summaryrefslogtreecommitdiffstats
path: root/ipa-server
Commit message (Collapse)AuthorAgeFilesLines
...
* Use % format string to fix nbsp problem in userlist.kid (fixes #453779)Jason Gerard DeRose2008-07-301-7/+9
|
* Shift search base for users and groups to "cn=accounts, baseDN"Rob Crittenden2008-07-291-16/+18
| | | | 450552
* Fix encoding issue when manually loading templates for formsRob Crittenden2008-07-296-7/+40
| | | | | | | | | | | | | | | We used to manually load the template files for the edit pages using turbogears.meta.load_kid_template(). Unfortunately this went through the one code path where encoding was completely ignored. It ended up defaulting to sys.getdefaultencoding() which is 'ascii'. So even though most of the templates are loaded as 'utf-8' the few that really mattered weren't. The fix is to call kid.load_template() ourselves and set the encoding of the class we just loaded to either the setting in the app.cfg file or to the normal default value of 'utf-8'. 454076
* Change Title label to Job Title for clarityRob Crittenden2008-07-295-30/+38
| | | | 453780
* NSS 3.12 added a header to the certutil output we need to skipRob Crittenden2008-07-281-0/+3
| | | | 456694
* Don't assume that the Firefox autoconfig files exist.Rob Crittenden2008-07-282-11/+14
| | | | | | | These are created by an object-signing cert and needs to be done after the fact if a server is created with user-supplied PKCS#12 files. 452402
* Specify --mandir to configure to fix building on CentOS 5.2Rob Crittenden2008-07-281-1/+1
| | | | 456672
* Move the self-signed CA serialno file to /var/lib/ipa to adhere to the FHSRob Crittenden2008-07-253-8/+16
| | | | 455064
* Fix a stupidty introduced recently in a fix to a segfault.Simo Sorce2008-07-241-3/+5
|
* Catch correct exception when trying to find the default IPA users group and ↵Rob Crittenden2008-07-231-2/+2
| | | | | | return a more detailed error message. 455092
* Wrap up the raw_input() to user_input() for convenience and uniformity.Martin Nagy2008-07-233-62/+31
|
* Cleaned up comments that were mangled by vimNathan Kinder2008-07-181-7/+7
|
* Re-base memberOf plug-in off of current FDS memberOf plug-in. Resolves: ↵Nathan Kinder2008-07-184-643/+1189
| | | | 452537, 453011, 443241, 439628
* In openvz we found out some interfaces may return a null pointer here.Simo Sorce2008-07-151-0/+4
| | | | | Skip them if no address is provided or we later get a segfault because we dereference a null pointer.
* fix typoSimo Sorce2008-07-151-1/+1
|
* Rework the way SSL certificates are imported from PKCS#12 files.Rob Crittenden2008-07-1411-77/+276
| | | | | | | | Add the ability to provide PKCS#12 files during initial installation Add the ability to provide PKCS#12 files when preparing a replica Correct some issues with ipa-server-certinstall 452402
* Make sure we have the right prototypes when using openldap libsSimo Sorce2008-07-091-0/+1
|
* Admin must be able to add/delete tooSimo Sorce2008-07-091-1/+1
|
* If krbPasswordExpiration or krbLastPwdChange are not present on the entrySimo Sorce2008-07-071-11/+21
| | | | | we might segfault trying a direct strcmp(), check they are not NULL. Also fix a couple of memleaks.
* After the rework of the code that binds to specific interfaces toSimo Sorce2008-07-071-0/+3
| | | | | correctly support multihomed server, we need to add a couple of SELinux lines to the policy file. (lines suggested by Dan Walsh)
* Merge branch 'master' of ssh://rcritten@git.fedorahosted.org/git/freeipaRob Crittenden2008-07-031-1/+1
|\
| * Make sure we listen only on the krb5 port and therefore disable krb4 supportSimo Sorce2008-07-021-1/+1
| |
* | NSS_DIR is already fetched into a variable, use that instead.Rob Crittenden2008-07-031-6/+6
|/ | | | 451098
* Properly convert the realm to a DS instance nameRob Crittenden2008-07-011-1/+1
| | | | 451014
* Ensure correct permissions and file ownership of Apache NSS databaseRob Crittenden2008-07-011-0/+12
| | | | 451098
* Fix some small issues that caused compiler warnings, like uninitialized or ↵Martin Nagy2008-06-303-5/+9
| | | | unused variables or missing krb5 prototypes.
