Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | - Better access control, make sure not even admins can read out passwords | Simo Sorce | 2007-12-11 | 3 | -13/+20 |
| | | | | | - Insure admins can't locked out by mistake by inclusion in disabled groups - Fix also minor error in krbinstance.py | ||||
* | Fix minor typo in unauthorized page. | Karl MacMillan | 2007-12-12 | 1 | -1/+1 |
| | |||||
* | Add automatic browser configuration for kerberos SSO using javascript. | Rob Crittenden | 2007-12-12 | 6 | -9/+134 |
| | | | | | | This uses the UniversalPreferencesWrite function to set the browser preferences to allow negotiation and ticket forwarding in the IPA domain. A self-signed certificate is generated to sign the javascript. | ||||
* | User provided certs. | Karl MacMillan | 2007-12-12 | 6 | -21/+224 |
| | |||||
* | Remove radiusinstance from ipa-server-install. | Karl MacMillan | 2007-12-12 | 1 | -1/+0 |
| | |||||
* | Remove radius from main install script and add | Karl MacMillan | 2007-12-12 | 4 | -6/+74 |
| | | | | ipa-radius-install. | ||||
* | Return a proper error code from ipa-webgui so that | Karl MacMillan | 2007-12-12 | 1 | -31/+38 |
| | | | | | the init script can indicate when the service fails to start. | ||||
* | Make the old entry option in update_*, check for empty parameters and | Rob Crittenden | 2007-12-11 | 1 | -58/+222 |
| | | | | fix some problems reported by pychecker. | ||||
* | Change from "Common Name" to "Full Name" | Rob Crittenden | 2007-12-11 | 1 | -2/+2 |
| | |||||
* | Enable searching for multiple things at once | Rob Crittenden | 2007-12-11 | 1 | -1/+1 |
| | |||||
* | merge with upstream | Simo Sorce | 2007-12-11 | 16 | -308/+608 |
|\ | |||||
| * | Make sure we don't keep around old keys. | Simo Sorce | 2007-12-11 | 1 | -0/+5 |
| | | | | | | | | | | Fixes problem changing passwords seen only on servers where re-installations where performed (and old secrets piled up) | ||||
| * | Tie the logging module to 'PythonOption IPADebug' in /etc/httpd/conf.d/ipa.conf | Rob Crittenden | 2007-12-11 | 2 | -10/+10 |
| | | |||||
| * | Prompt user before downloading a keytab that this will create a new secret, | Rob Crittenden | 2007-12-06 | 1 | -1/+9 |
| | | | | | | | | breaking any existing keytabs for that principal. | ||||
| * | Use more common names for first and last name labels | Rob Crittenden | 2007-12-10 | 1 | -2/+2 |
| | | |||||
| * | Import correct httpinstance.py | Karl MacMillan | 2007-12-11 | 1 | -3/+6 |
| | | |||||
| * | Commit corrected certs.py | Karl MacMillan | 2007-12-11 | 1 | -28/+49 |
| | | |||||
| * | Convert the setup of ssl from a shell script to a | Karl MacMillan | 2007-12-06 | 6 | -229/+235 |
| | | | | | | | | | | python module. This is in preparation for user supplied certs. | ||||
| * | Merge. | Karl MacMillan | 2007-12-11 | 4 | -8/+9 |
| |\ | |||||
| * \ | Merge. | Karl MacMillan | 2007-12-11 | 38 | -134/+969 |
| |\ \ | |||||
| * \ \ | merge | John Dennis | 2007-12-04 | 30 | -103/+173 |
| |\ \ \ | |||||
| * | | | | change location of radius data in ldap from | John Dennis | 2007-11-30 | 1 | -10/+4 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cn=radius,cn=services,cn=etc to cn=radius | ||||
| * | | | | fix merge error | John Dennis | 2007-11-29 | 2 | -46/+0 |
| | | | | | |||||
| * | | | | merged radius work with latest mainline tip | John Dennis | 2007-11-28 | 67 | -895/+4866 |
| |\ \ \ \ | |||||
| * | | | | | add command line utilites for radius profiles | John Dennis | 2007-11-26 | 1 | -5/+6 |
| | | | | | | |||||
| * | | | | | clean up radius client command line tools | John Dennis | 2007-11-23 | 1 | -2/+3 |
| | | | | | | |||||
