public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
743 Commits 9 Branches 0 Tags
aac086582aee79ccf72206faf118e997c623170c
Commit Graph
156 Commits
Author SHA1 Message Date
Simo Sorce aac086582a Move sysrestore to ipa-python so it can be used by client scripts too. 
Change backup format so files are all in a single directory (no dir
hierarchies) and use an index file so we can save also ownership and
permission info for the restore (and eventually other data later on).
 2008-03-27 19:01:38 -04:00
Rob Crittenden b7924139d8 Don't allow the admin user to be removed using the XML-RPC Interface. 
If a site really wants it gone then can delete it via LDAP.

439281
 2008-03-28 15:28:28 -04:00
Rob Crittenden bde9959091 When getting members let user indicate what type of member they want. 
The memberOf attribute includes members that are directly in the group
via the "member" attribute and those that are included as a result of
being in a group that is in the group.

The UI needs to be able to distinguish between the two.

438706
 2008-03-27 09:54:41 -04:00
Rob Crittenden 4c288e653a Re-root the IPA web UI to /ipa and the XML-RPC interface to /ipaxml. 
438021
 2008-03-24 15:54:55 -04:00
Rob Crittenden e54a16ae1c Allow the realm to be included in the name passed to add_service_principal() 
This is more kerberos-like and it doesn't hurt anything, we just won't
allow realms other than our own to be used.

437566
 2008-03-17 14:09:44 -04:00
Rob Crittenden c3fedca013 Don't define bogus realm/server in configuration file by default 
Add default exception handler to avoid backtraces in cmdline tools
Enhance error message when the IPA server or realm can't be found

437565
 2008-03-17 13:16:56 -04:00
Rob Crittenden 6301914941 Require that the hostname is a DNS A record and that the forward and reverse 
match.

433515
 2008-03-03 16:10:06 -05:00
Rob Crittenden b49942fe96 Close all fds when running another program. This fixes the SELinux AVCs. 
Put installation log files into /var/log.

430024
 2008-03-03 16:14:48 -05:00
Rob Crittenden 79557e6bf2 Do argument type checking in the XML-RPC interface 
Fix error in service principals where the service wasn't being removed before
doing the DNS lookup.
 2008-02-29 10:58:07 -05:00
Rob Crittenden ad8096b51f - Centralize try/except so the entire program is covered. This make it 
possible to catch KeyboardInterrupt during the import process.
- Add function for handling python differences with GSSError

434798
 2008-02-27 10:40:18 -05:00
Rob Crittenden f49ed705b3 The admins group cannot be renamed. 
433880
 2008-02-27 10:50:17 -05:00
Rob Crittenden d6d12e9dc5 Require that service principals resolve to a DNS A record. 
There is a --force option for those who know what they are doing.

433483
 2008-02-26 13:51:56 -05:00
Rob Crittenden 8f0d4a8ed3 Add failover to the XML-RPC client 
433506
 2008-02-22 14:47:15 -05:00
Rob Crittenden 02d3c5aff3 Don't allow a group to be a member of itself. 
434542
 2008-02-22 15:40:21 -05:00
Rob Crittenden 44797e3917 Command-line utility to manage password policy 
432814
 2008-02-25 13:11:15 -05:00
Rob Crittenden 84d1e08d76 Become freeipa-0.99.0 2008-02-21 16:11:42 -05:00
Rob Crittenden f82b3b0b28 Handle input range properly and catch KeyboardInterrupt and exit gracefully 
433496
 2008-02-20 09:32:25 -05:00
Rob Crittenden 0300952ec7 Use ldap_explode_dn instead of ldap_str2dn so we can use python-ldap 2.2.0 2008-02-11 09:42:47 -05:00
Rob Crittenden c50ebd9657 Don't set blank values so we don't end up with empty attributes 
Resolves 429895
 2008-01-30 09:31:03 -05:00
Rob Crittenden 97d9c235dd Set the license uniformly to GPLv2 only. 2008-02-04 15:15:52 -05:00
Rob Crittenden 0e3ecf6270 Marked with wrong license. IPA is GPLv2. 2008-01-31 16:49:01 -05:00
Mark McLoughlin 996a3f6698 Fix not so random random passwords 
If you run ipa_generate_password() multiple times, one
after the other, then you get the same password each time.

This is because it uses the current time to seed the
pseudo random number generator.