* slapi_pw_find_sv() expects an array, make sure we have a NULL terminatedSimo Sorce2008-06-301-5/+9
| | | | | one to avoid potential segfaults Avoid leaking memory too.
* Very ugly fix to configure to make it actually find aSimo Sorce2008-06-161-0/+4
| | | | correctly installed slapi-plugin.h file
* Must index uidnumber and gidnumber and any attribute that dna plugin is goingSimo Sorce2008-06-121-0/+19
| | | | to generate or that we need to search on.
* Change default.Simo Sorce2008-06-121-2/+4
| | | | | | | By default increment by one but set the maximum value to one million. when installing a replica change values to start from 1 million +1 and cap it to 2 million and so on for any other replica.
* Index the memberof attributeRob Crittenden2008-06-111-0/+8
| | | | 450951
* Fix cut&paste errorSimo Sorce2008-06-111-2/+1
|
* Fix typo in inet typeSimo Sorce2008-06-111-1/+1
|
* ipa-server: fail the build early when DS slapi plugin headers are not available.Günther Deschner2008-06-111-0/+4
| | | | Guenther
* Let DS encode the password, this will allow IPA -> AD passwordSimo Sorce2008-06-111-10/+4
| | | | synchronization to work again.
* Ensure that the realm name is upper-case.Rob Crittenden2008-06-091-3/+4
| | | | 449182
* Ignore empty values when converting a multi-valued form field back to a ↵Rob Crittenden2008-06-091-1/+2
| | | | | | list. This will prevent validation errors when validate.UniqueList() is executed. 449785
* When an LDAP connection fails, display the host one is trying to connect to.Rob Crittenden2008-06-091-2/+4
| | | | 450111
* Add our own SIGTERM handler so we can do clean shutdowns.Rob Crittenden2008-06-091-2/+13
| | | | | | Also fix foreground mode. 450211
* Make it clear which packages are being configured and which aren't.Rob Crittenden2008-06-091-3/+15
| | | | 450175
* Add sbin_t directory read permissionsRob Crittenden2008-06-051-0/+1
| | | | 449760
* Fix typoRob Crittenden2008-06-051-1/+1
| | | | 450077
* Fix import for versionRob Crittenden2008-06-042-2/+2
|
* Add -p/--password option so the DM password can be passed on the command-line.Rob Crittenden2008-06-042-5/+13
| | | | | | The import for version moved from ipaserver to ipa, fix that as well. 449858
* Don't make the search criteria lower-case so one can do case-sensitive ↵Rob Crittenden2008-06-041-1/+0
| | | | | | searches (such as looking for HTTP principals) 449975
* Fix issue of double logging in ipa_error.log.Rob Crittenden2008-06-036-4/+60
| | | | | | | | | | | We open the log in ipa_webgui and this was being inherited by TurboGears which uses the same log so everything was getting logged twice. Shut down the log in ipa_webgui at the last possible moment. This will not catch configuration errors. Add a Not Found template. Only print a traceback on 500 errors.
* Move version.py to the common ipa directory instead of being server-based so ↵Rob Crittenden2008-06-034-30/+4
| | | | | | it can be used by the client tool. Fix the client tool imports to fail more gracefully.
* Don't prompt regarding previous DS installations in unattended mode.Rob Crittenden2008-05-301-2/+4
| | | | 449150
* Fedora DS 1.1.1 exposes a public task api. In order for ipa-1-0 to build ↵Rich Megginson2008-05-301-47/+90
| | | | against this, ipa-memberof.c needs to be able to use the public api or the private one.
* Make check_inst() a standalone function in bindinstance.Rob Crittenden2008-05-302-10/+10
| | | | | | | | | | | | | When an install instance is created that contains a pointer to a sysrestore point it loads in the current configuration when instantiated. If an instance is instantiated but not used then changes may occur to the system state that it is unaware of. So one needs to take care in the order that things are done to avoid losing information. When bind was setup it was overwriting all data in sysrestore.state and leaving just a [named] section. This caused problems at uninstall. 448173