Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Introduce AlreadyGroupMember exception, raised when a member is attempted to ↵ | Pavel Zuna | 2009-04-22 | 1 | -0/+16 |
| | | | | be re-added to a group. | ||||
* | Add user plugin port with some bugs fixed to the new LDAP backend. | Pavel Zuna | 2009-04-22 | 1 | -0/+405 |
| | |||||
* | Add conditional (env.use_ldap2 is True) modifications required by new LDAP ↵ | Pavel Zuna | 2009-04-22 | 2 | -7/+19 |
| | | | | backend. | ||||
* | Add new env variables. 'container_dns' for DNS plugin, 'use_ldap2' for new ↵ | Pavel Zuna | 2009-04-22 | 1 | -0/+2 |
| | | | | LDAP backend debugging. | ||||
* | Finish work replacing the errors module with errors2 | Rob Crittenden | 2009-04-20 | 6 | -466/+194 |
| | | | | | | Once this is committed we can start the process of renaming errors2 as errors. I thought that combinig this into one commit would be more difficult to review. | ||||
* | Handle GSSAPI exceptions more gracefully | Rob Crittenden | 2009-04-20 | 2 | -6/+107 |
| | |||||
* | Make parentmap a autofill variable and add tests when parentmap is not passed | Rob Crittenden | 2009-04-13 | 1 | -0/+1 |
| | |||||
* | Fill in default values for os and platform | Rob Crittenden | 2009-04-13 | 1 | -0/+18 |
| | |||||
* | Add 'container_hbac' env variable. | root | 2009-04-03 | 1 | -1/+1 |
| | |||||
* | Implement an installer for the Dogtag certificate system. | Rob Crittenden | 2009-04-03 | 1 | -0/+1 |
| | | | | | | | | | | | | | | | The CA is currently not automatically installed. You have to pass in the --ca flag to install it. What works: - installation - unistallation - cert/ra plugins can issue and retrieve server certs What doesn't work: - self-signed CA is still created and issues Apache and DS certs - dogtag and python-nss not in rpm requires - requires that CS be in the "pre" install state from pkicreate | ||||
* | Renamed remaining plugins still using f_* b_* convention | Jason Gerard DeRose | 2009-04-01 | 10 | -0/+0 |
| | |||||
* | Implement a few new targets for ACIs | Rob Crittenden | 2009-03-25 | 1 | -8/+32 |
| | | | | | Also switch to the StrEnum parameter type for some options so we let the framework do the enforcement | ||||
* | Add a 'showall' command so one can pick from a list of tasks to add to a role | Rob Crittenden | 2009-03-25 | 1 | -1/+35 |
| | |||||
* | Use tuples instead of lists for class variables | Rob Crittenden | 2009-03-25 | 3 | -4/+5 |
| | |||||
* | Raise a more specific error when a user lacks the proper permissions. | Rob Crittenden | 2009-03-25 | 2 | -4/+1 |
| | | | | | The info part of the message will contain details on what permission failed on what attribute. | ||||
* | Always print the dn first when printing an entry | Rob Crittenden | 2009-03-25 | 1 | -0/+3 |
| | |||||
* | Add new type List that converts delimited values into a tuple | Rob Crittenden | 2009-03-20 | 2 | -1/+51 |
| | |||||
* | Converted to use new baseclass, remove the one with the f_ prefix | Rob Crittenden | 2009-03-20 | 3 | -1254/+0 |
| | |||||
* | Convert to use the new basegroup framework | Rob Crittenden | 2009-03-20 | 1 | -0/+272 |
| | |||||
* | Convert to use the new basegroup framework | Rob Crittenden | 2009-03-20 | 1 | -0/+156 |
| | |||||
* | Convert to use the new basegroup framework | Rob Crittenden | 2009-03-20 | 1 | -0/+208 |
| | |||||
* | Modify the taskgroup plugin to use the new group baseclass and add tests | Rob Crittenden | 2009-03-20 | 1 | -159/+73 |
| | |||||
* | New plugin to handle role groups | Rob Crittenden | 2009-03-20 | 1 | -0/+85 |
| | | | | | | Role groups will be part of the ACI system. It will let one create broad categories of permissions. Things like: helpdesk, user admin, group admin, whatever. | ||||
* | Add generic base class that will most of the heavy lifting for groups | Rob Crittenden | 2009-03-20 | 1 | -0/+422 |
| | |||||
* | kw is supposed to contain just lower-case values | Rob Crittenden | 2009-03-19 | 1 | -1/+1 |
| | |||||