The easiest solution is to just use the default method
which seeds itself from /dev/urandom if available,
and uses a fractional time value otherwise.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
 2008-01-22 16:42:45 +00:00
Rob Crittenden 00e20c2003 Use Fedora package names for PyKerberos (python-kerberos) and pyasn1 
(python-pyasn1) for the specfile Requires.
 2008-01-24 13:44:38 -05:00
Rob Crittenden 3594157f54 Add a copy of the LICENSE and populate some README's 2008-01-23 10:30:18 -05:00
Rob Crittenden 042fb11fa1 Fix issues reported by rpmlint. 
- Removing shebangs (#!) from a bunch of python libraries
- Don't use a variable name in init scripts for the lock file
- Keep the init script name consistent with the binary name, so renamed
  ipa-kpasswd.init to ipa_kpasswd.init
- Add status option to the init scripts
- Move most python scripts out of /usr/share/ipa and into the python
  site-packages directories (ipaserver and ipaclient)
- Remove unnecessary sys.path.append("/usr/share/ipa")
- Fix the license string in the spec files
- Rename ipa-webgui to ipa_webgui everywhere
- Fix a couple of issues reported by pychecker in ipa-python
 2008-01-18 16:20:36 -05:00
Mark McLoughlin 9161dcbbdc Add service.is_enabled() helper 
Add a simple helper to check whether a service is enabled.

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
 2008-01-11 10:36:25 +00:00
Rob Crittenden 42d5ddc559 Service principal deletion 2008-01-11 11:44:23 -05:00
Rob Crittenden 1c4e4b3e14 Add function to retrieve a short list of attributes to make ipa-adddelegation 
easier to use.
 2008-01-04 16:39:41 -05:00
Karl MacMillan c761409490 Update versions for release. -
Karl MacMillan 6575aa606f Merge. -
Mark McLoughlin 2dd8c346f3 Fix ipa-python packaging 
Latest Fedora 9 python distutils generates .egg-info files;
follow the recommendation at:

  http://fedoraproject.org/wiki/Packaging/Python/Eggs

and just package everything under %{python_sitelib}/

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
 2007-12-13 09:31:28 +00:00
Karl MacMillan cf595511ff Move radius server components into a separate package. -
Rob Crittenden 23ffab533f Make the old entry option in update_*, check for empty parameters and 
fix some problems reported by pychecker.
 2007-12-11 17:34:15 -05:00
Karl MacMillan a0eacec8e5 Cleanup from radius merge. -
Simo Sorce 3defaaf7ba Make admintools discover the domain using DNS calls to find the LDAP server. 2007-12-11 10:58:39 -05:00
Rob Crittenden f796e50000 Add simple UI for command-line programs to be able to select when 
multiple entries are returned.
 2007-12-10 16:12:58 -05:00
Karl MacMillan 3b4f0db73e Convert the setup of ssl from a shell script to a 
python module. This is in preparation for user
supplied certs.
 -
Karl MacMillan ad3fcc200c Merge. -
Karl MacMillan d2378f13d0 Merge. -
Simo Sorce c0b809efd5 Move dnsclient into ipa-python so that I will be able to use it in ipaconfig 2007-12-10 16:31:21 -05:00
Rob Crittenden 00489597d8 Rework input validation to more closely match what we require in the UI 2007-12-07 17:07:03 -05:00
Rob Crittenden eb141b02ff Move dn removal to the XML-RPC side and remove empty attributes 2007-12-05 17:26:39 -05:00
Rob Crittenden 15b7dc6ff9 Add UI for service principal creation and keytab retrieval 2007-12-05 15:17:11 -05:00
Karl MacMillan c397041bfa Merge. -
Karl MacMillan 90d6fefe32 Fix errors with ipautil.CalledProcessError and cleanup some imports. -
Rob Crittenden 2fbe5cbf49 Phase 1 of allowing admins to set the default object classes for users & groups 
This adds the UI and does error checking of the selected object classes but
it doesn't actually use the values yet.

It also generalizes some functions for doing multi-valued fields.
 2007-12-04 13:18:37 -05:00
John Dennis d53915954e merge 2007-12-04 10:08:08 -05:00
John Dennis 4e1d291d15 change location of radius data in ldap from 
cn=radius,cn=services,cn=etc
to
cn=radius
 2007-11-30 20:29:12 -05:00
rcritten@redhat.com c32a960cae Compatibility changes to work on RHEL 5 with python 2.4 2007-11-30 15:53:02 -05:00
Rob Crittenden bac556557d Don't allow the admins or editors groups to be removed. 
Don't allow the default group for users to be removed.
 2007-11-30 12:49:08 -05:00