summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Several improvements of the lint script.Jan Cholasta2011-05-053-15/+64
| | | | | | | | Report missing python packages, inform about false positives, fail gracefully if pylint isn't installed. Fixed a bug in the ignore list and added few more files/directories to it. ticket 1184
* Run lint during each build.Jan Cholasta2011-05-051-4/+9
| | | | ticket 1180
* Bump version to 2.0.90 to distinguish between 2.0.xRob Crittenden2011-05-032-1/+4
|
* Bad return values for ipa-rmkeytab commandMartin Kosek2011-05-032-1/+9
| | | | | | | | | ipa-rmkeytab returns success even when the realm passed to the program is not found in a keytab. This patch adds an explanatory error message and returns error code 5 - Principal or realm not found. https://fedorahosted.org/freeipa/ticket/694
* NS records not updated by replicaMartin Kosek2011-05-031-1/+8
| | | | | | | | | | | When replica with DNS is installed, NS records for the managed zone are not updated with the replica FQDN. The administrator then has to do it manually to enroll the new DNS server to the zone. This patch also removes the newly created NS records when the replica is removed via ipa-replica-manage command. https://fedorahosted.org/freeipa/ticket/1034
* LDAP Updater may crash IPA installerMartin Kosek2011-05-021-1/+1
| | | | | | | Fix a logging error in ipa-ldap-updater which may cause IPA installer to crash. https://fedorahosted.org/freeipa/ticket/1199
* ipa-client-install uninstall does not work on IPA serverMartin Kosek2011-04-291-1/+1
| | | | | | | When IPA server is being uninstalled, IPA client on-master uninstallation which is called by the script fails. https://fedorahosted.org/freeipa/ticket/1197
* Forbid reinstallation in ipa-client-installMartin Kosek2011-04-292-8/+10
| | | | | | | | | | | | The --force option may be misused to reinstall an existing IPA client. This is not supported and may lead to unexpected errors. When required, the cleanest way to re-install IPA client is to run uninstall and then install again. This patch also includes few cosmetic changes in messages to user to provide more consistent user experience with the script. https://fedorahosted.org/freeipa/ticket/1117
* pwpolicy-mod doesn't accept old attribute valuesMartin Kosek2011-04-291-8/+19
| | | | | | | | | | When the pwpolicy attribute "cospriority" is passed to pwpolicy-mod command and the old value is kept, the command should succeed if there was at least one other attribute changed. Current pwpolicy-mod raises exception in this case which may lead to issues in the WebUI. https://fedorahosted.org/freeipa/ticket/1104
* Prevent uninstalling client on the IPA serverMartin Kosek2011-04-291-0/+6
| | | | | | | | This patch prevents uninstalling IPA client when it is configured as a part of IPA server. ipa-server-installation script is advised for this situation. https://fedorahosted.org/freeipa/ticket/1049
* Handle principal not found errors when converting replication a greementsRob Crittenden2011-04-281-0/+7
| | | | | | | | | | | There are times where one side or the other is missing its peers krbprincipalname when converting from simple to GSSAPI replication. Ticket 1188 should address the cause of this. This patch provides better information and handling should either side be missing. ticket 1044
* Log temporary files in ipa-client-installMartin Kosek2011-04-281-1/+8
| | | | | | | | This patch adds logging of temporary files (Kerberos configuration, nsupdate commands) that may be very useful for debugging purposes. https://fedorahosted.org/freeipa/ticket/1093 https://fedorahosted.org/freeipa/ticket/1094
* Improve Directory Service open port checkerMartin Kosek2011-04-282-6/+17
| | | | | | | | Wait for DS ports to open after _every_ DS service restart. Several restarts were missed by the current open port checker implementation. https://fedorahosted.org/freeipa/ticket/1182
* IPA replica is not started after the rebootMartin Kosek2011-04-281-0/+3
| | | | https://fedorahosted.org/freeipa/ticket/1191
* Entitlement quantity validation.Endi S. Dewata2011-04-277-38/+101
| | | | | | The widget base class has been modified to validate integer value if the type is specified in the metadata. This is used to validate entitlement quantity.
