Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix filter generator in ldapapi. Shouldn't produce invalid filters anymore. | Pavel Zuna | 2009-04-23 | 1 | -6/+12 |
| | |||||
* | Throw AlreadyGroupMember instead of EmptyModlist when trying to re-add ↵ | Pavel Zuna | 2009-04-22 | 1 | -3/+4 |
| | | | | member to a group. | ||||
* | Change ldap2.__handle_errors into the global _handle_errors function. | Pavel Zuna | 2009-04-22 | 1 | -52/+53 |
| | |||||
* | Make it possible to construct partial match filters using make_filter_* ↵ | Pavel Zuna | 2009-04-22 | 1 | -6/+20 |
| | | | | methods. Add missing _sasl_auth variable. | ||||
* | Convert the RA plugin to use nsslib and remove the configure methods | Rob Crittenden | 2009-04-20 | 1 | -134/+39 |
| | |||||
* | Issue DS and Apache server certs during CA installation. | Rob Crittenden | 2009-04-20 | 4 | -102/+355 |
| | | | | | | | Notes: - will create a CA instance (pki-ca) if it doesn't exist - maintains support for a self-signed CA - A signing cert is still not created so Firefox autoconfig still won't work | ||||
* | Remove unwanted white space | Rob Crittenden | 2009-04-20 | 1 | -12/+12 |
| | |||||
* | Finish work replacing the errors module with errors2 | Rob Crittenden | 2009-04-20 | 4 | -95/+153 |
| | | | | | | Once this is committed we can start the process of renaming errors2 as errors. I thought that combinig this into one commit would be more difficult to review. | ||||
* | Renaming the backend ldap plugin to ldapapi.py to prevent module import issues | Rob Crittenden | 2009-04-06 | 1 | -0/+0 |
| | |||||
* | Use full OID for LDAP SYNTAX identification. Don't convert Booleans and ↵ | Pavel Zuna | 2009-04-06 | 1 | -24/+20 |
| | | | | Integers into respective python types as their ranges might not match. Rename module-scope functions. | ||||
* | Add new LDAP backend plugin. | root | 2009-04-03 | 1 | -0/+741 |
| | |||||
* | Implement an installer for the Dogtag certificate system. | Rob Crittenden | 2009-04-03 | 5 | -17/+764 |
| | | | | | | | | | | | | | | | The CA is currently not automatically installed. You have to pass in the --ca flag to install it. What works: - installation - unistallation - cert/ra plugins can issue and retrieve server certs What doesn't work: - self-signed CA is still created and issues Apache and DS certs - dogtag and python-nss not in rpm requires - requires that CS be in the "pre" install state from pkicreate | ||||
* | Renamed remaining plugins still using f_* b_* convention | Jason Gerard DeRose | 2009-04-01 | 1 | -0/+0 |
| | |||||
* | Translate variables on all lines and sort files to be updated | Rob Crittenden | 2009-03-25 | 1 | -3/+5 |
| | | | | | | | | Only the dn and the first line of any entry that was spread across multiple lines were getting passed through the template engine. If we are given a directory to process, sort the files in that directory so the order can be predicted. Some updates rely on others. | ||||
* | DNA is now configured using an update file | Rob Crittenden | 2009-03-25 | 1 | -4/+0 |
| | |||||
* | Allow a search using only the exact search filter | Rob Crittenden | 2009-03-25 | 1 | -4/+10 |
| | |||||
* | Raise a more specific error when a user lacks the proper permissions. | Rob Crittenden | 2009-03-25 | 1 | -1/+5 |
| | | | | | The info part of the message will contain details on what permission failed on what attribute. | ||||
* | Update objectclasses for groups, by default not posix groups. | Rob Crittenden | 2009-02-27 | 1 | -1/+1 |
| | | | | | | This change depends on DS bugs 487574 and 487725. Groups cannot be promoted properly without these fixed. It will fail with an Object Class violation because gidNumber isn't set. | ||||
* | Enforce netgroup uniqueness, allow netgroups to be members of netgroups | Rob Crittenden | 2009-02-27 | 1 | -0/+6 |
| | | | | | When adding an entry, convert a constraint violation of "already exists" into a DuplicateEntry exception so the user gets a useful response | ||||
* | Removed 'Assert False' that was mistakingly left in cert.py; small cleanup ↵ | Jason Gerard DeRose | 2009-02-17 | 1 | -4/+2 |
| | | | | in cert.py and ra.py imports | ||||
* | Implemented more elegant way for entire plugin module to be conditionally ↵ | Jason Gerard DeRose | 2009-02-17 | 1 | -3/+7 |
