summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Handle input range properly and catch KeyboardInterrupt and exit gracefullyRob Crittenden2008-02-203-11/+25
| | | | 433496
* Handle a ctrl-C gracefully while getting the new passwordRob Crittenden2008-02-201-13/+18
| | | | Resolves 433053
* memberOf attribute should not be replicatedRob Crittenden2008-02-181-0/+1
| | | | Resolves 430017
* Import internationalization for kid templates patch from Masato TaruishiRob Crittenden2008-02-1910-4/+1602
|
* Initial SELinux policies for ipa_kpasswd and ipa_webguiRob Crittenden2008-02-0811-13/+387
|
* Display the path to the PKCS#12 password file at the end of installationRob Crittenden2008-02-191-0/+1
|
* Fix bug that prevented single-character fieldsRob Crittenden2008-02-112-4/+10
| | | | | | | | | | Fix bug in exception handling where we were sending the wrong thing as detail. Basically we were catching an LDAP error, generating an IPAError from it, catching that, then setting the detail of the 2nd exception to another IPAError rather than the root exception. This caused anything looking at e.detail to crap out Resolves 432136
* Don't create a backup of the PKCS#12 cert on replicasRob Crittenden2008-02-142-12/+17
| | | | | | Name the file created by ipa-replica-prepare after the FQDN of the target Resolves 432904
* Fix bugs in handling of circular groupings in memberOf plug-in.Nathan Kinder2008-02-141-5/+18
| | | | Resolves 432140
* Fix incorrect form labelRob Crittenden2008-02-141-1/+1
| | | | Resolves 432731
* Use ldap_explode_dn instead of ldap_str2dn so we can use python-ldap 2.2.0Rob Crittenden2008-02-111-5/+4
|
* Gracefully handle sys.exit() in python 2.4Rob Crittenden2008-02-111-0/+2
|
* Generate the multi-value entries needed when redirecting to the edit_userRob Crittenden2008-02-081-24/+39
| | | | | | page. This avoids a Nonetype error. Resolves 432106
* Install principalshow.kidRob Crittenden2008-02-081-0/+1
|
* Missed a place to translate the realm name into an instance nameRob Crittenden2008-02-081-1/+3
| | | | Catch SystemExit exceptions otherwise a trace will be shown with python 2.4
* Include some missing man pagesRob Crittenden2008-02-081-0/+3
|
* Include some missing utilities in the MakefileRob Crittenden2008-02-081-0/+2
|
* Always do a chkconfig --add/--del on install/uninstallRob Crittenden2008-02-081-0/+14
| | | | | This makes a from-tree installation work. We also do this in the rpm spec file. Contributed by Pieter D.J. Krul
* Add switch to be able to provide a comma separate list of encryption typesSimo Sorce2008-02-061-25/+76
| | | | | we want to have in the keytab. This superceedes any default enctype.
* Switch 'below' to 'above' to point to the right location of the CA on the pageRob Crittenden2008-02-071-1/+1
|
* Don't set blank values so we don't end up with empty attributesRob Crittenden2008-01-302-70/+91
| | | | Resolves 429895
* Set the license uniformly to GPLv2 only.Rob Crittenden2008-02-04124-92/+1209
|
* Create /var/run/<process>.pid to play nicers with the start scriptsRob Crittenden2008-02-063-5/+36
| | | | Need to start ipa_webgui as root and drop privs in order to write in /var/run
* Fix broken attempt to return 0 on success, 1 on failureRob Crittenden2008-02-061-2/+2
|
* Fix two typosRob Crittenden2008-02-051-2/+2
|
* Add uniqueMember -> member mapping into /etc/ldap.conf on installationSimo Sorce2008-02-051-0/+1
|
* Return 1 on error, 0 on successRob Crittenden2008-02-051-0/+2
|
* Use file to store the current CA serial numberRob Crittenden2008-02-057-43/+162
| | | | | | | No longer create a PKCS#12 file that contains the CA No longer send the entire CA to each replica, generate the SSL certs on master Fix number of bugs in ipa-replica-install and prepare Produce status output during replica creation
* Remove = sign between [set|add|del]attr=attr=value to improve readability.Rob Crittenden2008-02-041-3/+3
|
* Add --usage as a command-line option.Rob Crittenden2008-02-011-0/+2
| | | | Resolves 431283
* Marked with wrong license. IPA is GPLv2.Rob Crittenden2008-01-3112-40/+76
|
* Use orig_user_dict to get krbprincipalname when changing passwords.Rob Crittenden2008-01-311-1/+6
| | | | Add an extra exception handler so we don't return a 500 on errors.
