public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
11,028 Commits 9 Branches 0 Tags
7ef4e9eb810063243fcc575434d856c854b14eee
Commit Graph
11028 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Nagy 3a80297b04 Reworking Environment, moved it to config.py 2008-10-17 23:11:51 +02:00
Rob Crittenden e66cd9599b Some xml-rpc server code cleanup. Make system.* functions to work with plugins 2008-10-17 16:41:38 -04:00
Rob Crittenden b045f22069 Add mod_python-based XML-RPC server. 
Use -e kerberos on the command-line to use the mod_python server, otherwise
it defaults to use the simple-server URL.
 2008-10-16 23:33:44 -04:00
Rob Crittenden f777f72de6 Use the search fields from the configuration when searching 
Generalize the attribute -> objectclass search helper
 2008-10-16 15:00:30 -04:00
Rob Crittenden 5748fce84c Remove references to ipa_server.* and port group plugin to ldap backend 2008-10-16 10:59:03 -04:00
Rob Crittenden 12f1e7fdf7 Remove all references to ipa_server.* from user plugin 2008-10-16 10:32:20 -04:00
Rob Crittenden 1a8317ff74 Port group-add to use LDAP backend 
Have create and update return the record that was just added/modified
 2008-10-15 17:46:01 -04:00
Rob Crittenden 14a33d4619 Fix some remaining merge issues and don't use forward() in user-*lock() 2008-10-15 16:50:46 -04:00
Rob Crittenden 3268b65ae0 Initial implementation of a generic search routine. 2008-10-15 16:12:27 -04:00
Rob Crittenden 4862a8f9d9 Fix error if more than one values is being set in an only. The first entry wasn't being properly converted into a list so subsequent values caused it to crap out. 
467102
 2008-10-15 15:29:08 -04:00
Jason Gerard DeRose af7c0ee595 Resolved conficts in Rob's merge 2008-10-15 12:24:15 -06:00
Rob Crittenden 789a248daa Port user-mod to use ldap update() method 2008-10-15 09:58:29 -04:00
Rob Crittenden e7937f2944 Add missing * to *kw to make it pass named arguments instead of positional 2008-10-15 09:57:49 -04:00
Rob Crittenden f7c044495a Port user_del to CrudBackend 
Override output_for_cli() to generate nicer output
 2008-10-14 22:48:57 -04:00
Rob Crittenden cfc8450efd Port user-show to new CrudBackend framework 2008-10-14 22:22:01 -04:00
Rob Crittenden 1c3f81852c Move some functionality from user-add to the backend ldap create function 2008-10-14 21:28:06 -04:00
Jason Gerard DeRose e5d0bfa86b Added GPL v2 in LICENSE file 2008-10-14 16:51:04 -06:00
Jason Gerard DeRose 0ebdbaa450 Merge branch 'master' of git://git.engineering.redhat.com/users/rcritten/freeipa2 2008-10-14 15:45:57 -06:00
Rob Crittenden 30664cde88 Move some functionality from user-add to the backend ldap create function 2008-10-14 17:46:36 -04:00
Martin Nagy ff88652a40 Convert string values to boolean when generating environment 2008-10-14 21:22:44 +02:00
Jason Gerard DeRose 9788800aa4 More work on making user-add use Backend.ldap 2008-10-14 02:23:56 -06:00
Jason Gerard DeRose 1480224724 Started roughing out user_add() using api.Backend.ldap; added Command.output_for_cli() to take care of formatting print output 2008-10-14 01:45:30 -06:00
Jason Gerard DeRose 20fa90cfb6 Some small cleanup on Environment, filled in docstrings 2008-10-14 00:39:23 -06:00
Jason Gerard DeRose 149912d0e7 Added ldap.get_user_dn() method 2008-10-14 00:38:17 -06:00
Jason Gerard DeRose 446037fd60 Added Object.get_dn() method; added corresponding unit tests 2008-10-13 23:26:24 -06:00
Jason Gerard DeRose 22669f1fc2 CLI.run_interactive() now uses Param.cli_name instead of Param.name for prompts and errors 2008-10-13 22:00:18 -06:00
Jason Gerard DeRose 2357360e2a Command.params are now sorted the same way as Object.params (make user-add prompt for first, last before login) 2008-10-13 21:53:03 -06:00
Jason Gerard DeRose b6dcd183a6 CLI now maps Param.cli_name to Param.name 2008-10-13 20:31:10 -06:00
Jason Gerard DeRose 8674086b85 Param now takes cli_name kwarg that sets Param.cli_name attribute 2008-10-13 17:24:23 -06:00
