freeipa.git/ipa-server/ipa-gui/ipagui/subcontrollers, branch ipa-1-0

Do uniqueness check on phone numbers and cn entered via the UI.

2008-05-20T18:58:50+00:00

The admin user doesn't have the inetorgperson objectclass so don't have a givenname attribute. The UI is currently hardcoded to require "first name" which renders the admin user uneditable via the UI.

2008-05-13T15:57:56+00:00

This is a hack that will allow admin to be edited, assuming that one doesn't
try to add a firstname field.

440548

Fix the client-side search size limit.

2008-04-30T13:37:27+00:00

I've changed the variable name searchlimit to sizelimit to match the
name in python-ldap (and hopefully therefore be more readable).

The big change was changing the default value from 0 to -1. As 0 we were
never using the value from cn=ipaconfig

python-ldap expects this to be an int type

In the UI sizelimit was hardcoded at 0 for users

439880

Don't let a user change their own uid. Fix some related errors if they try.

2008-04-23T19:33:57+00:00

Don't try to update ipauserobjectclasses or ipagroupobjectclasses

2008-04-03T01:15:49+00:00

since they aren't being displayed anymore. They will just get blanked.

Also add some error handling in ipahelper.fix_incoming_fields()

438256

On the delegation edit screen allow the direct entry of a group name

2008-03-24T21:03:40+00:00

Fix the redirection errors, it was going to back to the Add delegation page

438257

Don't try to add the default group to a user when creating the group.

2008-03-31T19:17:39+00:00

This is done automatically and trying to do so will return an error.

432106

Fix account activation.

2008-03-31T15:36:13+00:00

We do account activation by using a Class of Service based on group
membership. A problem can happen if the entry itself has an nsaccountlock
attribute and you try doing Class of Service work as well because the
local attribute has priority. So try to detect that the entry has a local
nsAccountLock attribute and report an appropriate error.

Don't allow the admins or editors groups to be de-activated.

Return a better error message if account [in]activation fails.

Catch errors when doing group [in]activation.

439230

When getting members let user indicate what type of member they want.

2008-03-27T13:54:41+00:00

The memberOf attribute includes members that are directly in the group
via the "member" attribute and those that are included as a result of
being in a group that is in the group.

The UI needs to be able to distinguish between the two.

438706

Add additional detail to error messages.

2008-03-25T13:48:23+00:00

This runs the risk of showing too much and confusing users but on the other
hand it often includes required information detailing why the error
occurred such as what attribute the user lacks write access too and why
changing a password failed.

438057