Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Make button test consistent with rest of page | Rob Crittenden | 2008-01-07 | 1 | -1/+1 |
| | |||||
* | Finishe removing previous code to fetch keytabs | Simo Sorce | 2007-12-21 | 2 | -32/+1 |
| | |||||
* | Allow for direct entry of group names when creating delegations. | Rob Crittenden | 2007-12-13 | 2 | -2/+28 |
| | | | | | | | | | This requires a bit of trickery. I use the onblur() javascript function to note when the field is left and store whatever was entered there. Then when the page is submitted if a dn doesn't exist for that field but they did enter something, do a lookup to see if there is a group by that name. | ||||
* | Fix the UI indicators for mandatory fields. | Rob Crittenden | 2007-12-12 | 3 | -4/+12 |
| | | | | | The source and target groups weren't highlighted but the entire block of checkboxes was and it looked absolutely horrible. | ||||
* | Return a proper error code from ipa-webgui so that | Karl MacMillan | 2007-12-12 | 1 | -31/+38 |
| | | | | | the init script can indicate when the service fails to start. | ||||
* | Change from "Common Name" to "Full Name" | Rob Crittenden | 2007-12-11 | 1 | -2/+2 |
| | |||||
* | Prompt user before downloading a keytab that this will create a new secret, | Rob Crittenden | 2007-12-06 | 1 | -1/+9 |
| | | | | breaking any existing keytabs for that principal. | ||||
* | Use more common names for first and last name labels | Rob Crittenden | 2007-12-10 | 1 | -2/+2 |
| | |||||
* | Move the sort arrow to the left of the column title and don't overlap the text | Rob Crittenden | 2007-12-10 | 1 | -2/+2 |
| | |||||
* | Use title case for field labels | Rob Crittenden | 2007-12-10 | 1 | -5/+5 |
| | |||||
* | Fix delegation in the UI and add a missing aci that allows writes. | Rob Crittenden | 2007-12-07 | 1 | -1/+1 |
| | | | | Make ipa-deldelegation more user-friendly. | ||||
* | Add default e-mail domain to the IPA configuration | Rob Crittenden | 2007-12-10 | 5 | -4/+31 |
| | |||||
* | Add principal management templates | Rob Crittenden | 2007-12-10 | 1 | -0/+4 |
| | |||||
* | Install principal edit page files. | Karl MacMillan | 2007-12-08 | 2 | -0/+2 |
| | |||||
* | Add back in some CSS that was removed in the big UI update. | Rob Crittenden | 2007-12-05 | 1 | -0/+17 |
| | | | | This adds back required field colors and colored error and warning msgs. | ||||
* | The uid_hidden field needs to be retained until after validation succeeds | Rob Crittenden | 2007-12-06 | 1 | -6/+6 |
| | | | | | otherwise if it ever fails, uid_hidden will be lost which can cause uid to not be set which cascades into lots of other errors. | ||||
* | Make uid an editable field in the Edit UI so we can do RDN changes | Rob Crittenden | 2007-12-06 | 6 | -17/+43 |
| | | | | | | | Fix group RDN changes Remove a copy/paste error in the group UI update that caused 2 updates Fix variable name so groups don't get user objectclasses Remove color CSS for field backgrounds as they override disabled field display | ||||
* | Add some javascript so we can put focus on the first field of the page. | Rob Crittenden | 2007-12-06 | 4 | -0/+18 |
| | |||||
* | Add 'Edit Policy' button at top of page. | Rob Crittenden | 2007-12-06 | 1 | -0/+3 |
| | |||||
* | Always show the edit link on your own record | Rob Crittenden | 2007-12-06 | 1 | -2/+2 |
| | |||||
* | Add UI for service principal creation and keytab retrieval | Rob Crittenden | 2007-12-05 | 8 | -1/+393 |
| | |||||
* | Phase 1 of allowing admins to set the default object classes for users & groups | Rob Crittenden | 2007-12-04 | 6 | -53/+198 |
| | | | | | | | This adds the UI and does error checking of the selected object classes but it doesn't actually use the values yet. It also generalizes some functions for doing multi-valued fields. | ||||
* | Groups may be iterated over so should be an empty list, not None | Rob Crittenden | 2007-12-05 | 1 | -1/+1 |
| | |||||
* | Convert krbmaxpwdlife and krbminpwdlife from seconds into days and hours | Rob Crittenden | 2007-12-03 | 1 | -2/+2 |
| | |||||
* | Compatibility changes to work on RHEL 5 with python 2.4 | rcritten@redhat.com | 2007-11-30 | 4 | -5/+5 |
| | |||||
* | Require that the default users group exists | Rob Crittenden | 2007-11-30 | 1 | -2/+2 |
| | | | | Fix some copy-paste errors from the password policy update | ||||
* | Change the password expiration message to be more precise. | Rob Crittenden | 2007-11-29 | 2 | -4/+4 |
| | |||||
* | Add ipa-python to maintainer-clean and clean up .pyc files | Rob Crittenden | 2007-11-28 | 13 | -0/+13 |
| | |||||
* | Use same tzinfo as the time parser to avoid TypeError from being thrown | Rob Crittenden | 2007-11-21 | 1 | -1/+1 |
| | |||||
* | Enable group inactivation by using the Class of Service plugin. | Rob Crittenden | 2007-11-20 | 7 | -14/+82 |
