public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,502 Commits 9 Branches 0 Tags
476aacd69963dd94de3af3d640fca783d77b4eb8
Commit Graph
5502 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jason Gerard DeRose 2357360e2a Command.params are now sorted the same way as Object.params (make user-add prompt for first, last before login) 2008-10-13 21:53:03 -06:00
Jason Gerard DeRose b6dcd183a6 CLI now maps Param.cli_name to Param.name 2008-10-13 20:31:10 -06:00
Jason Gerard DeRose 8674086b85 Param now takes cli_name kwarg that sets Param.cli_name attribute 2008-10-13 17:24:23 -06:00
Jason Gerard DeRose 367143adf3 Merge branch 'master' of git://git.engineering.redhat.com/users/rcritten/freeipa2 2008-10-13 15:39:14 -06:00
Rob Crittenden 6d2705b363 Implement user lock and unlock 2008-10-13 17:17:00 -04:00
Rob Crittenden 19465318ce Fix up a comment 2008-10-13 15:17:31 -04:00
Rob Crittenden fc9f057792 Initial implementation of password policy 2008-10-13 15:01:08 -04:00
Rob Crittenden 0ebaad6462 Do a more specific search for the user 2008-10-13 14:59:48 -04:00
Rob Crittenden 361a379ff9 We should be registering Commands, not Methods 2008-10-13 14:58:31 -04:00
Rob Crittenden 399b3794fb Raise the right exceptions 2008-10-13 14:58:08 -04:00
Rich Megginson f02d1429ca add update to fix the index for the winsync attributes 2008-10-13 14:09:15 -04:00
Rich Megginson 5c56c43693 do not store the OUs from the AD DN in the IPA user entry when flattening 2008-10-13 14:09:14 -04:00
Rich Megginson 9f18858e58 add --win-subtree argument to ipa-replica-manage 2008-10-13 14:09:13 -04:00
Rich Megginson 0988e1c53c Do not depend on MMR plugin - start before MMR plugin 
The ipa-winsync plugin needs to start before the MMR plugin, so that it
can register the API functions.  Also, the slapi-nis schema compat
plugin creates an entry that looks exactly like the default IPA group
gidNumber entry, so I added an extra (objectclass=groupOfNames) to the
filter since the slapi-nis entry doesn't have that.
 2008-10-13 14:09:13 -04:00
Rich Megginson d3637dde7c Just add eq,pres to the existing indices 
There are already indexes created for ntUniqueID and ntUserDomainID by default
We just need to make sure they are indexed for equality and presence
 2008-10-13 14:09:12 -04:00
Rich Megginson 38154073a8 Don't try to conditionally stop the server - it doesn't seem to work 
Just call stop() - if it's not already running, no big deal
 2008-10-13 14:09:11 -04:00
Rich Megginson 28195610f6 Add more winsync support to cli 
The ipa-replica-manage list, init, and synch commands do not work for winsync
agreements.  This patch adds that support and some additional verbose logging.

The synch_master did not work correctly.  The way it should work is to set
the replication schedule to some bogus value, then reset it back to its
original setting.  This will force replication to take place immediately.
 2008-10-13 14:09:10 -04:00
Rich Megginson 068ed81195 Do not add enabled user to activated group - clean up parse_acct_disable 
If a user needs to be enabled, just delete the user from the inactivated group,
but do not add to the activated group.  If a user is in no group, the user is
active by default.  IPA uses the activated group for override purposes.

parse_acct_disable is only used when the config changes, but I cleaned it
up anyway to make the code clearer.
