summaryrefslogtreecommitdiffstats
path: root/ipa-server
Commit message (Collapse)AuthorAgeFilesLines
* - Better access control, make sure not even admins can read out passwordsSimo Sorce2007-12-113-13/+20
| | | | | - Insure admins can't locked out by mistake by inclusion in disabled groups - Fix also minor error in krbinstance.py
* Fix minor typo in unauthorized page.Karl MacMillan2007-12-121-1/+1
|
* Add automatic browser configuration for kerberos SSO using javascript.Rob Crittenden2007-12-126-9/+134
| | | | | | This uses the UniversalPreferencesWrite function to set the browser preferences to allow negotiation and ticket forwarding in the IPA domain. A self-signed certificate is generated to sign the javascript.
* User provided certs.Karl MacMillan2007-12-126-21/+224
|
* Remove radiusinstance from ipa-server-install.Karl MacMillan2007-12-121-1/+0
|
* Remove radius from main install script and addKarl MacMillan2007-12-124-6/+74
| | | | ipa-radius-install.
* Return a proper error code from ipa-webgui so thatKarl MacMillan2007-12-121-31/+38
| | | | | the init script can indicate when the service fails to start.
* Make the old entry option in update_*, check for empty parameters andRob Crittenden2007-12-111-58/+222
| | | | fix some problems reported by pychecker.
* Change from "Common Name" to "Full Name"Rob Crittenden2007-12-111-2/+2
|
* Enable searching for multiple things at onceRob Crittenden2007-12-111-1/+1
|
* merge with upstreamSimo Sorce2007-12-1116-308/+608
|\
| * Make sure we don't keep around old keys.Simo Sorce2007-12-111-0/+5
| | | | | | | | | | Fixes problem changing passwords seen only on servers where re-installations where performed (and old secrets piled up)
| * Tie the logging module to 'PythonOption IPADebug' in /etc/httpd/conf.d/ipa.confRob Crittenden2007-12-112-10/+10
| |
| * Prompt user before downloading a keytab that this will create a new secret,Rob Crittenden2007-12-061-1/+9
| | | | | | | | breaking any existing keytabs for that principal.
| * Use more common names for first and last name labelsRob Crittenden2007-12-101-2/+2
| |
| * Import correct httpinstance.pyKarl MacMillan2007-12-111-3/+6
| |
| * Commit corrected certs.pyKarl MacMillan2007-12-111-28/+49
| |
| * Convert the setup of ssl from a shell script to aKarl MacMillan2007-12-066-229/+235
| | | | | | | | | | python module. This is in preparation for user supplied certs.
| * Merge.Karl MacMillan2007-12-114-8/+9
| |\
| * \ Merge.Karl MacMillan2007-12-1138-134/+969
| |\ \
| * \ \ mergeJohn Dennis2007-12-0430-103/+173
| |\ \ \
| * | | | change location of radius data in ldap fromJohn Dennis2007-11-301-10/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cn=radius,cn=services,cn=etc to cn=radius
| * | | | fix merge errorJohn Dennis2007-11-292-46/+0
| | | | |
| * | | | merged radius work with latest mainline tipJohn Dennis2007-11-2867-895/+4866
| |\ \ \ \
| * | | | | add command line utilites for radius profilesJohn Dennis2007-11-261-5/+6
| | | | | |
| * | | | | clean up radius client command line toolsJohn Dennis2007-11-231-2/+3
| | | | | |
| * | | | | Add radius profile implementations:John Dennis2007-11-215-88/+155
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | get_radius_profile_by_uid add_radius_profile update_radius_profile delete_radius_profile find_radius_profiles Rewrite command line arg handling, now support pair entry, interactive mode with auto completion, reading pairs from a file, better handling of mandatory values, better help, long arg names now match attribute name in pairs Establish mappings for all attributes and names used in clients and profiles Add notion of containers to radius clients and profiles in LDAP Move common code, variables, constants, and strings into the files radius_client.py, radius_util.py, ipautil.py to eliminate redundant elements which could get out of sync if modified and to provide access to other code which might benefit from using these items in the future. Add utility functions: format_list() parse_key_value_pairs() Add utility class: AttributeValueCompleter Unify attribute usage in radius ldap schema
| * | | | | map attrs to friendly nameJohn Dennis2007-11-141-1/+1
| | | | | |
| * | | | | add ipa-findradiusclient searchJohn Dennis2007-11-142-0/+32
| | | | | |
| * | | | | radius client modify and delete workJohn Dennis2007-11-142-5/+27
| | | | | |
| * | | | | ipa-addradiusclient now workingJohn Dennis2007-11-135-8/+27
| | | | | |
| * | | | | checkpoint radius client workJohn Dennis2007-11-1312-14/+167
| |\ \ \ \ \
| * | | | | | add aci's for radiusJohn Dennis2007-11-101-1/+2
| | | | | | |
| * | | | | | radius now does kerberos auth, reads client entries from LDAPJohn Dennis2007-11-104-11/+81
| | | | | | |
| * | | | | | remove offensive use of rpmJohn Dennis2007-11-063-9/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | add the radiusprofile to the list of objectclasses used when creating a user
* | | | | | | Make sure we don't keep around old keys.Simo Sorce2007-12-111-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes problem changing passwords seen only on servers where re-installations where performed (and old secrets piled up)
* | | | | | | iMerge with upstreamSimo Sorce2007-12-1115-16/+52
|\ \ \ \ \ \ \ | | |_|_|_|_|/ | |/| | | | |
| * | | | | | Move the sort arrow to the left of the column title and don't overlap the textRob Crittenden2007-12-101-2/+2
| | | | | | |
| * | | | | | Use title case for field labelsRob Crittenden2007-12-101-5/+5
| | | | | | |
| * | | | | | Fix delegation in the UI and add a missing aci that allows writes.Rob Crittenden2007-12-072-1/+2
| | |_|_|_|/ | |/| | | | | | | | | | | | | | | | Make ipa-deldelegation more user-friendly.
| * | | | | Add default e-mail domain to the IPA configurationRob Crittenden2007-12-108-6/+37
| | | | | |
| * | | | | Remove some debugging statementsRob Crittenden2007-12-101-2/+0
| | | | | |
| * | | | | Add principal management templatesRob Crittenden2007-12-101-0/+4
| | | | | |
| * | | | | Install principal edit page files.Karl MacMillan2007-12-082-0/+2
| | | | | |
* | | | | | Minor fixSimo Sorce2007-12-111-1/+1
|/ / / / /
* | | | | We need the OpenSSL Crypto lib for the DES and MD4 functions to generate NTSimo Sorce2007-12-072-0/+12
| | | | | | | | | | | | | | | | | | | | and LM hashes.
* | | | | Fix kdec.length or we may try to double free() or free() uninitiualized data.Simo Sorce2007-12-071-0/+4
| | | | |
* | | | | merge from upstreamSimo Sorce2007-12-0732-135/+930
|\ \ \ \ \
| * | | | | Add back in some CSS that was removed in the big UI update.Rob Crittenden2007-12-051-0/+17
| | | | | | | | | | | | | | | | | | | | | | | | This adds back required field colors and colored error and warning msgs.
| * | | | | Fix message about no spaces in password - spaces workKarl MacMillan2007-12-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | fine with ssl setup shell script removed.