-off-by: Mark McLoughlin <markmc@redhat.com> | ||||
* | Small refactor of dsinstance.config_dirname() | Mark McLoughlin | 2008-01-22 | 2 | -13/+13 |
| | | | | | | | | | | | | | If, in future, we change the server ID so that it's not derived from the realm name, there's a fair few places that need to be changed. Make that easier by having config_dirname() take the server ID rather than the realm name. That makes sense anyway so we don't have to realm_to_serverid() so much. Signed-off-by: Mark McLoughlin <markmc@redhat.com> | ||||
* | Remove questions from ipaserver.dsinstance | Mark McLoughlin | 2008-01-22 | 2 | -25/+34 |
| | | | | | | | | | | | | | Let's assume that all ipaserver.dsinstance could be used somewhere where asking questions on stdout/stdin is not approriate and re-factor the code to be suitable in those situations too. i.e. make check_existing_installation() return a list of server IDs and make check_ports() return an (unsecure, secure) tuple indication which ports are in use. Signed-off-by: Mark McLoughlin <markmc@redhat.com> | ||||
* | Use consistent naming for tools. | Rob Crittenden | 2008-01-25 | 9 | -17/+17 |
| | | | | Resolves 430243 |