summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| | | * | | | | | | More grayscreens.Adam Young2010-06-104-18/+91
| | | | | | | | | |
| | | * | | | | | | Fixed defaulting if cookie is empty.Adam Young2010-06-101-1/+1
| | | | | | | | | |
| | | * | | | | | | PLace holders for other pages, plus navigation. Remembers last page using a ↵Adam Young2010-06-109-20/+151
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cookie.
| | | * | | | | | | simple templatingAdam Young2010-06-1025-0/+7947
| | | | | | | | | |
| * | | | | | | | | Add javascript file, that creates a JSON object if one doesn't exist already.Pavel Zuna2010-07-201-0/+482
| | |_|_|_|_|_|_|/ | |/| | | | | | |
| * | | | | | | | Use details.js in user.html.Pavel Zuna2010-07-161-238/+131
| | | | | | | | |
| * | | | | | | | Add new functionality to details.js.Pavel Zuna2010-07-161-12/+149
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - new call: ipa_details_update * automatically retrieves values from form elements and updates the entry in LDAP using JSON-RPC - new calls: ipa_insert_first_dd, ipa_insert_other_dd * used internally, but can be used by attribute callbacks as well to easily populate definition lists - extended attribute callbacks: * attribute callbacks now have a third argument 'mode', that is either IPA_DETAILS_UPDATE or IPA_DETAILS_POPULATE * when called with IPA_DETAILS_UPDATE the callback should fill the second argument with the attribute value * when called with IPA_DETAILS_POPULATE the callback should populate its part of the definition list - entry attributes caching: ipa_details_cache * updated after every success response from JSON-RPC
| * | | | | | | | Fix bug in baseldap.py when using addattr without setattr.Pavel Zuna2010-07-161-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When the addattr argument was present, the code was assuming that setattr is present as well, which doesn't have to be the case.
| * | | | | | | | Add IPA Object Details javascript library.Pavel Zuna2010-07-132-1/+214
| | |_|_|_|_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Most of the logic in the library is extracted from my work on the user display/edit page. It provides universal functions that can be used to populate specially crafted definition lists (<dl>) with entry data.
| * | | | | | | Fix "Toggle" link for (un)locking user.Pavel Zuna2010-07-091-6/+6
| | | | | | | |
| * | | | | | | New incremental change for the webUI (display/edit page for users).Pavel Zuna2010-07-093-94/+269
| | | | | | | |
| * | | | | | | Change the way setattr/addattr are processed in baseldap.py.Pavel Zuna2010-07-091-21/+20
| | |_|_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | After this patch setattr and addattr can work togheter. You can use setattr to reset an attribute and use addattr to populate it with new values at the same time. We need this to save a few roundtrips in the webUI.
| * | | | | | Add static webUI directory and content used by the user edit page.Pavel Zuna2010-07-0212-8/+6492
| | | | | | |
| * | | | | | A somewhat scruffy commit of work in progress. but it should install.Pavel Zuna2010-07-017-36/+139
| | |_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | Pushing just to sync with Adam. We might want to break this down into smaller commits or merge with other commits before we go master.
| * | | | | Incremental patch: user display/edit page.Pavel Zuna2010-06-222-50/+105
| | | | | |
| * | | | | Add first attempt at webUI user display/edit page.Pavel Zuna2010-06-223-0/+301
| | | | | |
| * | | | | Add Makefile.am for install/webui.Pavel Zuna2010-06-221-0/+15
| | | | | |
| * | | | | Update install configuration to include new webUI related files.Pavel Zuna2010-06-224-0/+6
| | | | | |
| * | | | | Add reference pages to the webUI, demonstrating search&edit capabilities.Pavel Zuna2010-06-222-0/+247
| | | | | |
| * | | | | Add a small javascript library to make calls over JSON-RPC.Pavel Zuna2010-06-221-0/+98
| | | | | |
| * | | | | Add jQuery to the project.Pavel Zuna2010-06-221-0/+6240
| | | | | |
| * | | | | Change behaviour of the main WSGI script.Pavel Zuna2010-06-221-3/+52
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | /ipa/ui invokes the original ipawebui code (Wehjit) /ipa/X invokes app A in api.Backend.session if there's no such app, it returns X.html from share/ipa/webui or 404 Also supports passing query string information to genshi.
