public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
700 Commits 9 Branches 0 Tags
d7ad62cd7e1d861270e8fd0ff8a2dd7ddba90127
Commit Graph
553 Commits
Author SHA1 Message Date
Simo Sorce d7ad62cd7e Make sure all entries are generated by us according to IPA 
default tree. This patch make sure that the DS setup script
does not add unwanted entries.
 2008-02-28 13:35:10 -05:00
Nathan Kinder 2c559fce85 Fixed the way we call ipa-client-install from ipa-replica-install. 
434980
 2008-02-28 15:24:10 -08:00
Rob Crittenden ab86f52999 Fix off-by-one error in the number of steps to install a service 2008-02-28 21:57:52 -05:00
Rob Crittenden 999bd4fb1e In the UI we don't want to display Edit links unless someone can actually 
edit things. We use the 'editors' group for this. This group itself grants
no permission other than displaying certain things in the UI.

In order to be in the editors group a user must be a member of a group that
is the source group in a delegation. The memberof plugin will do all the
hard work to be sure that a user's memberof contains cn=editors if they
are in a delegated group.

432874
 2008-02-27 15:14:52 -05:00
Rob Crittenden d5f5026454 Don't log passwords in ipaserver-install.log 
433509
 2008-02-26 10:48:45 -05:00
Rob Crittenden f49ed705b3 The admins group cannot be renamed. 
433880
 2008-02-27 10:50:17 -05:00
Rob Crittenden f02b5c1962 Use correct variable for determining the host name 
435055
 2008-02-26 22:34:06 -05:00
Rob Crittenden d6d12e9dc5 Require that service principals resolve to a DNS A record. 
There is a --force option for those who know what they are doing.

433483
 2008-02-26 13:51:56 -05:00
Rob Crittenden 8f0d4a8ed3 Add failover to the XML-RPC client 
433506
 2008-02-22 14:47:15 -05:00
Rob Crittenden 66df51c754 Use the label "Full Name" for "Common Name" 
433525
 2008-02-26 09:33:39 -05:00
Simo Sorce d2fd2270cd We do not require the Master password anymore, fix code and error message 2008-02-25 17:18:18 -05:00
Simo Sorce e50f0fdbee Fix unattended install 2008-02-25 17:16:18 -05:00
Rob Crittenden 02d3c5aff3 Don't allow a group to be a member of itself. 
434542
 2008-02-22 15:40:21 -05:00
Rob Crittenden b9c7056a2a Remove HTML from Javascript error message and fix up language to be clearer 
433374
 2008-02-22 09:36:12 -05:00
Rob Crittenden 231913f3c2 Make sure KrbPrincipalName is unique server-wide 
Fix the build. Somehow this file didn't get committed.
 2008-02-21 23:22:31 -05:00
Simo Sorce 144a728182 Make sure KrbPrincipalName is unique server-wide 2008-02-21 22:31:16 -05:00
Simo Sorce fbb2637a48 Syntax error, ')' in the worng place throws nasty 500 errors on ldap errors :) 2008-02-21 17:16:17 -05:00
Rob Crittenden 49148dc34a Redirect users when they don't use the FQDN on both SSL and non-SSL ports 
We update the mod_nss configuration (nss.conf) during installation to include
ipa-rewrite.conf to handle the SSL side.

433054
 2008-02-21 16:25:09 -05:00
Rob Crittenden 84d1e08d76 Become freeipa-0.99.0 2008-02-21 16:11:42 -05:00
Rob Crittenden 3ede5e42a5 Don't clear out the uid from the session until the record has been updated. 2008-02-20 16:57:01 -05:00
Rob Crittenden 4c588b3d5f Don't let a regular user edit their own active status or manager 
433384
 2008-02-20 23:24:39 -05:00
Rob Crittenden 4bf136d95c Use basestring class when testing to see if an object is a string to support 
both Unicode and byte strings.