Jason Gerard DeRose 367143adf3 Merge branch 'master' of git://git.engineering.redhat.com/users/rcritten/freeipa2 2008-10-13 15:39:14 -06:00
Rob Crittenden 6d2705b363 Implement user lock and unlock 2008-10-13 17:17:00 -04:00
Rob Crittenden 19465318ce Fix up a comment 2008-10-13 15:17:31 -04:00
Rob Crittenden fc9f057792 Initial implementation of password policy 2008-10-13 15:01:08 -04:00
Rob Crittenden 0ebaad6462 Do a more specific search for the user 2008-10-13 14:59:48 -04:00
Rob Crittenden 361a379ff9 We should be registering Commands, not Methods 2008-10-13 14:58:31 -04:00
Rob Crittenden 399b3794fb Raise the right exceptions 2008-10-13 14:58:08 -04:00
Rich Megginson f02d1429ca add update to fix the index for the winsync attributes 2008-10-13 14:09:15 -04:00
Rich Megginson 5c56c43693 do not store the OUs from the AD DN in the IPA user entry when flattening 2008-10-13 14:09:14 -04:00
Rich Megginson 9f18858e58 add --win-subtree argument to ipa-replica-manage 2008-10-13 14:09:13 -04:00
Rich Megginson 0988e1c53c Do not depend on MMR plugin - start before MMR plugin 
The ipa-winsync plugin needs to start before the MMR plugin, so that it
can register the API functions.  Also, the slapi-nis schema compat
plugin creates an entry that looks exactly like the default IPA group
gidNumber entry, so I added an extra (objectclass=groupOfNames) to the
filter since the slapi-nis entry doesn't have that.
 2008-10-13 14:09:13 -04:00
Rich Megginson d3637dde7c Just add eq,pres to the existing indices 
There are already indexes created for ntUniqueID and ntUserDomainID by default
We just need to make sure they are indexed for equality and presence
 2008-10-13 14:09:12 -04:00
Rich Megginson 38154073a8 Don't try to conditionally stop the server - it doesn't seem to work 
Just call stop() - if it's not already running, no big deal
 2008-10-13 14:09:11 -04:00
Rich Megginson 28195610f6 Add more winsync support to cli 
The ipa-replica-manage list, init, and synch commands do not work for winsync
agreements.  This patch adds that support and some additional verbose logging.

The synch_master did not work correctly.  The way it should work is to set
the replication schedule to some bogus value, then reset it back to its
original setting.  This will force replication to take place immediately.
 2008-10-13 14:09:10 -04:00
Rich Megginson 068ed81195 Do not add enabled user to activated group - clean up parse_acct_disable 
If a user needs to be enabled, just delete the user from the inactivated group,
but do not add to the activated group.  If a user is in no group, the user is
active by default.  IPA uses the activated group for override purposes.

parse_acct_disable is only used when the config changes, but I cleaned it
up anyway to make the code clearer.
 2008-10-13 14:09:10 -04:00
Rich Megginson 0e346ff6fb add winsync options to ipa-replica-manage man page 2008-10-13 14:09:09 -04:00
Rich Megginson 69180c2dcc Adds winsync account disable and force sync 2008-10-13 14:09:08 -04:00
Rich Megginson e8bebebc23 fix issues brought up by initial review of ipa winsync enhancements 2008-10-13 14:09:08 -04:00
Rich Megginson be5e783f72 add --no-host-dns option to ipa-server-install - allows specifying a hostname that might actually exist but you do not want to even attempt to resolve it via DNS 2008-10-13 14:09:07 -04:00
Rich Megginson 5a5bfa2c70 Added support to IPA server install to install the winsync plugin configuration entry Added support to ipa-replica-manage to add winsync agreements. I mostly used the existing code for setting up replication agreements since replication and winsync are quite similar in their configuration. I just had to add some extra attributes to the sync agreement configuration. The tricky part was importing the Windows CA cert. 2008-10-13 14:09:07 -04:00
Rich Megginson 2a2bc851bd The library name is libipa_winsync not libipa-winsync 2008-10-13 14:09:06 -04:00