summaryrefslogtreecommitdiffstats
path: root/ipa-server/ipaserver/httpinstance.py
Commit message (Collapse)AuthorAgeFilesLines
* Fix ownership of the Apache NSS cert and key databases.Rob Crittenden2008-04-301-0/+10
| | | | | The group "apache" needs to have read access to them so they will work in Fedora 9+.
* Move sysrestore to ipa-python so it can be used by client scripts too.Simo Sorce2008-03-271-10/+18
| | | | | | Change backup format so files are all in a single directory (no dir hierarchies) and use an index file so we can save also ownership and permission info for the restore (and eventually other data later on).
* Redirect users when they don't use the FQDN on both SSL and non-SSL portsRob Crittenden2008-02-211-2/+13
| | | | | | | We update the mod_nss configuration (nss.conf) during installation to include ipa-rewrite.conf to handle the SSL side. 433054
* Verify current domain with user during installationRob Crittenden2008-02-151-2/+2
| | | | | | Use that domain when creating replicas Resolves 432066
* Set the license uniformly to GPLv2 only.Rob Crittenden2008-02-041-1/+1
|
* Use file to store the current CA serial numberRob Crittenden2008-02-051-6/+10
| | | | | | | No longer create a PKCS#12 file that contains the CA No longer send the entire CA to each replica, generate the SSL certs on master Fix number of bugs in ipa-replica-install and prepare Produce status output during replica creation
* Re-factor the ipa_webgui and ipa_kpasswd instance codeMark McLoughlin2008-01-221-0/+4
| | | | | | | | | The ipa_webgui and ipa_kpasswd instance code is identical and I want to add another similar instance down the line, so re-factor the code into a service.SimpleServiceInstance class. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Small refactor of dsinstance.config_dirname()Mark McLoughlin2008-01-221-2/+2
| | | | | | | | | | | | | If, in future, we change the server ID so that it's not derived from the realm name, there's a fair few places that need to be changed. Make that easier by having config_dirname() take the server ID rather than the realm name. That makes sense anyway so we don't have to realm_to_serverid() so much. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Add ipa-server-install --uninstallMark McLoughlin2008-01-111-0/+23
| | | | | | | | Add a --uninstall option to ipa-server-install which tries to restore the system to the way it was before ipa-server-install was run using the state backed up through sysrestore.py. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Backup system state in ipa-server-installRob Crittenden2008-01-141-3/+23
| | | | | | | | | | | | | This patch adds a sysrestore module which allows ipa-server-install code to backup any system state so that it can be restored again with e.g. ipa-server-install --uninstall. The idea is that any files ipa-server-install modifies gets backed up to /var/cache/ipa/sysrestore/ while any "meta" state, like whether a service is enabled with chkconfig, is saved to /var/cache/ipa/sysrestore.state. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Use tempfile.mkdtemp() rather than hardcoded tmpdirMark McLoughlin2008-01-111-9/+4
| | | | | | | httpinstance.py currently uses a hardcoded /tmp/ipa temporary directory. Make it use tempfile.mkdtemp() instead. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Refactor keytab creationMark McLoughlin2007-12-181-23/+3
| | | | | | | | | There's a few places where we spawn of kadmin to add/modify principals and create keytabs. Refactor all that code into installutils. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Refactor krbinstance and dsinstance creation stepsMark McLoughlin2007-12-131-22/+11
| | | | | | | | | | | | | | | | | | | | Creation steps are currently done with: self.start_creation(2, "Create foo") self.step("do foo") self.foo() self.step("do bar") self.bar() self.done_creation() This patch refactors that into the much more straightforward: self.step("do foo", self.foo) self.step("do bar", self.bar) self.start_creation("Create foo") Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* More ipautil fixingMark McLoughlin2007-12-131-7/+9
| | | | | | | | Recently, dsinstance and krbinstance was fixed to not import * from ipautil; do the same for the rest of ipaserver. Signed-off-by: Mark McLoughlin <markmc@redhat.com>
* Add automatic browser configuration for kerberos SSO using javascript.Rob Crittenden2007-12-121-2/+32
| | | | | | This uses the UniversalPreferencesWrite function to set the browser preferences to allow negotiation and ticket forwarding in the IPA domain. A self-signed certificate is generated to sign the javascript.
* User provided certs.Karl MacMillan2007-12-121-16/+2
|
* Import correct httpinstance.pyKarl MacMillan2007-12-111-3/+6
|
* Convert the setup of ssl from a shell script to aKarl MacMillan2007-12-061-0/+10
| | | | | python module. This is in preparation for user supplied certs.
* Compatibility changes to work on RHEL 5 with python 2.4rcritten@redhat.com2007-11-301-1/+1
|
* Check for existance of of the target file in update_file. It used to silentlyRob Crittenden2007-11-151-1/+6
| | | | fail if the file it was to update didn't exist.
* Forgot to include FQDN in the substitition listRob Crittenden2007-11-131-1/+1
|
* Introduce service base class and clean up ipa-server-installKarl MacMillan2007-11-051-19/+83
| | | | | | | | | | | | 1) Add a base class for all of the instance objects. 2) Normalize usage of logging. 3) General cleanups of ipa-server-install. 4) Make better use of httpinstance. 5) Add webguiinstance. 6) Improve progress reporting during installation. Works Here (TM), but it would be nice to get someone else to test since this moves code around a bit.
* First step in enabling SSL in the IPA web serverRob Crittenden2007-10-151-0/+76
generated by cgit (git 2.34.1) at 2025-09-06 01:22:35 +0000