| | | | | | | | | | | | | | | | | | | | | This adds 2 new groups: activated and inactivated. If you, or a group you are a member of, is in inactivated then you are too. If you, or a group you are a member of, is in the activated group, then you are too. In a fight between activated and inactivated, activated wins. The DNs for doing this matching is case and white space sensitive. The goal is to never have to actually set nsAccountLock in a user directly but move them between these groups. We need to decide where in the CLI this will happen. Right it is split between ipa-deluser and ipa-usermod. To inactivate groups for now just add the group to inactivate or active. | ||||
* | Implement the password policy UI and finish IPA policy UI | Rob Crittenden | 2007-11-16 | 6 | -86/+328 |
| | | | | | | | | | | | | | | | | | | This includes a default password policy Custom fields are now read from LDAP. The format is a list of dicts with keys: label, field, required. The LDAP-based configuration now specifies: ipaUserSearchFields: uid,givenName,sn,telephoneNumber,ou,title ipaGroupSearchFields: cn,description ipaSearchTimeLimit: 2 ipaSearchRecordsLimit: 0 ipaCustomFields: ipaHomesRootDir: /home ipaDefaultLoginShell: /bin/sh ipaDefaultPrimaryGroup: ipausers ipaMaxUsernameLength: 8 ipaPwdExpAdvNotify: 4 This could use some optimization. | ||||
* | Replace references to Person and People with User and Users | Rob Crittenden | 2007-11-15 | 9 | -25/+25 |
| | |||||
* | Make the group cn an editable field though protected by default. | Rob Crittenden | 2007-11-14 | 3 | -26/+26 |
| | | | | Fix some issues with the multi-value to single-value reversion. | ||||
* | Include multi-value fields on the Add Person page | Rob Crittenden | 2007-11-14 | 7 | -117/+241 |
| | | | | Remove multi-valued cn from groups | ||||
* | Add an editors group. This is used to generally grant access for users | Rob Crittenden | 2007-11-14 | 9 | -47/+52 |
| | | | | | | | | to edit other users (the Edit link won't appear otherwise). Additional delegation is need to grant permission to individual attributes. Update the failed login page to indicate that it is a permission issue. Don't allow access to policy at all for non-admins. By default users can only edit themselves. | ||||
* | Add more fields to the IPA Policy form | Rob Crittenden | 2007-11-13 | 4 | -1/+68 |
| | |||||
* | Remove non-existent files from Makefile targets | Rob Crittenden | 2007-11-13 | 2 | -2/+0 |
| | |||||
* | The e-mail field should not be required. | Rob Crittenden | 2007-11-13 | 1 | -1/+1 |
| | |||||
* | Restrict access to some parts of the UI to those in the admins group | Rob Crittenden | 2007-11-13 | 4 | -14/+41 |
| | |||||
* | Fix editing groups when cn is a single-valued field | Rob Crittenden | 2007-11-09 | 1 | -2/+4 |
| | | | | Fix some error messages that were printing the entire detail message | ||||
* | Require uniqueness in the name/comment field of delegations | Rob Crittenden | 2007-11-09 | 2 | -6/+31 |
| | | | | | | Fix error reporting in the UI to include the detailed message Sort delegations by name when displaying them Update the name field from "Name" to "Delegation Name" | ||||
* | Underline columns on sort results page so users will know it is a link | Rob Crittenden | 2007-11-12 | 1 | -0/+19 |
| | | | | Restore the CSS to display the up/down arrow on sort columns | ||||
* | Initial support for policy editing | Rob Crittenden | 2007-11-12 | 13 | -2/+349 |
| | | | | More work is needed as the values are currently hardcoded and not saved | ||||
* | Enable multi-value field support for some attributes on the edit pages | Rob Crittenden | 2007-11-08 | 10 | -79/+472 |
| | | | | | Better error reporting in the GUI Include a document describing how multi-valued fields work | ||||
* | Update text to reflect new CSS code (sidebar now on right) | Rob Crittenden | 2007-11-06 | 1 | -1/+1 |
| | |||||
* | define Self-Service as editting your own record. | Rob Crittenden | 2007-11-02 | 3 | -4/+14 |
| | | | | | This has the side-effect of removing the realm from Loggin in as. This can be changed by using user_name instead of display_name in master.kid. | ||||
* | Distinguish between active and inactive users on the Find People page. | Rob Crittenden | 2007-11-02 | 3 | -3/+25 |
| | |||||
* | groups come back as a list where the first element is the number of | Rob Crittenden | 2007-11-02 | 1 | -0/+1 |
| | | | | groups returned. Skip that element. | ||||
* | Update the UI look and feel | Rob Crittenden | 2007-11-01 | 33 | -411/+473 |
| | |||||
* | TurboGears log files and log rotation | Rob Crittenden | 2007-11-01 | 2 | -16/+29 |
| | | | | | | | | | | | The error log is rotated weekly on Sunday. 4 backups are saved. The access log is not stored since it would be a duplicate of the Apache logs. It can be enabled if desired. Had to move the call to daemonize() in ipa-webgui so that the fork is done before TurboGears is initialized. Otherwise the log files end up getting closed. |