 2008-10-13 14:09:10 -04:00
Rich Megginson 0e346ff6fb add winsync options to ipa-replica-manage man page 2008-10-13 14:09:09 -04:00
Rich Megginson 69180c2dcc Adds winsync account disable and force sync 2008-10-13 14:09:08 -04:00
Rich Megginson e8bebebc23 fix issues brought up by initial review of ipa winsync enhancements 2008-10-13 14:09:08 -04:00
Rich Megginson be5e783f72 add --no-host-dns option to ipa-server-install - allows specifying a hostname that might actually exist but you do not want to even attempt to resolve it via DNS 2008-10-13 14:09:07 -04:00
Rich Megginson 5a5bfa2c70 Added support to IPA server install to install the winsync plugin configuration entry Added support to ipa-replica-manage to add winsync agreements. I mostly used the existing code for setting up replication agreements since replication and winsync are quite similar in their configuration. I just had to add some extra attributes to the sync agreement configuration. The tricky part was importing the Windows CA cert. 2008-10-13 14:09:07 -04:00
Rich Megginson 2a2bc851bd The library name is libipa_winsync not libipa-winsync 2008-10-13 14:09:06 -04:00
Rich Megginson 434f9aca6a Use dirsrv/file.h with includes by default - only use the other style if we are debugging within the directory server 2008-10-13 14:09:05 -04:00
Rich Megginson 4bc89c427e fix some memory leaks 2008-10-13 14:09:04 -04:00
Rich Megginson c80ecc8c2a Added ipa-winsync-config.c - this handles dynamic configuration via the DSE callbacks, and gets default values from various configuration entries in the IPA tree 2008-10-13 14:09:04 -04:00
Rich Megginson 61b5a95dd1 Added support for posixAccount -lookup attribute containing the homeDirectory prefix and use that to construct the homeDirectory attribute -lookup attribute containing the default gidNumber and use that to add the gidNumber to new users -construct the gecos field from the cn attribute 2008-10-13 14:09:03 -04:00
Rich Megginson 6454956d51 Added the new IPA WinSync Plug-in Work done so far * added the new plugin to makefiles, spec file * added stubs for the api, including begin update, end update, and destroy callbacks * added config code to allow dynamic dse config changes and auto-discovery of realm and new user objectclass list 2008-10-13 14:09:03 -04:00
Rich Megginson 0951496593 Initial addition of ipa-winsync plugin 2008-10-13 14:09:02 -04:00
Jason Gerard DeRose 225e2b0c93 Added CrudBackend abstract class defining generic CRUD API 2008-10-13 09:50:29 -06:00
Rob Crittenden 39ad5ccffa Stub out delegations 
Add ACI class
 2008-10-11 00:49:05 -04:00
Rob Crittenden 250734aea5 Fix syntax error 2008-10-10 14:38:09 -04:00
Rob Crittenden 75bad44c27 Enable the verbose flag to pass thru xmlrpc 2008-10-10 05:23:00 -04:00
Rob Crittenden 42cdca3e83 Use new options handler 2008-10-10 03:40:52 -04:00
Rob Crittenden dbe49423ab Start service principal plugin 2008-10-10 03:36:57 -04:00
Rob Crittenden 5d2a99925d Implement group-mod 2008-10-10 03:36:57 -04:00
Rob Crittenden 8a97b3e8a8 Implement group-del 2008-10-10 03:36:57 -04:00
Rob Crittenden 5c07d97865 Slight change to how exceptions are handled 2008-10-10 03:36:57 -04:00
Rob Crittenden 83bb41faeb Mechanism to convert from xmlrpclib.Fault to an IPAError exception 
Include slew of new exceptions, not all of which are used yet
 2008-10-10 03:36:56 -04:00
Rob Crittenden 672c07566d Implement user-del 
rename is_user_unique() to user_exists()
 2008-10-10 03:36:56 -04:00
Rob Crittenden 3e505cc908 Remove some dead code 2008-10-10 03:36:56 -04:00
Jason Gerard DeRose 87390665f6 crud.Add.get_args() and get_options() now yield static values in takes_args, takes_options after the automagic ones 2008-10-09 11:33:35 -06:00
Jason Gerard DeRose 887016e69d Base Command.execute() method now raises NotImplementedError; updated unit tests 2008-10-08 18:18:13 -06:00
Jason Gerard DeRose b7fe92f44f Reorganized Command methods so it is easier to understand and added lots of docstrings 2008-10-08 18:01:22 -06:00
Martin Nagy 83fa46a706 ipa-pwpolicy: correctly compare minlife and maxlife Fixes: 463849 2008-10-08 16:44:51 +02:00
Martin Nagy 574ca532b5 Fix a typo in ipa-modgroup causing it to fail Fixes: 463567 2008-10-08 16:44:51 +02:00
Jason Gerard DeRose bc9edbfdf6 Changed sub-package docstrings in tests/ to make consintent with other packages 2008-10-08 01:30:52 -06:00
Jason Gerard DeRose b246dbabcf PEP 257: cleaned up docstrings in test_ipa_types.py 2008-10-08 01:24:39 -06:00
Jason Gerard DeRose 048678fc77 Fixed two PEP 257 violations I missed in test_plugable.py 2008-10-08 01:00:44 -06:00