public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
716 Commits 9 Branches 0 Tags
546155c3af5fd034369f38be97f8c4e1fa41aede
Commit Graph
193 Commits
Author SHA1 Message Date
Rob Crittenden 2e46645ad5 Remove some duplicate id's that are not valid HTML 
Remove the footer. It was a leftover from the original TurboGears-generated
project that Kevin McCarthy had modified.
 2008-03-05 13:36:39 -05:00
Rob Crittenden 74c29b1bf6 Remove the ability for the average user to add/delete groups on user edit page 
If they have any delegations at all (are in editors group) they will have
these links.

433387
 2008-03-04 14:27:06 -05:00
Rob Crittenden 999bd4fb1e In the UI we don't want to display Edit links unless someone can actually 
edit things. We use the 'editors' group for this. This group itself grants
no permission other than displaying certain things in the UI.

In order to be in the editors group a user must be a member of a group that
is the source group in a delegation. The memberof plugin will do all the
hard work to be sure that a user's memberof contains cn=editors if they
are in a delegated group.

432874
 2008-02-27 15:14:52 -05:00
Rob Crittenden d6d12e9dc5 Require that service principals resolve to a DNS A record. 
There is a --force option for those who know what they are doing.

433483
 2008-02-26 13:51:56 -05:00
Rob Crittenden 66df51c754 Use the label "Full Name" for "Common Name" 
433525
 2008-02-26 09:33:39 -05:00
Rob Crittenden b9c7056a2a Remove HTML from Javascript error message and fix up language to be clearer 
433374
 2008-02-22 09:36:12 -05:00
Rob Crittenden 3ede5e42a5 Don't clear out the uid from the session until the record has been updated. 2008-02-20 16:57:01 -05:00
Rob Crittenden 4c588b3d5f Don't let a regular user edit their own active status or manager 
433384
 2008-02-20 23:24:39 -05:00
Rob Crittenden 4bf136d95c Use basestring class when testing to see if an object is a string to support 
both Unicode and byte strings.

433651
 2008-02-21 11:09:53 -05:00
Rob Crittenden 75ad48272a IE 6 doesn't support transparent PNG 
Remove stray character and a debug line from the CSS

429984
 2008-02-20 17:17:21 -05:00
Rob Crittenden 936b84f569 Include and use policy icon in the UI 
430954
 2008-02-20 10:53:31 -05:00
Rob Crittenden b5272bd8e0 Objects used by new CSS layout. 2008-02-20 10:45:00 -05:00
Rob Crittenden 7e5f1514b2 Only show Delete button for admins, editors and don't let user delete them self 
Resolves 433382
 2008-02-18 22:41:28 -05:00
Rob Crittenden c47248c5d8 Update of CSS from Máirín Duffy including some per-object images 2008-02-19 16:43:32 -05:00
Rob Crittenden 65960a2e58 Use the proper access methods in IPA policy subcontroller. 
Resolves 433062
 2008-02-18 17:41:58 -05:00
Rob Crittenden 3ad8a2bd1b Import internationalization for kid templates patch from Masato Taruishi 2008-02-19 22:45:11 -05:00
Rob Crittenden 1aa8729644 Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 11:09:06 -05:00
Rob Crittenden 1380d9d9de Fix incorrect form label 
Resolves 432731
 2008-02-14 16:04:53 -08:00
Rob Crittenden 5f86f5a5fd Generate the multi-value entries needed when redirecting to the edit_user 
page. This avoids a Nonetype error.

