| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Add can_add() and can_delete() GER helpers | Rob Crittenden | 2009-10-21 | 1 | -0/+37 |
| | | |||||
| * | Add option to not normalize a DN when adding/updating a record. | Rob Crittenden | 2009-10-05 | 1 | -4/+6 |
| | | | | | | The KDC ldap plugin is very picky about the format of DNs. It does not allow spacing between elements so we can't normalize it. | ||||
| * | Fix aci plugin, enhance aci parsing capabilities, add user group support | Rob Crittenden | 2009-09-28 | 1 | -1/+3 |
| | | | | | | | | | | | | | - The aci plugin didn't quite work with the new ldap2 backend. - We already walk through the target part of the ACI syntax so skip that in the regex altogether. This now lets us handle all current ACIs in IPA (some used to be ignored/skipped) - Add support for user groups so one can do v1-style delegation (group A can write attributes x,y,z in group B). It is actually quite a lot more flexible than that but you get the idea) - Improve error messages in the aci library - Add a bit of documentation to the aci plugin | ||||
| * | Only initialize the API once in the installer | Rob Crittenden | 2009-09-28 | 1 | -8/+14 |
| | | | | | | | Make the ldap2 plugin schema loader ignore SERVER_DOWN errors 525303 | ||||
| * | Enrollment for a host in an IPA domain | Rob Crittenden | 2009-09-24 | 1 | -1/+41 |
| | | | | | | | | | | | | | This will create a host service principal and may create a host entry (for admins). A keytab will be generated, by default in /etc/krb5.keytab If no kerberos credentails are available then enrollment over LDAPS is used if a password is provided. This change requires that openldap be used as our C LDAP client. It is much easier to do SSL using openldap than mozldap (no certdb required). Otherwise we'd have to write a slew of extra code to create a temporary cert database, import the CA cert, ... | ||||
| * | Raise more specific error when an Objectclass Violation occurs Fix the ↵ | Rob Crittenden | 2009-09-14 | 1 | -0/+2 |
| | | | | | virtual plugin to work with the new backend | ||||
| * | Make ldap2.add_entry proof to None values, because python-ldap hate'em. | Pavel Zuna | 2009-09-08 | 1 | -0/+4 |
| | | |||||
| * | Introduce a list of attributes for which only MOD_REPLACE operations are ↵ | Pavel Zuna | 2009-08-28 | 1 | -2/+10 |
| | | | | | generated. | ||||
| * | Enable ldapi connections in the management framework. | Rob Crittenden | 2009-08-27 | 1 | -20/+11 |
| | | | | | | | If you don't want to use ldapi then you can remove the ldap_uri setting in /etc/ipa/default.conf. The default for the framework is to use ldap://localhost:389/ | ||||
| * | Clean up some problems discovered with pylint and pychecker | Rob Crittenden | 2009-08-12 | 1 | -4/+0 |
| | | | | | | Much of this is formatting to make pylint happy but it also fixes some real bugs. | ||||
| * | Fix bug in _get_syntax (it was always returning None). | Pavel Zuna | 2009-08-03 | 1 | -15/+7 |
| | | | | | Also prevent a few cases of double processing of arguments. | ||||
| * | Import explode_dn from ldap.functions for backward compatibility with older ↵ | Pavel Zuna | 2009-07-08 | 1 | -2/+4 |
| | | | | | | | version of python-ldap. Fix bug in add_entry_to_group. Resolves 510149 | ||||
| * | Add class variable to indicate whether SSL is required or not. | Rob Crittenden | 2009-07-07 | 1 | -2/+4 |
| | | | | | | Older python-ldap versions will crash if you call ldap.get_option() on a value that has not been set. | ||||
| * | Fix bug in ldap2.modify_password and make adding/removing members slightly ↵ | Pavel Zuna | 2009-07-07 | 1 | -4/+4 |
| | | | | | more efficient. | ||||
| * | Add conversion of attribute name synonyms when generating modlists. | Pavel Zuna | 2009-06-15 | 1 | -0/+28 |
| | | |||||
| * | Add support for incomplete (truncated) search results. | Pavel Zuna | 2009-06-15 | 1 | -14/+29 |
| | | | | | | | | | | | ldap2.find_entries now returns a tuple containing 2 values. First, a list of entries (dn, entry_attrs), Second, the truncated flag. If the truncated flag is True, search results hit a server limitation and are incomplete. This patch also removes decoding of non-string scalar python types into unicode (they are left unchanged). | ||||
| * | Fix bugs in ldap2. | Pavel Zuna | 2009-06-12 | 1 | -18/+8 |
| | | |||||
| * | Fix bug in ldap2.normalize_dn. | Pavel Zuna | 2009-06-10 | 1 | -1/+1 |
| | | | | | DN was always returned as lower-case, sometimes resulting in 2 RDN values with different cases when creating entries. | ||||
| * | Make it easier to search for a single entry by attribute value ↵ | Pavel Zuna | 2009-05-26 | 1 | -6/+19 |
| | | | | | (find_entry_by_attr). Fix minor search filter generation issues. | ||||
| * | Make ldap2 always return attribute names as lowercase. Add Encoder to ldap2 ↵ | Pavel Zuna | 2009-05-22 | 1 | -117/+43 |
| | | | | | base classes and use encode_args/decode_retval where applicable. | ||||
| * | Make search filter generation a bit safer. Minor bug fixes/code improvements. | Pavel Zuna | 2009-04-30 | 1 | -8/+12 |
| | | |||||
| * | Add method to generate DN from attribute directly, without making RDN first. | Pavel Zuna | 2009-04-30 | 1 | -0/+10 |
| | | |||||
| * | Rename errors2.py to errors.py. Modify all affected files. | Pavel Zuna | 2009-04-23 | 1 | -25/+25 |
| | | |||||
| * | Throw AlreadyGroupMember instead of EmptyModlist when trying to re-add ↵ | Pavel Zuna | 2009-04-22 | 1 | -3/+4 |
| | | | | | member to a group. | ||||
| * | Change ldap2.__handle_errors into the global _handle_errors function. | Pavel Zuna | 2009-04-22 | 1 | -52/+53 |
| | | |||||
| * | Make it possible to construct partial match filters using make_filter_* ↵ | Pavel Zuna | 2009-04-22 | 1 | -6/+20 |
| | | | | | methods. Add missing _sasl_auth variable. | ||||
| * | Remove unwanted white space | Rob Crittenden | 2009-04-20 | 1 | -12/+12 |
| | | |||||
| * | Finish work replacing the errors module with errors2 | Rob Crittenden | 2009-04-20 | 1 | -30/+64 |
| | | | | | | | Once this is committed we can start the process of renaming errors2 as errors. I thought that combinig this into one commit would be more difficult to review. | ||||
| * | Use full OID for LDAP SYNTAX identification. Don't convert Booleans and ↵ | Pavel Zuna | 2009-04-06 | 1 | -24/+20 |
| | | | | | Integers into respective python types as their ranges might not match. Rename module-scope functions. | ||||
| * | Add new LDAP backend plugin. | root | 2009-04-03 | 1 | -0/+741 |
 |
index : .git | |
| Unnamed repository; edit this file 'description' to name the repository. | Rob Crittenden |
| summaryrefslogtreecommitdiffstats |