summaryrefslogtreecommitdiffstats
path: root/install
Commit message (Collapse)AuthorAgeFilesLines
* Make all ipatokenTOTP attributes mandatoryNathaniel McCallum2014-02-211-1/+1
| | | | | | | | Originally we made them all optional as a workaround for the lack of SELFDN support in 389DS. However, with the advent of SELFDN, this hack is no longer necessary. This patch updates TOTP to match HOTP in this regard. Reviewed-By: Jan Cholasta <jcholast@redhat.com>
* Add HOTP supportNathaniel McCallum2014-02-213-1/+5
| | | | Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* Add --force option to ipactlAdam Misnyovszki2014-02-202-48/+67
| | | | | | | | | | | | | | | | If an error occurs in the start up sequence in ipactl start/restart, all the services are stopped. Using the --force option prevents stopping of services that have successfully started, just skips the services which can not be started. ipactl status now shows stopped services also, if the directory server is running. With the contribution of Ana Krivokapic https://fedorahosted.org/freeipa/ticket/3509 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* permissions: Use multivalued targetfilterPetr Viktorin2014-02-201-1/+1
| | | | | | | | | | | | | | | | Change the target filter to be multivalued. Make the `type` option on permissions set location and an (objectclass=...) targetfilter, instead of location and target. Make changing or unsetting `type` remove existing (objectclass=...) targetfilters only, and similarly, changing/unsetting `memberof` to remove (memberof=...) only. Update tests Part of the work for: https://fedorahosted.org/freeipa/ticket/4074 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* ipactl can not restart ipa services if current status is stoppedMisnyovszki Adam2014-02-191-2/+12
| | | | | | | | | | | | | | fixed by starting the directory server when restarting if it is not currently running to enable fetching running services later restart didn't check that also added a check, that if the directory server started at the beginning, there is no need to restart it https://fedorahosted.org/freeipa/ticket/4050 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Update ACIs to permit users to add/delete their own tokensNathaniel McCallum2014-02-132-0/+2
| | | | | | https://fedorahosted.org/freeipa/ticket/4087 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
* Add support for managed permissionsPetr Viktorin2014-02-121-2/+2
| | | | | | | | | | | | | | | | This adds support for managed permissions. The attribute list of these is computed from the "default" (modifiable only internally), "allowed", and "excluded" lists. This makes it possible to cleanly merge updated IPA defaults and user changes on upgrades. The default managed permissions are to be added in a future patch. For now they can only be created manually (see test_managed_permissions). Tests included. Part of the work for: https://fedorahosted.org/freeipa/ticket/4033 Design: http://www.freeipa.org/page/V3/Managed_Read_permissions Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Remove sourcehostcategory from the default HBAC rule.Jan Cholasta2014-02-061-1/+0
| | | | | | https://fedorahosted.org/freeipa/ticket/4158 Reviewed-By: Martin Kosek <mkosek@redhat.com>
* Remove working directory for bind-dyndb-ldap plugin.Petr Spacek2014-01-271-4/+1
| | | | | | | | | The working directory will be provided directly by bind-dyndb-ldap package. This partially reverts commit 689382dc833e687d30349b10a8fd7dc740d54d08. https://fedorahosted.org/freeipa/ticket/3967
* Limit memberOf and refInt DS plugins to main IPA suffix.Petr Spacek2014-01-271-1/+12
| | | | | | This drastically improves performance of retro changelog trimming. https://fedorahosted.org/freeipa/ticket/3967
* Convert remaining installer code to LDAPEntry API.Jan Cholasta2014-01-248-35/+37
|
* ipa-replica-install: Move check for existing host before DNS resolution checkPetr Viktorin2014-01-231-15/+24
| | | | | | | | | | | | | | | | | | | The checks for existing host and existing replication agreement set a flag that caused an exit() if any of them failed. Between these checks there was an unrelated check, DNS resolution. If the host and DNS checks both failed, this made it look like the DNS check was the cause of failed install. Especially if the user ignored the DNS check in unattended mode, the output was confusing. Remove the flag and fail directly. Do the replication agreement check first; fixing this with ipa-replica-manage del will also remove the host entry. Also, use the logger for error messages so they appear in the log file as well as on the console. https://fedorahosted.org/freeipa/ticket/3889
* Switch httpd to use default CCACHEMartin Kosek2014-01-221-1/+6
| | | | | | | | | | | | | Stock httpd no longer uses systemd EnvironmentFile option which is making FreeIPA's KRB5CCNAME setting ineffective. This can lead in hard to debug problems during subsequent ipa-server-install's where HTTP may use a stale CCACHE in the default kernel keyring CCACHE. Avoid forcing custom CCACHE and switch to system one, just make sure that it is properly cleaned by kdestroy run as "apache" user during FreeIPA server installation process. https://fedorahosted.org/freeipa/ticket/4084
* Trust domains Web UIPetr Vobornik2014-01-213-4/+76
