summaryrefslogtreecommitdiffstats
path: root/ipalib/plugins/hbac.py
Commit message (Collapse)AuthorAgeFilesLines
* Add LDAPObject setting to handle different attributes for RDN and PKEY.Pavel Zuna2010-10-281-24/+2
|
* Fix problem testing for mutual exclusivity in hbac plugin.Rob Crittenden2010-10-181-8/+16
| | | | This should fix the hbac tests.
* If an HBAC category is 'all' don't allow individual objects to be added.Rob Crittenden2010-10-081-0/+44
| | | | | | | | Basically, make 'all' mutually exclusive. This makes debugging lots easier. If say usercat='all' there is no point adding specific users to the rule because it will always apply to everyone. ticket 164
* Add an example for creating an HBAC service and service group.Rob Crittenden2010-09-231-0/+9
| | | | | | | Try to tie in the hbacsvc and hbacsvcgroup plugins better through an example. ticket 159
* Update command documentation based on feedback from docs team.Rob Crittenden2010-08-271-29/+37
| | | | ticket #158
* First pass at per-command documentationRob Crittenden2010-06-221-0/+38
|
* Add groups of services to HBACRob Crittenden2010-05-171-9/+56
| | | | | | | Replace serviceName with memberService so we can assign individual services or groups of services to an HBAC rule. 588574
* Increase the attributes we display by default and fix up some labels.Rob Crittenden2010-05-051-2/+8
|
* Code cleanup: remove unused stuff, take 1.Pavel Zuna2010-03-011-14/+0
|
* Translatable Param.label, Param.docJason Gerard DeRose2010-02-241-10/+15
|
* Add Object.label class attribute, enable in webUIJason Gerard DeRose2010-02-121-0/+3
|
* Add --all to LDAPCreate and make LDAP commands always display default ↵Pavel Zuna2010-01-111-1/+1
| | | | attributes.
* Take 2: Extensible return values and validation; steps toward a single ↵Jason Gerard DeRose2009-12-101-8/+6
| | | | output_for_cli(); enable more webUI stuff
* Rename GeneralizedTime to AccessTime.Pavel Zuna2009-12-011-3/+3
|
* Add {user,host,sourcehost}Category to HBAC and make accessTime multivalue.Pavel Zuna2009-12-011-2/+94
|
* Handle ipaEnabledFlag as bool (TRUE/FALSE) instead of string (enabled/disabled).Pavel Zuna2009-11-181-4/+4
|
* Fix bug in HBAC and netgroup plugin get_primary_key_from_dn methods.Pavel Zuna2009-10-081-1/+4
|
* Add HBAC plugin and introduce GeneralizedTime parameter type.Pavel Zuna2009-10-051-0/+260