public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
729 Commits 9 Branches 0 Tags
c3a14e978ce39b1bbef5e7b6f76e6a84f0fc7df6
Commit Graph
576 Commits
Author SHA1 Message Date
Rob Crittenden c3a14e978c Don't error out if the user isn't in any groups. 
438222
 2008-03-26 16:45:06 -04:00
Rob Crittenden 79db4c3aa2 Fix file permissions on ca.crt when it is installed. 
438220
 2008-03-26 12:11:58 -04:00
Rob Crittenden 5f72955bca Add some missing man pages 
436501
 2008-03-17 18:04:49 -04:00
Rob Crittenden 4c288e653a Re-root the IPA web UI to /ipa and the XML-RPC interface to /ipaxml. 
438021
 2008-03-24 15:54:55 -04:00
Rob Crittenden 0b7117596d We are really changing the kerberos principal key and not the password when 
we do updates, so use the right terminology internally. Also fix the actual
field we update (and grant permission appropriately in delegations).

The DS password handles updating userPassword and any Samba passwords
as necessary.

438256
 2008-03-24 10:53:33 -04:00
Rob Crittenden 6464c40424 Start ntpd after FDS so that the ntp user can be found. 
Start httpd after ipa_webgui becuse otherwise mod_proxy may not like it if it
can't connect to the UI listening port

438090
 2008-03-24 11:02:49 -04:00
Rob Crittenden e54a16ae1c Allow the realm to be included in the name passed to add_service_principal() 
This is more kerberos-like and it doesn't hurt anything, we just won't
allow realms other than our own to be used.

437566
 2008-03-17 14:09:44 -04:00
Rob Crittenden a39f38f65b Adding items to the set needs to be lower case to prevent duplicates. 
This function was assuming that the target list was all lower-case so the
set could end up with duplicate values which would get kicked out by LDAP.

433680
 2008-03-10 11:36:04 -04:00
Rob Crittenden 5547ed320a Remove ACI that was causing RDN changes to fail 
Fix for session code so RDN change can succeed

433523
 2008-03-10 10:04:15 -04:00
Rob Crittenden 092b1b694c Add ability to initialize a replication agreement 
Add ability to force a synch to occur
Clean up a lot of unused code in ipaldap.py. This lets us do a simple bind
  without being root (it used to try to read dse.ldif)

436237
 2008-03-07 10:56:03 -05:00
Rob Crittenden 03d7125eac Verify that the hostname is correct in /etc/hosts 
Don't ignore exceptions when getting the hostname from the user

433515
 2008-03-06 13:17:28 -05:00
Rob Crittenden d7e30fa7ee Use standard size and alignment for the packed data so it works on 64-bit hosts 2008-03-06 21:59:19 -05:00
Rob Crittenden 2e46645ad5 Remove some duplicate id's that are not valid HTML 
Remove the footer. It was a leftover from the original TurboGears-generated
project that Kevin McCarthy had modified.
 2008-03-05 13:36:39 -05:00
Rob Crittenden 74c29b1bf6 Remove the ability for the average user to add/delete groups on user edit page 
If they have any delegations at all (are in editors group) they will have
these links.

433387
 2008-03-04 14:27:06 -05:00
Rob Crittenden ea53922951 Filter out K/M and krbtgt principals from the service principals list. 
435713
 2008-03-03 17:11:38 -05:00
Rob Crittenden 6301914941 Require that the hostname is a DNS A record and that the forward and reverse 
match.

433515
 2008-03-03 16:10:06 -05:00
Rob Crittenden e88d62ffcf Allow python to look in /usr/sbin for ipa_webgui 
429999
 2008-03-04 15:06:11 -05:00
Rob Crittenden f948904b5c KDC is Key Distribution Center, not Kerberos Domain Controller 
435949
 2008-03-04 14:47:47 -05:00
Simo Sorce 449344e683 Fix boot.ldif generation, the domain name component must be derived 
from the realm not the domain.
One line fix.
 2008-03-04 14:25:10 -05:00
Rob Crittenden b3c8780c1d Fix build breakage. 2008-03-03 22:30:10 -05:00
Rob Crittenden b49942fe96 Close all fds when running another program. This fixes the SELinux AVCs. 
Put installation log files into /var/log.

430024
 2008-03-03 16:14:48 -05:00
Rob Crittenden 79557e6bf2 Do argument type checking in the XML-RPC interface 
Fix error in service principals where the service wasn't being removed before
doing the DNS lookup.
 2008-02-29 10:58:07 -05:00
Rob Crittenden cc3b9cddef Add small script to start/stop all of the services that IPA requires in the 
proper order.

