Commit Graph
57 Commits
Author SHA1 Message Date
Kevin McCarthy 0431a536e5 patch queue: add_filters.patch 2007-09-27 16:07:05 -07:00
Kevin McCarthy 572b3e9fdd Make timelimit a parameter to the find methods. 2007-09-27 15:51:26 -07:00
Kevin McCarthy 24c22a2ebc Misc small fixes:
- Members of groups are clickable
- Combine name and uid into a single column in find users
- Remove license plate from searching
- Mailto links on user emails
- Add timelimit to finds.  This is experimental...
- Fix usersearch to only search on objectClass=Person
- Change search to use get parameter
2007-09-25 11:25:48 -07:00
Kevin McCarthy 1725397a53 Adds methods to manipulate groups by dns.
Renamed some of the user_group parameters to be self-evident.
Binary wrapping isn't necessary on strings, so removed from xmlrpc calls.
2007-09-26 15:47:34 -07:00
rcritten@redhat.com f8eda3da3e Fix a couple of XML-RPC functions that were missing the opts argument
Include a kerberized XML-RPC client that will list the XML-RPC API
2007-09-26 16:31:43 -04:00
Kevin McCarthy fa7759684f Adds manager and direct reports to usershow page.
Fixes a bug with the group by member where is wasn't trapping not found errors.
2007-09-25 15:44:49 -07:00
Kevin McCarthy 765279d82b Show the list of groups a user belongs to. 2007-09-25 13:35:43 -07:00
rcritten@redhat.com 0258d01792 Use a different directory for test programs 2007-09-25 09:50:30 -04:00
rcritten@redhat.com 0b65e95b57 Make doing basic testing of Kerberos ticket forwarding and system setup
easier.
2007-09-25 08:37:45 -04:00
rcritten@redhat.com fddae7a8a2 Fix error when using with TurboGears 2007-09-25 08:36:23 -04:00
rcritten@redhat.com 337f0cf853 Install the error web pages 2007-09-24 15:25:44 -04:00
rcritten@redhat.com e606ad5606 Show (hopefully) useful information if the Kerberos connection fails. 2007-09-24 15:20:34 -04:00
rcritten@redhat.com a1196902aa Print the request environment for debugging purposes. 2007-09-24 15:24:44 -04:00
rcritten@redhat.com 2fec56d679 Enable LDAP debugging using the mod_python Apache configuration directive
PythonOption IPADebug On/Off
2007-09-21 14:39:52 -04:00
rcritten@redhat.com e41bb1d6fe Don't fall back on proxy authentication. We don't generate the certificates
anymore and that failure just causes more confusion.
2007-09-24 15:23:50 -04:00
Simo Sorce fbfefe6b0e Merge conflicts between rob and kevin patches 2007-09-20 16:58:54 -04:00
Kevin McCarthy 036cf58042 Handle add/remove failures a little bit better.
Still some refinements that can be done, but at least it shows the failures
now.
2007-09-19 13:43:52 -07:00
Kevin McCarthy f17071533a Implement asynchronous search for groups.
Use the filter generation code to search on multiple fields.
2007-09-19 08:42:34 -07:00
Kevin McCarthy 6b3d1e85da Add client-side search limit parameter for user search.
Limit editgroup user ajax search.
Minor UI cleanup for editgroup.
2007-09-18 14:58:30 -07:00
rcritten@redhat.com b85668579e Use ticket forwarding with TurboGears. mod_proxy forwards the principal
name and location of the keytab. In order for this keytab to be usable
 TurboGears and Apache will need to run as the same user. We will also need
 to listen only on localhost in TG.
2007-09-14 17:19:02 -04:00
rcritten@redhat.com ed6ab17c9c Add function to allow user's to set/reset their kerberos password
Remove some unused calls to retrieve the current realm
2007-09-11 02:48:53 -04:00
rcritten 182fbe3094 Enable mod_proxy to sit in front of TurboGears and pass along the
kerberos principal name
Add an identity an visit class to TurboGears that can handle the user
 without requiring a database
Update the UI to show the user correctly.
Note that this is currently disabled. It is hardcoded to always return the
 principal test@FREEIPA.ORG in proxyprovider.py
It doesn't handle an unauthorized request because that can never happen.
2007-09-10 16:33:01 -04:00
Kevin McCarthy 78bcc22c40 small release fixes:
- Make password not required for add person
- Fix for searching on '*' or ''
2007-09-07 11:07:59 -07:00
rcritten@redhat.com 9b30f46744 Enable LDAP SASL authentication using a forwarded kerberos ticket
Handle both SASL auth and proxied authentication
Refactor LDAP connection code to be simpler
Other small bug fixes
2007-09-05 13:14:23 -04:00
Simo Sorce 584baa7ee2 merge ipa-server/ipaserver/util.py into ipa-python/ipautil.py
this way freeipa-client does not depend on freeipa-server
2007-09-04 16:13:15 -04:00
Simo Sorce 48e70a4bf0 Merge with upstream 2007-09-04 15:40:24 -04:00
Kevin McCarthy 00e299467c Add account deactivation checkbox.
Fix genModList to lowercase all keys and use CIDict.