| * | | | | Add methods for exporting Param and LDAPObject classes into JSON.Pavel Zuna2010-06-223-2/+40
| | | | | |
| * | | | | Merge from Jason's repository + initial work on new layout.Pavel Zuna2010-06-2286-6/+1451
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds the first user page I did. Before the second pass of mockups. It's just for reference and won't make it into master.
| * | | | | Fix this test to work from source tree rootRob Crittenden2010-06-221-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It would work if you ran the test from its location in tests/test_ipalib but this isn't the most common method. If you want to run it individually you can do: $ ./make-test tests/test_ipalib/test_text.py
* | | | | | Add container and initial ACIs for entitlement supportwebui-cleanupRob Crittenden2010-07-292-0/+43
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The entitlement entries themselves will be rather simple, consisting of the objectClasses ipaObject and pkiUser. We will just store userCertificate in it. The DN will contain the UUID of the entitlement. ticket #27
* | | | | | Drop our own PKCS#10 ASN.1 decoder and use the one from python-nssRob Crittenden2010-07-2911-481/+158
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch: - bumps up the minimum version of python-nss - will initialize NSS with nodb if a CSR is loaded and it isn't already init'd - will shutdown NSS if initialized in the RPC subsystem so we use right db - updated and added a few more tests Relying more on NSS introduces a bit of a problem. For NSS to work you need to have initialized a database (either a real one or no_db). But once you've initialized one and want to use another you have to close down the first one. I've added some code to nsslib.py to do just that. This could potentially have some bad side-effects at some point, it works ok now.
* | | | | | Add some basic tests for ipalib/x509Rob Crittenden2010-07-291-0/+139
| | | | | |
* | | | | | This patch removes the existing UI functionality, as a prep for adding the ↵Adam Young2010-07-2917-675/+4
| | | | | | | | | | | | | | | | | | | | | | | | Javascript based ui.
* | | | | | 1. Schema cleanupDmitri Pal2010-07-211-13/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The ipaAssociation is the core of different association object. It seems that the service is an exception rather then rule. So it is moved into the object where it belongs. Fixed matching rules and some attribute types. Addressing ticket: https://fedorahosted.org/freeipa/ticket/89 Removed unused password attribute and realigned OIDs.
* | | | | | Become IPA v2 alpha 4 (1.9.0.pre4)alpha_4-1-9-0Rob Crittenden2010-07-151-1/+1
| |_|_|_|/ |/| | | |
* | | | | Fix netgroup plugin to use correct member attribute names.Rob Crittenden2010-07-152-70/+148
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When the netgroup plugin was rebased it ended up using the member attribute for its memberships and not memberuser/memberhost. I also fixed this same attribute problem in the tests and tried to beef them up a little. If nis/schema compat are enabled it will try to compare the generated triplets with a known-good value.
* | | | | Fix nis netgroup configurationRob Crittenden2010-07-151-1/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This was originally configured to pull from the compat area but Nalin thinks that is a bad idea (and it stopped working anyway). This configures the netgroup map to create the triples on its own. Ticket #87
* | | | | Fix ipa-compat-manage and ipa-nis-manageRob Crittenden2010-07-152-54/+100
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Neither of these was working properly, I assume due to changes in the ldap backend. The normalizer now appends the basedn if it isn't included and this was causing havoc with these utilities. After fixing the basics I found a few corner cases that I also addressed: - you can't/shouldn't disable compat if the nis plugin is enabled - we always want to load the nis LDAP update so we get the netgroup config - LDAPupdate.update() returns True/False, not an integer I took some time and fixed up some things pylint complained about too. Ticket #83
* | | | | Use newer API in ipalib/x509 and add missing import.Rob Crittenden2010-07-152-6/+2
| | | | | | | | | | | | | | | | | | | | The import was only used when running the in-tree lite-server
* | | | | Clean up crypto code, take advantage of new nss-python capabilitiesRob Crittenden2010-07-155-338/+147
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch does the following: - drops our in-tree x509v3 parser to use the python-nss one - return more information on certificates - make an API change, renaming cert-get to cert-show - Drop a lot of duplicated code
* | | | | Add API to delete a service principal key, service-disable.Rob Crittenden2010-07-136-7/+149
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I have to do some pretty low-level LDAP work to achieve this. Since we can't read the key using our modlist generator won't work and lots of tricks would be needed to use the LDAPUpdate object in any case. I pulled usercertificate out of the global params and put into each appropriate function because it makes no sense for service-disable. This also adds a new variable, has_keytab, to service/host_show output. This flag tells us whether there is a krbprincipalkey.