| * | | | | | Add radius profile implementations: | John Dennis | 2007-11-21 | 5 | -88/+155 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | get_radius_profile_by_uid add_radius_profile update_radius_profile delete_radius_profile find_radius_profiles Rewrite command line arg handling, now support pair entry, interactive mode with auto completion, reading pairs from a file, better handling of mandatory values, better help, long arg names now match attribute name in pairs Establish mappings for all attributes and names used in clients and profiles Add notion of containers to radius clients and profiles in LDAP Move common code, variables, constants, and strings into the files radius_client.py, radius_util.py, ipautil.py to eliminate redundant elements which could get out of sync if modified and to provide access to other code which might benefit from using these items in the future. Add utility functions: format_list() parse_key_value_pairs() Add utility class: AttributeValueCompleter Unify attribute usage in radius ldap schema | ||||
| * | | | | | map attrs to friendly name | John Dennis | 2007-11-14 | 1 | -1/+1 |
| | | | | | | |||||
| * | | | | | add ipa-findradiusclient search | John Dennis | 2007-11-14 | 2 | -0/+32 |
| | | | | | | |||||
| * | | | | | radius client modify and delete work | John Dennis | 2007-11-14 | 2 | -5/+27 |
| | | | | | | |||||
| * | | | | | ipa-addradiusclient now working | John Dennis | 2007-11-13 | 5 | -8/+27 |
| | | | | | | |||||
| * | | | | | checkpoint radius client work | John Dennis | 2007-11-13 | 12 | -14/+167 |
| |\ \ \ \ \ | |||||
| * | | | | | | add aci's for radius | John Dennis | 2007-11-10 | 1 | -1/+2 |
| | | | | | | | |||||
| * | | | | | | radius now does kerberos auth, reads client entries from LDAP | John Dennis | 2007-11-10 | 4 | -11/+81 |
| | | | | | | | |||||
| * | | | | | | remove offensive use of rpm | John Dennis | 2007-11-06 | 3 | -9/+25 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | add the radiusprofile to the list of objectclasses used when creating a user | ||||
* | | | | | | | Make sure we don't keep around old keys. | Simo Sorce | 2007-12-11 | 1 | -0/+5 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes problem changing passwords seen only on servers where re-installations where performed (and old secrets piled up) | ||||
* | | | | | | | iMerge with upstream | Simo Sorce | 2007-12-11 | 15 | -16/+52 |
|\ \ \ \ \ \ \ | | |_|_|_|_|/ | |/| | | | | | |||||
| * | | | | | | Move the sort arrow to the left of the column title and don't overlap the text | Rob Crittenden | 2007-12-10 | 1 | -2/+2 |
| | | | | | | | |||||
| * | | | | | | Use title case for field labels | Rob Crittenden | 2007-12-10 | 1 | -5/+5 |
| | | | | | | | |||||
| * | | | | | | Fix delegation in the UI and add a missing aci that allows writes. | Rob Crittenden | 2007-12-07 | 2 | -1/+2 |
| | |_|_|_|/ | |/| | | | | | | | | | | | | | | | | Make ipa-deldelegation more user-friendly. | ||||
| * | | | | | Add default e-mail domain to the IPA configuration | Rob Crittenden | 2007-12-10 | 8 | -6/+37 |
| | | | | | | |||||
| * | | | | | Remove some debugging statements | Rob Crittenden | 2007-12-10 | 1 | -2/+0 |
| | | | | | | |||||
| * | | | | | Add principal management templates | Rob Crittenden | 2007-12-10 | 1 | -0/+4 |
| | | | | | | |||||
| * | | | | | Install principal edit page files. | Karl MacMillan | 2007-12-08 | 2 | -0/+2 |
| | | | | | | |||||
* | | | | | | Minor fix | Simo Sorce | 2007-12-11 | 1 | -1/+1 |
|/ / / / / | |||||
* | | | | | We need the OpenSSL Crypto lib for the DES and MD4 functions to generate NT | Simo Sorce | 2007-12-07 | 2 | -0/+12 |
| | | | | | | | | | | | | | | | | | | | | and LM hashes. | ||||
* | | | | | Fix kdec.length or we may try to double free() or free() uninitiualized data. | Simo Sorce | 2007-12-07 | 1 | -0/+4 |
| | | | | | |||||
* | | | | | merge from upstream | Simo Sorce | 2007-12-07 | 32 | -135/+930 |
|\ \ \ \ \ | |||||
| * | | | | | Add back in some CSS that was removed in the big UI update. | Rob Crittenden | 2007-12-05 | 1 | -0/+17 |
| | | | | | | | | | | | | | | | | | | | | | | | | This adds back required field colors and colored error and warning msgs. | ||||
| * | | | | | Fix message about no spaces in password - spaces work | Karl MacMillan | 2007-12-06 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | fine with ssl setup shell script removed. |