| | | | | | | | | | | | Add Web UI counterpart of following CLI commands: * trust-fetch-domains Refresh list of the domains associated with the trust * trustdomain-del Remove infromation about the domain associated with the trust. * trustdomain-disable Disable use of IPA resources by the domain of the trust * trustdomain-enable Allow use of IPA resources by the domain of the trust * trustdomain-find Search domains of the trust https://fedorahosted.org/freeipa/ticket/4119
* Use only system fontsPetr Vobornik2014-01-2111-137/+105
| | | | | | | | | | | | | | | | This commit changes how fonts are used. - remove usage of bundled fonts and only system fonts are used instead - by using alias in httpd conf - by using local("Font Name") directive in font-face - removed usage of overpass font - redefined Open Sans font-face declarations. Note: upstream is doing the same change so we will be fine on upgrade. - introduce variable.less for variable definitions and overrides. This file will be very useful when we upgrade to newer RCUE so we will be able to redefine their and bootstrap's variables. Fixes: https://fedorahosted.org/freeipa/ticket/2861
* Use fluid layout in host adder dialog fqdn widgetPetr Vobornik2014-01-213-58/+49
|
* About dialogPetr Vobornik2014-01-214-0/+41
| | | | https://fedorahosted.org/freeipa/ticket/4018
* Increase distance between control buttons and facet-tabsPetr Vobornik2014-01-211-1/+1
| | | | https://fedorahosted.org/freeipa/ticket/3904
* New header spinnerPetr Vobornik2014-01-214-2/+2
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Fix association adder dialog table-body positionPetr Vobornik2014-01-211-6/+2
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Increase margin between facet control buttonsPetr Vobornik2014-01-211-1/+1
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Font awesome glyphs as checkboxes and radiosPetr Vobornik2014-01-212-43/+52
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Use font awesome glyph for dialog close buttonPetr Vobornik2014-01-213-8/+13
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Facet title status iconsPetr Vobornik2014-01-212-14/+19
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Status widgets iconsPetr Vobornik2014-01-214-137/+82
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Replace icons with the ones from Font AwesomePetr Vobornik2014-01-2111-43/+49
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Font Awesome icons in headerPetr Vobornik2014-01-214-9/+21
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Change font-awesome to be compilable by lesscpyPetr Vobornik2014-01-212-2/+6
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Add Font AwesomePetr Vobornik2014-01-2114-0/+968
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Update jQuery to version 2.0.3Petr Vobornik2014-01-213-7/+10
| | | | https://fedorahosted.org/freeipa/ticket/2811
* Remove last usage of jQuery UIPetr Vobornik2014-01-215-27/+105
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Update Dojo to 1.9.1Petr Vobornik2014-01-216-16/+17
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Add style to dialog message areaPetr Vobornik2014-01-211-1/+1
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Fix notification areaPetr Vobornik2014-01-212-6/+40
| | | | https://fedorahosted.org/freeipa/ticket/3904
* username_r in password reset part of unauthorized dialog should be enabled ↵Petr Vobornik2014-01-211-1/+1
| | | | | | as well https://fedorahosted.org/freeipa/ticket/3904
* Do not show section header in unauthorized dialogPetr Vobornik2014-01-211-0/+2
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Focus input on label click in fluid layoutPetr Vobornik2014-01-211-12/+78
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Display required, enabled and error widget states in fluid layoutPetr Vobornik2014-01-213-6/+82
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Dojo event support in widgetsPetr Vobornik2014-01-216-3/+52
| | | | | | | | - widgets has a new base class - Evented it allows raising various events - it's purpose is to replace IPA.observer events in a future - now all widget's IPA.observers events has their own counterpart https://fedorahosted.org/freeipa/ticket/3904
* Action list stylingPetr Vobornik2014-01-211-5/+2
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Combobox stylesPetr Vobornik2014-01-212-8/+21
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Fix search input stylingPetr Vobornik2014-01-211-21/+7
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Fix hbac test stylingPetr Vobornik2014-01-212-4/+26
| | | | https://fedorahosted.org/freeipa/ticket/3904
* CSS: fix footer paddingPetr Vobornik2014-01-211-0/+2
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Fix padding of link buttons and labels in formsPetr Vobornik2014-01-212-12/+25
| | | | https://fedorahosted.org/freeipa/ticket/3904
* CSS: fix network activity indicator position in control panelPetr Vobornik2014-01-211-0/+4
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Fix radios behavior in automount map adder dialogPetr Vobornik2014-01-211-2/+4
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Fix h1 style in dialogPetr Vobornik2014-01-211-0/+5
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Remove left-margin from details-sectionPetr Vobornik2014-01-211-1/+0
| | | | https://fedorahosted.org/freeipa/ticket/3904
* Do not open dialog in a containerPetr Vobornik2014-01-218-28/+27
| | | | https://fedorahosted.org/freeipa/ticket/3904