* | kw is supposed to contain just lower-case values | Rob Crittenden | 2009-03-19 | 1 | -2/+2 |
| | |||||
* | Update the ACI class to be more robust and the beginnings of an ACI plugin | Rob Crittenden | 2009-03-18 | 2 | -87/+602 |
| | | | | | | The ACI plugin is really meant for developers to help manage the ACIs. It may or may not be shipped. If it is it will be disabled by default. It is very much a shoot-in-foot problem waiting to happen. | ||||
* | Fix some minor issues in group and service plugins | Rob Crittenden | 2009-03-17 | 2 | -5/+3 |
| | |||||
* | Add taskgroups plugin | Rob Crittenden | 2009-03-17 | 1 | -0/+228 |
| | | | | Taskgroups are what we grant permission to with the new ACI system. | ||||
* | Fixed Executioner.execute() so that its 'name' argument doesn't conflict ↵ | Jason Gerard DeRose | 2009-03-13 | 1 | -4/+4 |
| | | | | with a param called 'name' (which is a valid param name) | ||||
* | Plugin to handle IPA configuration | Rob Crittenden | 2009-03-04 | 1 | -0/+137 |
| | |||||
* | Set a minimum value for password policy integers | Rob Crittenden | 2009-03-04 | 1 | -6/+11 |
| | |||||
* | Add maxvalue and minvalue kwargs and rules to Int and Float | Rob Crittenden | 2009-03-03 | 1 | -2/+67 |
| | |||||
* | Fix some netgroup issues related to not all groups being posixGroups | Rob Crittenden | 2009-02-27 | 1 | -4/+4 |
| | |||||
* | Update objectclasses for groups, by default not posix groups. | Rob Crittenden | 2009-02-27 | 2 | -11/+67 |
| | | | | | | This change depends on DS bugs 487574 and 487725. Groups cannot be promoted properly without these fixed. It will fail with an Object Class violation because gidNumber isn't set. | ||||
* | Fixed broken autfill logic in cli.prompt_interactively() | Jason Gerard DeRose | 2009-02-27 | 1 | -20/+22 |
| | |||||
* | Enforce netgroup uniqueness, allow netgroups to be members of netgroups | Rob Crittenden | 2009-02-27 | 1 | -5/+27 |
| | | | | | When adding an entry, convert a constraint violation of "already exists" into a DuplicateEntry exception so the user gets a useful response | ||||
* | Added tofiles command and some documentation to the automount plugin | Rob Crittenden | 2009-02-24 | 1 | -5/+133 |
| | |||||
* | Fix multivalue params requiring default to be of type self.type instead of ↵ | Pavel Zuna | 2009-02-23 | 1 | -1/+4 |
| | | | | tuple. | ||||
* | Add ipalib.frontend.Command method to build an entry from params with ↵ | Pavel Zuna | 2009-02-23 | 2 | -5/+20 |
| | | | | | | | | attribute=True. Often plugins need to build LDAP entries from params. This should make things a bit easier. Crud methods (Create, Retrieve, Update, Delete, Search) have attribute=True by default. And it also works for multivalue params. | ||||
* | Use OpenSSL for SSL instead of the built-in python version. | Rob Crittenden | 2009-02-20 | 1 | -3/+127 |
| | |||||
* | raise exceptions in the proper form | Rob Crittenden | 2009-02-20 | 2 | -2/+2 |
| | |||||
* | Utility function to get the local hostname | Rob Crittenden | 2009-02-19 | 1 | -0/+11 |
| | |||||
* | A new exception for requiring root, RootRequired | Rob Crittenden | 2009-02-19 | 1 | -0/+16 |
| | |||||
* | The start of machine join | Rob Crittenden | 2009-02-19 | 1 | -0/+116 |
| | |||||
* | Print out multi-valued values one per-line instead of comman-delimited | Rob Crittenden | 2009-02-19 | 1 | -3/+3 |
| | |||||
* | Add new users as a member of the default group | Rob Crittenden | 2009-02-19 | 1 | -5/+11 |
| | |||||
* | Add --all option to show/find, add default attrs to show, cleanup output | Rob Crittenden | 2009-02-19 | 3 | -20/+32 |
| | |||||
* | Removed 'Assert False' that was mistakingly left in cert.py; small cleanup ↵ | Jason Gerard DeRose | 2009-02-17 | 1 | -4/+2 |
| | | | | in cert.py and ra.py imports | ||||
* | Implemented more elegant way for entire plugin module to be conditionally ↵ | Jason Gerard DeRose | 2009-02-17 | 6 | -79/+133 |
| | | | | skipped; updated cert.py and ra.py modules to use this |