| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
|
|
| |
Also removed facet usage from entity adder dialog.
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3235
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
|
|
| |
Parent items remember last selected child.
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
|
|
| |
WebUI was not rebuilt while rebuilding RPMS.
https://fedorahosted.org/freeipa/ticket/3235
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3235
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3235
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3235
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3235
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3235
|
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3235
https://fedorahosted.org/freeipa/ticket/3236
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3235
|
|
|
|
|
|
|
| |
Replicas with Dogtag pki-ca 10.0.2 CA require access to additional
Dogtag REST API calls. Update pki proxy configuration to allow that.
https://fedorahosted.org/freeipa/ticket/3601
|
|
|
|
|
|
|
|
| |
When connecting to replica, ipa-replica-manage could fail with
unknown error due to connection time out. This patch properly
handles the situation
Fixed in conjunction with https://fedorahosted.org/freeipa/ticket/3524
|
|
|
|
|
|
|
|
|
|
|
| |
In ipa-replica-manage commands, we enforce that hostnames we work
with are resolvable. However, this caused errors while deleting
or disconnecting a ipa / winsync replica, if that replica was down
and authoritative server for itself.
Also adds an --no-lookup flag to disable host existence checks.
https://fedorahosted.org/freeipa/ticket/3524
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3593
|
|
|
|
|
|
|
| |
Ensure that 'ipactl stop' stops the dirsrv instance, even when no other
services are running.
https://fedorahosted.org/freeipa/ticket/3574
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- add missing closing parenthesis in idnsRecord declaration
- remove extra dollar sign from ipaSudoRule declaration
- handle missing/extraneous X-ORIGIN lines in 10-selinuxusermap.update
This does not use the schema updater because the syntax needs to be
fixed in the files themselves, otherwise 389 1.3.2+ will fail
to start.
Older DS versions transparently fix the syntax errors.
The existing ldap-updater directive for ipaSudoRule is fixed
(ldap-updater runs after upgradeconfig).
https://fedorahosted.org/freeipa/ticket/3578
|
|
|
|
|
|
|
| |
dc syntax is changed from Directory String to IA5 String to conform
to RFC 2247.
Part of the work for https://fedorahosted.org/freeipa/ticket/3578
|
|
|
|
|
|
|
|
|
| |
This new freeform host attribute will allow provisioning systems
to add custom tags for host objects which can be later used for
in automember rules or for additional local interpretation.
Design page: http://www.freeipa.org/page/V3/Integration_with_a_provisioning_systems
Ticket: https://fedorahosted.org/freeipa/ticket/3583
|
|
|
|
|
|
| |
This patch exposes user entry gecos field in Web UI.
https://fedorahosted.org/freeipa/ticket/3569
|
|
|
|
|
|
|
|
| |
The 'Host Administrators' privilege was missing two permissions
('Retrieve Certificates from the CA' and 'Revoke Certificate'), causing
the inability to remove a host with a certificate.
https://fedorahosted.org/freeipa/ticket/3585
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3576
|
|
|
|
|
|
|
|
|
|
|
|
| |
Trying to insert nsDS5ReplicatedAttributeListTotal and
nsds5ReplicaStripAttrs to winsync agreements caused upgrade errors.
With this patch, these attributes are skipped for winsync agreements.
Made find_ipa_replication_agreements() in replication.py more
corresponding to find_replication_agreements. It returns list of
entries instead of unicode strings now.
https://fedorahosted.org/freeipa/ticket/3522
|
|
|
|
|
| |
Design: http://freeipa.org/page/V3/Drop_selfsign_functionality
Ticket: https://fedorahosted.org/freeipa/ticket/3494
|
|
|
|
| |
Part of the work for https://fedorahosted.org/freeipa/ticket/3494
|
|
|
|
|
|
|
|
|
| |
This will convert a master with a selfsign CA to a CA-less one in
ipa-upgradeconfig.
The relevant files are left in place and can be used to manage certs
manually.
Part of the work for: https://fedorahosted.org/freeipa/ticket/3494
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3547
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3547
|
| |
|
|
|
|
|
|
|
|
|
| |
We need to add nfs:NONE as a default PAC type only if there's no
other default PAC type for nfs. Adds a update plugin which
determines whether default PAC type for nfs is set and adds
nfs:NONE PAC type accordingly.
https://fedorahosted.org/freeipa/ticket/3555
|
|
|
|
|
|
|
| |
The options take PEM certificates, not PKCS#10.
This corrects both the --help output and the man page.
https://fedorahosted.org/freeipa/ticket/3523
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3528
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
In order to have control over the order that updates are applied
a numbering system was created for the update files. These values
were not actually used.
The updates were sorted by DN length and in most cases this was
adequate for proper function. The exception was with roles where
in some cases a role was added as a member of a permission before
the role itself was added so the memberOf value was never created.
Now updates are computed and applied in blocks of 10.
https://fedorahosted.org/freeipa/ticket/3377
|
|
|
|
|
|
|
|
|
| |
This will allow one to backup and restore the IPA files and data. This
does not cover individual entry restoration.
http://freeipa.org/page/V3/Backup_and_Restore
https://fedorahosted.org/freeipa/ticket/3128
|
|
|
|
|
|
| |
A commonName attribute has no meaning in DNS records.
https://fedorahosted.org/freeipa/ticket/3514
|
|
|
|
| |
Refactoring of radio widget (04325fbb4c64ee4aef6d8c9adf0ff95b8b653101) caused that value is no longer supplied to value_change handler.
|
|
|
|
|
|
| |
When trust is not configured trust-config page is raising an error. Trusts search page won't find anything either -> no use for the pages -> hiding.
https://fedorahosted.org/freeipa/ticket/3333
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3333
|
|
|
|
| |
https://fedorahosted.org/freeipa/ticket/3554
|
|
|
|
|
|
|
|
|
|
|
|
| |
Permission details page was incorrectly evaluated as dirty (update button enabled) right after load when permission type={subtree,filter} and some attrs are set.
Can be reproduced by opening 'Modify Automount maps' permission.
The culprit is that attrs widget is populated and dirty-checked even targets where it doesn't belong.
Fixed by running target_mapping action only for visible targets.
https://fedorahosted.org/freeipa/ticket/3527
|