* Ensure that the ipa_webgui error log exists and has correct permissions.Rob Crittenden2008-01-312-2/+16
| | | | Resolves 431089
* Add option to list common attributes for use with --setattr,--addattr,--delattrRob Crittenden2008-01-314-4/+37
|
* Handle the --usage option by actually displaying the usageRob Crittenden2008-01-3115-18/+34
| | | | | | Fix some missing options in --usage Remove a few debugging statements Resolves 430704
* Use proper string validation routine.Rob Crittenden2008-01-311-1/+1
| | | | Resolves 430709
* Use correct variable for domain when restoring a file.Rob Crittenden2008-01-311-1/+1
| | | | Resolves 430724
* Fix discrepencies between built-in help and the man page.Rob Crittenden2008-01-252-15/+19
| | | | Resolves bz 429814
* Enable logging so we can catch startup errors either in the console orRob Crittenden2008-01-301-3/+51
| | | | | | the error log. Add a foreground and debug flag Resolves 430011
* Put user-modifiable files into /etc/ipa/html so they can be marked asRob Crittenden2008-01-302-4/+64
| | | | | config(noreplace). Resolves 430004
* Missed closing quoteRob Crittenden2008-01-291-1/+1
|
* Remove reference to radius that wasn't used and was causing program to fail.Rob Crittenden2008-01-291-1/+1
| | | | Resolves 429853
* Include some additional information when installing IPA.Rob Crittenden2008-01-252-4/+16
| | | | | Remove 8080 as a port that needs to be opened bz 430088
* Fix misspelling of the word indices.Rob Crittenden2008-01-253-4/+4
|
* Fix not so random random passwordsMark McLoughlin2008-01-221-4/+2
| | | | | | | | | | | | | | If you run ipa_generate_password() multiple times, one after the other, then you get the same password each time. This is because it uses the current time to seed the pseudo random number generator. The easiest solution is to just use the default method which seeds itself from /dev/urandom if available, and uses a fractional time value otherwise. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Re-factor the ipa_webgui and ipa_kpasswd instance codeMark McLoughlin2008-01-226-66/+41
| | | | | | | | | The ipa_webgui and ipa_kpasswd instance code is identical and I want to add another similar instance down the line, so re-factor the code into a service.SimpleServiceInstance class. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Initialise DsInstance.pkcs12_infoMark McLoughlin2008-01-221-0/+1
| | | | | | | | DsInstance.pkcs12_info isn't currently initialised in the constructore so, e.g. __enable_ssl() assumes that create_instance() has initialised it. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Small refactor of dsinstance.config_dirname()Mark McLoughlin2008-01-222-13/+13
| | | | | | | | | | | | | If, in future, we change the server ID so that it's not derived from the realm name, there's a fair few places that need to be changed. Make that easier by having config_dirname() take the server ID rather than the realm name. That makes sense anyway so we don't have to realm_to_serverid() so much. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Remove questions from ipaserver.dsinstanceMark McLoughlin2008-01-222-25/+34
| | | | | | | | | | | | | Let's assume that all ipaserver.dsinstance could be used somewhere where asking questions on stdout/stdin is not approriate and re-factor the code to be suitable in those situations too. i.e. make check_existing_installation() return a list of server IDs and make check_ports() return an (unsecure, secure) tuple indication which ports are in use. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Use consistent naming for tools.Rob Crittenden2008-01-259-17/+17
| | | | Resolves 430243