summaryrefslogtreecommitdiffstats
path: root/ipa-server/ipaserver/ipaldap.py
Commit message (Collapse)AuthorAgeFilesLines
* DELETEs have to come first, in order for "case change" operations to work.Kevin McCarthy2007-10-081-2/+2
|
* New LDAP connection pool that does lockingRob Crittenden2007-10-081-1/+2
|
* Misc small fixes:Kevin McCarthy2007-09-251-1/+2
| | | | | | | | | | - Members of groups are clickable - Combine name and uid into a single column in find users - Remove license plate from searching - Mailto links on user emails - Add timelimit to finds. This is experimental... - Fix usersearch to only search on objectClass=Person - Change search to use get parameter
* Adds methods to manipulate groups by dns.Kevin McCarthy2007-09-261-1/+1
| | | | | Renamed some of the user_group parameters to be self-evident. Binary wrapping isn't necessary on strings, so removed from xmlrpc calls.
* Enable LDAP debugging using the mod_python Apache configuration directivercritten@redhat.com2007-09-211-2/+3
| | | | PythonOption IPADebug On/Off
* Use ticket forwarding with TurboGears. mod_proxy forwards the principalrcritten@redhat.com2007-09-141-3/+3
| | | | | | name and location of the keytab. In order for this keytab to be usable TurboGears and Apache will need to run as the same user. We will also need to listen only on localhost in TG.
* Add function to allow user's to set/reset their kerberos passwordrcritten@redhat.com2007-09-111-0/+18
| | | | Remove some unused calls to retrieve the current realm
* Enable LDAP SASL authentication using a forwarded kerberos ticketrcritten@redhat.com2007-09-051-16/+39
| | | | | | Handle both SASL auth and proxied authentication Refactor LDAP connection code to be simpler Other small bug fixes
* Add account deactivation checkbox.Kevin McCarthy2007-08-311-2/+6
| | | | Fix genModList to lowercase all keys and use CIDict.
* Change user search to be asynchronous.Kevin McCarthy2007-08-281-0/+38
| | | | | | This way it returns results even if the search times out. The find_users() search now returns a counter as the first result, which is set to -1 if the results are partial.
* Changes for larger data demo.Kevin McCarthy2007-08-281-2/+5
| | | | | | Add fields to search results Put result() call inside try block - it's throwing an exception Trap ADMINLIMIT and SIZELIMIT exceptions
* Implement delete users and groupsrcritten@redhat.com2007-08-281-0/+12
| | | | | | Implement adding a group to a group Some other small fixups Add new cmd-line tool ipa-delgroup
* This patch wraps binary data in an xmlrpclib Binary object. ThisKarl MacMillan2007-08-281-5/+5
| | | | | | | | removes the need for LDIF conversion. It will make TurboGears direct code faster, but should keep xmlrpc about the same speed. The patch also swaps out ldap.cidict for the IPA CIDict class. IPA code should only use the CIDict class now.
* Initial support for Groupsrcritten@redhat.com2007-08-241-0/+3
| | | | | | | | | Create separate object for Users and Groups (using same base class) Check for uniqueness before adding new users and groups Remove user_container from everything but add operations Abstract out a number of functions that are common across users and groups Make sure all strings passed in to be in a filter are checked Add new error message: No modifications specified
* Create ipaerror module.Kevin McCarthy2007-08-221-21/+30
| | | | | | Move LDAPError trapping/conversion into the ipaldap module. Fix xmlrpc layer to encode/decode ipaerrors properly. Also, implement mid-air collision exception for updates.
* Improved modlist generator.Kevin McCarthy2007-08-201-3/+34
|
* Manual merge changes in for the cidict/ipaclient add_user()Kevin McCarthy2007-08-171-1/+1
|
* Implement user inactivationrcritten@redhat.com2007-08-171-2/+22
| | | | | Comment some functions Add attribute argument to get_user()
* Ensure that the Apache server is in forked modercritten@redhat.com2007-08-141-0/+20
| | | | | Add ability to update existing users Try to prevent fetching and setting empty strings
* Basic LDAP connection poolingrcritten@redhat.com2007-08-131-20/+31
| | | | Implement user search
* - Abstracted client class to work directly or over RPCrcritten@redhat.com2007-08-061-19/+58
| | | | | | | | | | | - Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication - Update tools to use kerberos - Add User class
* Fixed broken patches and server spec.Karl MacMillan2007-07-311-7/+7
|
* Final reorginzation to reflect packaging.Karl MacMillan2007-07-311-0/+395