Resolves 432106
 2008-02-08 17:34:23 -05:00
Rob Crittenden 1a38b6dfdf Install principalshow.kid 2008-02-08 17:49:49 -05:00
Rob Crittenden c50ebd9657 Don't set blank values so we don't end up with empty attributes 
Resolves 429895
 2008-01-30 09:31:03 -05:00
Rob Crittenden 97d9c235dd Set the license uniformly to GPLv2 only. 2008-02-04 15:15:52 -05:00
Rob Crittenden 217019e9de Create /var/run/<process>.pid to play nicers with the start scripts 
Need to start ipa_webgui as root and drop privs in order to write in /var/run
 2008-02-06 11:02:05 -05:00
Rob Crittenden 15e2abaa25 Use orig_user_dict to get krbprincipalname when changing passwords. 
Add an extra exception handler so we don't return a 500 on errors.
 2008-01-31 17:38:21 -05:00
Rob Crittenden 473eb9992e Enable logging so we can catch startup errors either in the console or 
the error log.
Add a foreground and debug flag
Resolves 430011
 2008-01-30 11:55:33 -05:00
Rob Crittenden f4ef672dd6 Listen only on the localhost interface 
Resolves bz 430191
 2008-01-25 10:17:37 -05:00
Rob Crittenden 34b56238d2 Dropped the last 's' in the sessions cache directory 2008-01-24 22:31:22 -05:00
Rob Crittenden 3d911a7beb Major mistake on my part by adding sessions to the wrong place. This broke 
ipa_webgui.
 2008-01-24 17:39:54 -05:00
Rob Crittenden 3302dc7446 Enable server-side sessions. It is currently using files for sessions. 2008-01-23 09:45:46 -05:00
Rob Crittenden 042fb11fa1 Fix issues reported by rpmlint. 
- Removing shebangs (#!) from a bunch of python libraries
- Don't use a variable name in init scripts for the lock file
- Keep the init script name consistent with the binary name, so renamed
  ipa-kpasswd.init to ipa_kpasswd.init
- Add status option to the init scripts
- Move most python scripts out of /usr/share/ipa and into the python
  site-packages directories (ipaserver and ipaclient)
- Remove unnecessary sys.path.append("/usr/share/ipa")
- Fix the license string in the spec files
- Rename ipa-webgui to ipa_webgui everywhere
- Fix a couple of issues reported by pychecker in ipa-python
 2008-01-18 16:20:36 -05:00
Rob Crittenden 42d5ddc559 Service principal deletion 2008-01-11 11:44:23 -05:00
Rob Crittenden bbe1fdd8e9 Run ipa-webgui as apache and not as root 2008-01-11 13:05:44 -05:00
Rob Crittenden dd28d4e6f6 Make button test consistent with rest of page 2008-01-07 16:02:40 -05:00
Simo Sorce a9e4e5a1e2 Finishe removing previous code to fetch keytabs 2007-12-21 12:31:31 -05:00
Rob Crittenden baaead2709 Allow for direct entry of group names when creating delegations. 
This requires a bit of trickery. I use the onblur() javascript function
to note when the field is left and store whatever was entered there.

Then when the page is submitted if a dn doesn't exist for that field
but they did enter something, do a lookup to see if there is a group by
that name.
 2007-12-13 04:32:22 -05:00
Rob Crittenden b5af99c51d Fix the UI indicators for mandatory fields. 
The source and target groups weren't highlighted but the entire block of
checkboxes was and it looked absolutely horrible.
 2007-12-12 15:18:28 -05:00
Karl MacMillan 148a55811d Return a proper error code from ipa-webgui so that 
the init script can indicate when the service
fails to start.
 -
Rob Crittenden 5c217ce31a Change from "Common Name" to "Full Name" 2007-12-11 15:14:29 -05:00
Rob Crittenden 40ff6f21db Prompt user before downloading a keytab that this will create a new secret, 
breaking any existing keytabs for that principal.
 2007-12-06 11:56:14 -05:00
Rob Crittenden 592329af18 Use more common names for first and last name labels 2007-12-10 11:55:52 -05:00
Rob Crittenden ca8e71d938 Move the sort arrow to the left of the column title and don't overlap the text 2007-12-10 21:55:12 -05:00
Rob Crittenden f169641aae Use title case for field labels 2007-12-10 17:44:04 -05:00
Rob Crittenden 5e4a162954 Fix delegation in the UI and add a missing aci that allows writes. 
Make ipa-deldelegation more user-friendly.
 2007-12-07 16:08:12 -05:00
Rob Crittenden b75d735b7e Add default e-mail domain to the IPA configuration 2007-12-10 11:53:00 -05:00
Rob Crittenden 059e8f00ef Add principal management templates 2007-12-10 09:58:18 -05:00
Karl MacMillan 6243410bdd Install principal edit page files. -
Rob Crittenden b3fa02225a Add back in some CSS that was removed in the big UI update. 
This adds back required field colors and colored error and warning msgs.
 2007-12-05 16:15:52 -05:00
Rob Crittenden 99c676702b The uid_hidden field needs to be retained until after validation succeeds 
otherwise if it ever fails, uid_hidden will be lost which can cause uid
to not be set which cascades into lots of other errors.
 2007-12-06 17:00:38 -05:00
Rob Crittenden 2a2d866552 Make uid an editable field in the Edit UI so we can do RDN changes 
Fix group RDN changes
Remove a copy/paste error in the group UI update that caused 2 updates
Fix variable name so groups don't get user objectclasses
Remove color CSS for field backgrounds as they override disabled field display
 2007-12-06 15:36:42 -05:00
Rob Crittenden 86d80f12ca Add some javascript so we can put focus on the first field of the page. 2007-12-06 17:49:56 -05:00