* ipautil: Preserve environment unless explicitly overridden by caller.Simo Sorce2011-04-271-1/+4
| | | | Fixes: https://fedorahosted.org/freeipa/ticket/1193
* remove jquery-cookie library https://fedorahosted.org/freeipa/ticket/989Adam Young2011-04-273-98/+0
|
* action panel to top tabsAdam Young2011-04-2614-624/+605
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | replacing the action panel with the Design for 2.1 Significantly cleaned up implementation of intra-entity navigation requires additional CSS work still need to integrate the search controls onto each page cleaning up interface between entity and facet simplified nested tabs logic Fixed role navigation select default tab from the search widget fixed unit tests and jsl keep tabs area allocated set default tab selected whenever the pkey changes. Removing styling that is changing positions of buttons. The logic for that was for action-panel, but does not translate to entity-header. change from metadata name to label for I18N set selected tab in entity_init. Default title for entities without search and pkeys associations in table now link. remove colon from title when not showing pkey added Managed by facet group. Removed entities that are, for some reason, invalid.
* Ensure that the zonemgr passed to the installer conforms to IA5String.Rob Crittenden2011-04-261-1/+12
| | | | ticket 1164
* Delete the sudoers entry when disabling Schema CompatJr Aquino2011-04-251-0/+1
| | | | https://fedorahosted.org/freeipa/ticket/1160
* Upgrade to jquery 1.5.2 https://fedorahosted.org/freeipa/ticket/768Adam Young2011-04-231-1593/+3727
|
* fix JSL errorAdam Young2011-04-221-1/+1
|
* make use of new user-find columns.Adam Young2011-04-221-2/+1
|
* Modify the default attributes shown in user-find to match the UI design.Rob Crittenden2011-04-223-7/+21
| | | | | | | | | | | | | | | This change means the UI can stop using the --all option and have to retrieve significantly less information from the server. It also speeds up user-find as it doesn't have to calculate membership. This adds a new baseclass parameter, search_display_attributes, which can provide a separate list from default_attributes just for find commands. The UI will need to be changed to switch from using cn to using givenname and sn. ticket 1136
* Convert manager from userid to dn for storage and back for displaying.Rob Crittenden2011-04-222-0/+70
| | | | ticket 1151
* Optimize and dynamically verify group membershipJr Aquino2011-04-221-52/+42
| | | | | | | | | | | Rather than doing full searches for members read each member individually to determine if it is direct or indirect. Also add a fail-safe when calculating indirect membership so removing a member will log enough information for debugging (ticket 1133). https://fedorahosted.org/freeipa/ticket/1139 https://fedorahosted.org/freeipa/ticket/1133
* Wait for memberof task and DS to start before proceeding in installation.Rob Crittenden2011-04-224-0/+34
| | | | | | | | | | | | | This was causing a replica DS instance to crash if the task was not completed when we attempted a shutdown to do a restart. In replication.py we were restarting the DS instance without waiting for the ports to become available. It is unlikely that the dn of the memberof task will change but just in case I noted it in the two places it is referenced. ticket 1188
* Standardized action panel buttons creation.Endi S. Dewata2011-04-215-55/+68
| | | | | Action panel buttons are now created in facet's create_action_panel(). This is to allow a subclass to override and customize the buttons.
* Moved adder dialog box into entity.Endi S. Dewata2011-04-2116-139/+158
| | | | | The adder dialog box definition has been moved from search facet into entity to make it accessible from other facets.