435026
 2008-02-28 11:37:06 -05:00
Simo Sorce d7ad62cd7e Make sure all entries are generated by us according to IPA 
default tree. This patch make sure that the DS setup script
does not add unwanted entries.
 2008-02-28 13:35:10 -05:00
Nathan Kinder 2c559fce85 Fixed the way we call ipa-client-install from ipa-replica-install. 
434980
 2008-02-28 15:24:10 -08:00
Rob Crittenden ab86f52999 Fix off-by-one error in the number of steps to install a service 2008-02-28 21:57:52 -05:00
Rob Crittenden 999bd4fb1e In the UI we don't want to display Edit links unless someone can actually 
edit things. We use the 'editors' group for this. This group itself grants
no permission other than displaying certain things in the UI.

In order to be in the editors group a user must be a member of a group that
is the source group in a delegation. The memberof plugin will do all the
hard work to be sure that a user's memberof contains cn=editors if they
are in a delegated group.

432874
 2008-02-27 15:14:52 -05:00
Rob Crittenden d5f5026454 Don't log passwords in ipaserver-install.log 
433509
 2008-02-26 10:48:45 -05:00
Rob Crittenden f49ed705b3 The admins group cannot be renamed. 
433880
 2008-02-27 10:50:17 -05:00
Rob Crittenden f02b5c1962 Use correct variable for determining the host name 
435055
 2008-02-26 22:34:06 -05:00
Rob Crittenden d6d12e9dc5 Require that service principals resolve to a DNS A record. 
There is a --force option for those who know what they are doing.

433483
 2008-02-26 13:51:56 -05:00
Rob Crittenden 8f0d4a8ed3 Add failover to the XML-RPC client 
433506
 2008-02-22 14:47:15 -05:00
Rob Crittenden 66df51c754 Use the label "Full Name" for "Common Name" 
433525
 2008-02-26 09:33:39 -05:00
Simo Sorce d2fd2270cd We do not require the Master password anymore, fix code and error message 2008-02-25 17:18:18 -05:00
Simo Sorce e50f0fdbee Fix unattended install 2008-02-25 17:16:18 -05:00
Rob Crittenden 02d3c5aff3 Don't allow a group to be a member of itself. 
434542
 2008-02-22 15:40:21 -05:00
Rob Crittenden b9c7056a2a Remove HTML from Javascript error message and fix up language to be clearer 
433374
 2008-02-22 09:36:12 -05:00
Rob Crittenden 231913f3c2 Make sure KrbPrincipalName is unique server-wide 
Fix the build. Somehow this file didn't get committed.
 2008-02-21 23:22:31 -05:00
Simo Sorce 144a728182 Make sure KrbPrincipalName is unique server-wide 2008-02-21 22:31:16 -05:00
Simo Sorce fbb2637a48 Syntax error, ')' in the worng place throws nasty 500 errors on ldap errors :) 2008-02-21 17:16:17 -05:00
Rob Crittenden 49148dc34a Redirect users when they don't use the FQDN on both SSL and non-SSL ports 
We update the mod_nss configuration (nss.conf) during installation to include
ipa-rewrite.conf to handle the SSL side.

433054
 2008-02-21 16:25:09 -05:00
Rob Crittenden 84d1e08d76 Become freeipa-0.99.0 2008-02-21 16:11:42 -05:00
Rob Crittenden 3ede5e42a5 Don't clear out the uid from the session until the record has been updated. 2008-02-20 16:57:01 -05:00
Rob Crittenden 4c588b3d5f Don't let a regular user edit their own active status or manager 
433384
 2008-02-20 23:24:39 -05:00
Rob Crittenden 4bf136d95c Use basestring class when testing to see if an object is a string to support 
both Unicode and byte strings.

433651
 2008-02-21 11:09:53 -05:00
Rob Crittenden 87d9c037e4 Add some additional error handling 
433347
 2008-02-20 16:31:32 -05:00
Simo Sorce 80feb3aecf cosmetic fixes 2008-02-21 14:39:50 -05:00
Simo Sorce ae0eaa0120 Let users write their own password, should fix 433707 2008-02-21 09:51:47 -05:00
Simo Sorce 33b746df58 merge 2008-02-21 09:38:39 -05:00
Simo Sorce f87db10a07 Purely indentiation, trailing spaces, cosmetic fixes 2008-02-21 09:36:35 -05:00