| | | | | skipped; updated cert.py and ra.py modules to use this | ||||
* | Added env.enable_ra variable and change cert.py and ra.py plugin modules to ↵ | Jason Gerard DeRose | 2009-02-17 | 1 | -1/+2 |
| | | | | register plugins conditionally | ||||
* | Cleaned up ra.revoke_certificate() and ra.take_certificate_off_hold(); added ↵ | Jason Gerard DeRose | 2009-02-17 | 1 | -142/+121 |
| | | | | more tests in integration.py | ||||
* | Some cleanup in ra.request_certificate() | Jason Gerard DeRose | 2009-02-17 | 1 | -44/+41 |
| | |||||
* | More work on ra.check_request_status() and ra.get_certificate() | Jason Gerard DeRose | 2009-02-17 | 1 | -55/+83 |
| | |||||
* | Continued cleanup cert/ra plugins | Jason Gerard DeRose | 2009-02-17 | 1 | -20/+57 |
| | |||||
* | Fixed a few problems in ra.py backend plugin | Jason Gerard DeRose | 2009-02-17 | 1 | -4/+2 |
| | |||||
* | Started cleanup work on ra plugin; fixed problem in api.bootstrap() when ↵ | Jason Gerard DeRose | 2009-02-17 | 1 | -102/+76 |
| | | | | process does not have permision to open log file | ||||
* | Renamed b_ra.py plugin module to ra.py | Jason Gerard DeRose | 2009-02-17 | 1 | -0/+0 |
| | |||||
* | Fix AttributeError on python 2.4 when referencing _ldap.dn | Rob Crittenden | 2009-02-13 | 1 | -0/+1 |
| | |||||
* | Install policy schema | Jakub Hrozek | 2009-02-13 | 1 | -0/+2 |
| | |||||
* | Remove references to detail. This was used by the v1 exception system | Rob Crittenden | 2009-02-11 | 1 | -20/+3 |
| | |||||
* | Incorporate new schema for IPAv2 | Rob Crittenden | 2009-02-11 | 1 | -0/+6 |
| | | | | | | | | Loading this via LDIF is a temporary measure until we can load it online. This requires removing the dNSRecord declarations from 05rfc2247.ldif so a replacement copy is included for now. Also add the netgroups container. | ||||
* | Add make_xxx_dn routines for policy | Jakub Hrozek | 2009-02-10 | 1 | -0/+77 |
| | |||||
* | Fix the default search scope | Jakub Hrozek | 2009-02-10 | 1 | -1/+1 |
| | |||||
* | Rename ipa-python directory to ipapython so it is a real python library | Rob Crittenden | 2009-02-09 | 9 | -16/+16 |
| | | | | | We used to install it as ipa, now installing it as ipapython. The rpm is still ipa-python. | ||||
* | Allow specifying search scope in {ldap,servercore}.search | Jakub Hrozek | 2009-02-09 | 2 | -4/+15 |
| | |||||
* | Remove more unused files and functions, replace ipaerror with new error classes | Rob Crittenden | 2009-02-06 | 4 | -17/+18 |
| | |||||
* | Consolidate all update files into one location | Rob Crittenden | 2009-02-06 | 3 | -84/+0 |
| | |||||
* | Remove some duplicated code that was moved to ipaserver and use it Remove ↵ | Rob Crittenden | 2009-02-06 | 5 | -734/+36 |
| | | | | some unused files | ||||
* | Remove depreciated mod_python_xmlrpc.py and test_client files from ipaserver/ | Jason Gerard DeRose | 2009-02-06 | 2 | -331/+0 |
| | |||||
* | Get merged tree into an installalble state. | Rob Crittenden | 2009-02-03 | 3 | -3/+2 |
| | | | | | | | | I have only tested the all, rpms and *clean targets directly. install may work but the rpm moves a lot of things around for us. The Apache configuration file isn't in its final state but it works with the new mod_python configuration. | ||||
* | Finished small tweaks to get new ipaserver.xmlrpc() mod_python handler working | Jason Gerard DeRose | 2009-02-03 | 3 | -8/+34 |
| | |||||
* | Started work on a much simplified mod_python server | Jason Gerard DeRose | 2009-02-03 | 5 | -84/+69 |
| | |||||
* | Fixed some of the test_xmlrpc unit tests | Jason Gerard DeRose | 2009-02-03 | 2 | -6/+6 |
| | |||||
* | Applied Rob's errors patch | Rob Crittenden | 2009-02-03 | 3 | -23/+32 |
| | |||||
* | Mostly got the test_xmlrpc/ tests working again | Jason Gerard DeRose | 2009-02-03 | 1 | -0/+1 |
| | |||||
* | Removed depreciated ipaserver/context.py module (now use ipalib.request) | Jason Gerard DeRose | 2009-02-03 | 1 | -32/+0 |
| | |||||
* | Got new ldap connection working using Connectible.connect() | Jason Gerard DeRose | 2009-02-03 | 4 | -15/+21 |
| | |||||
* | Started reworking CLI class into cli plugin | Jason Gerard DeRose | 2009-02-03 | 1 | -0/+6 |
| |