* Need force option in DNS zone adder dialogMartin Kosek2011-04-214-6/+16
| | | | | | | | | | | When adding a new DNS zone in the WebUI, IPA server will verify whether the nameserver is in DNS. Sometimes it is necessary to skip the verification. This patch adds a --force option already available in CLI which can skip this the verification. https://fedorahosted.org/freeipa/ticket/1105
* Remove unwanted trimming in text fieldsMartin Kosek2011-04-212-5/+5
| | | | | | | | | | | UI trims whitespace at the beginning or at the end when user data are being saved. This confuses is_dirty function which incorrectly recognizes given field as modified. This patch fixes this issue for both general text fields and ACI filter field. https://fedorahosted.org/freeipa/ticket/1096
* Fix uninitialized attributes.Jan Cholasta2011-04-215-0/+11
|
* Provide attributelevelrights for the aci components in permission_show.Rob Crittenden2011-04-211-1/+6
| | | | | | | Since the broken-out components are just part of the aci just copy right access rights for aci. ticket 943
* Fix some minor issues uncovered by pylint.Jan Cholasta2011-04-202-2/+3
| | | | | Disable pylint error _ undefined in i18n tests Fix missing os import in ipa-nis-manage
* Remove unused classes.Jan Cholasta2011-04-201-23/+0
| | | | | Removed NSPRConnection and NSPRHTTP from ipapython.nsslib, as they are not used anywhere in FreeIPA.
* Entitlement download.Endi S. Dewata2011-04-186-41/+81
| | | | A Download link has been added to download entitlement certificates.
* Entitlement import.Endi S. Dewata2011-04-186-28/+292
| | | | | | | | | | The entitlement facet will invoke entitle_status to check the entitlement status and show the appropriate buttons. If it's unregistered it will show Register and Import button. If it's registered it will show the Consume button only. If it's imported it will show the Import button only. The Import button will open a dialog box for importing entitlement certificate. Ticket #277
* Always ask members in LDAP*ReverseMember commands.Rob Crittenden2011-04-152-5/+5
| | | | | | | This changes the API but alwaysask is enforced on the client only so doesn't change the wire API so I'm not updating the API version. ticket 1081
* The default groups we create should have ipaUniqueId setRob Crittenden2011-04-155-3/+31
| | | | | | | | This adds a new directive to ipa-ldap-updater: addifnew. This will add a new attribute only if it doesn't exist in the current entry. We can't compare values because the value we are adding is automatically generated. ticket 1177
* Entitlement registration.Endi S. Dewata2011-04-1410-53/+659
| | | | | | The entitlement facet will show buttons according to the entitlement status. If it's unregistered, the facet will show a Register button. If it's registered, the facet will show a Consume button.
* Merged IPA.cmd() into IPA.command().Endi S. Dewata2011-04-1318-429/+572
| | | | | | | The IPA.cmd() has been merged into IPA.command(). All invocations and test cases have been converted. Ticket #988
* Sort entries returned by *-find by the primary key (if any).Rob Crittenden2011-04-133-8/+12
| | | | | | | | Do a server-side sort if there is a primary key. Fix a couple of tests that were failing due to the new sorting. ticket 794
* Fix lint false positives.Jan Cholasta2011-04-1312-15/+23
|
* Add lint script for static code analysis.Jan Cholasta2011-04-132-0/+195
| | | | ticket 867
* Fix double definition of output_for_cli.Jan Cholasta2011-04-131-1/+0
|
* Fix uninitialized variables.Jan Cholasta2011-04-131-0/+7
|
* Suppress --on-master from ipa-client-install command-line and man page.Rob Crittenden2011-04-122-4/+4
| | | | | | | | This option is only used when configuring an IPA client on an IPA server. Describing it on the command-line will only confuse people so don't list it as an option. Ticket 1050
* Fix traceback in ipa-nis-manage.Rob Crittenden2011-04-114-31/+42
| | | | | | | | | | | | | | | | | The root user cannot use ldapi because of the autobind configuration. Fall back to a standard GSSAPI sasl bind if the external bind fails. With --ldapi a regular user may be trying this as well, catch that and report a reasonable error message. This also gives priority to the DM password if it is passed in. Also require the user be root to run the ipa-nis-manage command. We enable/disable and start/stop services which need to be done as root. Add a new option to ipa-ldap-updater to prompt for the DM password. Remove restriction to be run as root except when doing an upgrade. Ticket 1157
* Updated Selenium tests.Endi S. Dewata2011-04-1187-350/+1285
| | | | The Selenium tests have been updated to improve robustness.
* Entitlements.Endi S. Dewata2011-04-1111-2/+351
|
generated by cgit (git 2.34.1) at 2025-05-23 04:08:31 +0000