2007-08-31 10:59:26 -07:00
Simo Sorce de96b9a9da Megre in form upstream 2007-08-30 19:42:39 -04:00
Simo Sorce bebc413366 Finalize DIT, this is waht we are probably going to have in the end,
or something very close to this one
Add default groups and admin user

TODO: need to discuss more in deep uid/gid generation, this will
      probably change as soon as the DNA plugin is activated
2007-08-29 18:07:05 -04:00
Karl MacMillan 6eea6664e0 This patch wraps binary data in an xmlrpclib Binary object. This
removes the need for LDIF conversion.  It will make TurboGears direct
code faster, but should keep xmlrpc about the same speed.

The patch also swaps out ldap.cidict for the IPA CIDict class.  IPA code
should only use the CIDict class now.
-
Kevin McCarthy e31b526c81 Enhanced user search:
- "configurable" fields to search on
- tokenize search words
- prioritize exact matches over partial matches
- split match filter generation into a re-usable function.
Other updates:
- use finally block to return ldap connections
- update web gui to use new get_user methods
2007-08-27 11:30:26 -07:00
Karl MacMillan f437ecfad1 Fix minor error in previous patch. -
rcritten@redhat.com a5b7e3f56b Include any LDAP error strings in XML-RPC Fault exceptions
Put a try/except around attempts to determine user uniqueness
2007-08-27 13:45:28 -04:00
Kevin McCarthy e9bd8dee3b Change user search to be asynchronous.
This way it returns results even if the search times out.
The find_users() search now returns a counter as the first result, which
is set to -1 if the results are partial.
2007-08-28 16:01:07 -07:00
Kevin McCarthy ef2dc5cefa Changes for larger data demo.
Add fields to search results
Put result() call inside try block - it's throwing an exception
Trap ADMINLIMIT and SIZELIMIT exceptions
2007-08-28 09:20:12 -07:00
rcritten@redhat.com eebaa73d3d Implement delete users and groups
Implement adding a group to a group
Some other small fixups
Add new cmd-line tool ipa-delgroup
2007-08-28 13:52:08 -04:00
rcritten@redhat.com 861cda3cb5 Initial support for Groups
Create separate object for Users and Groups (using same base class)
Check for uniqueness before adding new users and groups
Remove user_container from everything but add operations
Abstract out a number of functions that are common across users and groups
Make sure all strings passed in to be in a filter are checked
Add new error message: No modifications specified
2007-08-24 15:42:56 -04:00
rcritten@redhat.com 240a99b6f3 Move add user logic to the server side 2007-08-23 11:57:25 -04:00
rcritten@redhat.com 8879ee173e Handle optional arguments by using the value __NONE__ over XML-RPC.
rpcclient.py must call XML-RPC functions with all arguments.
Removed encode_args and decode_args. They were the source of most of the
  argument pain. Now opts is alwyas appended to the end of the arguments
  so MUST be the last argument in any server-side function (can be None)
Allow the User object to handle unicode data
Small fixes to command-line tools to be friendlier
Broke out get_user() into get_user_by_dn() and get_user_by_uid()
Need to request more than just 'nsAccountLock' attribute when trying to
  see if a user is already marked deleted. If it is blank the record
  coming back is empty. Add 'uid' to the list to guarantee something coming
  back (dn is handled specially)
Added user_container attribute to get_user_* and add_user so the caller
  can specify where in the tree the user will be searched for/added.
Added global default value for user_container
2007-08-23 09:44:00 -04:00
Kevin McCarthy 7691653c0a Create ipaerror module.
Move LDAPError trapping/conversion into the ipaldap module.
Fix xmlrpc layer to encode/decode ipaerrors properly.
Also, implement mid-air collision exception for updates.
2007-08-22 10:30:51 -07:00
Kevin McCarthy a8f302aa9f Move ldap search filter escaping into the funcs.py layer. 2007-08-21 14:26:36 -07:00
Kevin McCarthy f5e30866d1 Escape search input. Search by uid and cn. 2007-08-20 14:23:23 -07:00
Kevin McCarthy 66d3f1e730 Embed origiginal values inside user, and have update_user pass in a user
object.  Based on rcrit's original patch.
Push scalar to list value conversion inside funcs.py.
2007-08-20 10:50:11 -07:00
Kevin McCarthy 5f0f192ae3 change strings to be encoded using value.encode("utf-8").
fix update to set 'cn' instead of 'sn'.
remove str() in funcs.add_user().
2007-08-17 15:32:05 -07:00
Kevin McCarthy a0e2fa00f1 Manual merge changes in for the cidict/ipaclient add_user() 2007-08-17 14:27:54 -07:00
Kevin McCarthy 8a0c3cb945 Change userlist into a quick search form.
Add hack to update cn using givenname+sn (for now).
Change funcs.find_users() to not error if no results.
2007-08-17 10:58:56 -07:00
rcritten@redhat.com 05f6a22110 Implement user inactivation
Comment some functions
Add attribute argument to get_user()
2007-08-17 10:03:33 -04:00
rcritten@redhat.com 5f0f23ee91 Ensure that the Apache server is in forked mode
Add ability to update existing users
Try to prevent fetching and setting empty strings
2007-08-14 17:22:05 -04:00
Simo Sorce 547f501fae Patch from Rob to quick fix an error in the previous one 2007-08-16 18:59:58 -04:00
rcritten@redhat.com cfaa28150b Basic LDAP connection pooling
Implement user search
2007-08-13 16:41:38 -04:00