* | | | | Add test to ensure that a certificate we issue is actually stored properly.Rob Crittenden2010-07-131-2/+32
| | | | |
* | | | | Include contents of has_output_params in get_output_paramsRob Crittenden2010-07-131-0/+2
| | | | |
* | | | | Add separate var for search attributes and config attribute for search fieldsRob Crittenden2010-07-133-1/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add an optional search_attributes variable in case the attributes you want to display by default aren't what you want to search on. Also link in any cn=ipaconfig attributes that contain a comma-separated list of attributes to search on.
* | | | | Handle errors raised by plugins more gracefully in mod_wsgi.Rob Crittenden2010-07-126-22/+36
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This started as an effort to display a more useful error message in the Apache error log if retrieving the schema failed. I broadened the scope a little to include limiting the output in the Apache error log so errors are easier to find. This adds a new configuration option, startup_traceback. Outside of lite-server.py it is False by default so does not display the traceback that lead to the StandardError being raised. This makes the mod_wsgi error much easier to follow.
* | | | Change expected aci summary from Updated to Modify in test casesRob Crittenden2010-07-061-4/+4
| | | |
* | | | Clean up imports of hbacsvc pluginRob Crittenden2010-07-061-6/+4
| | | | | | | | | | | | | | | | I used pylint to identify a bunch of unnecessary and too-broad imports
* | | | Add support for User-Private GroupsRob Crittenden2010-07-067-19/+119
| |/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This uses a new 389-ds plugin, Managed Entries, to automatically create a group entry when a user is created. The DNA plugin ensures that the group has a gidNumber that matches the users uidNumber. When the user is removed the group is automatically removed as well. If the managed entries plugin is not available or if a specific, separate range for gidNumber is passed in at install time then User-Private Groups will not be configured. The code checking for the Managed Entries plugin may be removed at some point. This is there because this plugin is only available in a 389-ds alpha release currently (1.2.6-a4).
* | | Fix indentation problem causing build breakageRob Crittenden2010-06-241-2/+2
| | |
* | | Include missing file from version plugin and update min version of 389-dsRob Crittenden2010-06-242-2/+57
| | |
* | | Don't try to convert a host's password into a keytab.Rob Crittenden2010-06-241-5/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The migration plugin uses a pre-op function to automatically create kerberos credentials when binding using a password. The problem is that we do a simple bind when doing password-base host enrollment. This was causing krbPasswordExpiration to be set which isn't what we want for hosts. They really shouldn't go through this code at all.
* | | Add maintainer-clean targetRob Crittenden2010-06-241-0/+2
| | |
* | | Replication version checking.Rob Crittenden2010-06-249-0/+297
| | | | | | | | | | | | | | | | | | | | | | | | Whenever we upgrade IPA such that any data incompatibilities might occur then we need to bump the DATA_VERSION value so that data will not replicate to other servers. The idea is that you can do an in-place upgrade of each IPA server and the different versions own't pollute each other with bad data.
* | | Fix aci_mod command. It should handle more complex operations now.Rob Crittenden2010-06-242-68/+265
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The problem was trying to operate directly on the ACI itself. I introduced a new function, _aci_to_kw(), that converts an ACI into a set of keywords. We can take these keywords, like those passed in when an ACI is created, to merge in any changes and then re-create the ACI. I also switched the ACI tests to be declarative and added a lot more cases around the modify operation.
generated by cgit (git 2.34.1) at 2025-09-02 05:10:14 +0000