433651
 2008-02-21 11:09:53 -05:00
Rob Crittenden 87d9c037e4 Add some additional error handling 
433347
 2008-02-20 16:31:32 -05:00
Simo Sorce 80feb3aecf cosmetic fixes 2008-02-21 14:39:50 -05:00
Simo Sorce ae0eaa0120 Let users write their own password, should fix 433707 2008-02-21 09:51:47 -05:00
Simo Sorce 33b746df58 merge 2008-02-21 09:38:39 -05:00
Simo Sorce f87db10a07 Purely indentiation, trailing spaces, cosmetic fixes 2008-02-21 09:36:35 -05:00
Rob Crittenden e368fa1844 Create the selinux installation directory before installing files 2008-02-20 22:14:44 -05:00
Rob Crittenden 75ad48272a IE 6 doesn't support transparent PNG 
Remove stray character and a debug line from the CSS

429984
 2008-02-20 17:17:21 -05:00
Rob Crittenden e58774bf2e Fix for building on RHEL 5.x. 2008-02-20 12:51:03 -05:00
Simo Sorce 0996e55573 merge 2008-02-20 11:59:45 -05:00
Rob Crittenden 936b84f569 Include and use policy icon in the UI 
430954
 2008-02-20 10:53:31 -05:00
Rob Crittenden b5272bd8e0 Objects used by new CSS layout. 2008-02-20 10:45:00 -05:00
Simo Sorce 0ae42b28de Start ntpd first unless we do not want it. 
Make sure we do sync the clock leaping to the current correct time.
This avoids problems with bad dates on certificates, etc..
 2008-02-20 11:03:46 -05:00
Simo Sorce 46cb6e9bdd Run ipa-client-install after server install bits 2008-02-20 10:16:19 -05:00
Rob Crittenden da24953f9a Warn if a user tries to install a replica on the wrong target machine 
432691
 2008-02-19 10:46:22 -05:00
Rob Crittenden e31d33619d Add some error handling for LDAP connection issues 
Verify the DM password earlier in the process

433368
 2008-02-19 10:20:13 -05:00
Rob Crittenden 7e5f1514b2 Only show Delete button for admins, editors and don't let user delete them self 
Resolves 433382
 2008-02-18 22:41:28 -05:00
Rob Crittenden 80a4e94e5b Verify current domain with user during installation 
Use that domain when creating replicas

Resolves 432066
 2008-02-15 20:47:29 -05:00
Rob Crittenden c47248c5d8 Update of CSS from Máirín Duffy including some per-object images 2008-02-19 16:43:32 -05:00
Rob Crittenden 65960a2e58 Use the proper access methods in IPA policy subcontroller. 
Resolves 433062
 2008-02-18 17:41:58 -05:00
Rob Crittenden 346f73057f memberOf attribute should not be replicated 
Resolves 430017
 2008-02-18 15:22:36 -05:00
Rob Crittenden 3ad8a2bd1b Import internationalization for kid templates patch from Masato Taruishi 2008-02-19 22:45:11 -05:00
Rob Crittenden 1aa8729644 Initial SELinux policies for ipa_kpasswd and ipa_webgui 2008-02-08 11:09:06 -05:00
Rob Crittenden eef18e5c38 Display the path to the PKCS#12 password file at the end of installation 2008-02-19 11:40:27 -05:00
Rob Crittenden 73a674ed49 Fix bug that prevented single-character fields 
Fix bug in exception handling where we were sending the wrong thing as detail.
Basically we were catching an LDAP error, generating an IPAError from it,
 catching that, then setting the detail of the 2nd exception to another IPAError
 rather than the root exception. This caused anything looking at e.detail to
 crap out

Resolves 432136
 2008-02-11 16:32:54 -05:00
Rob Crittenden 5b1e7e3a5f Don't create a backup of the PKCS#12 cert on replicas 
Name the file created by ipa-replica-prepare after the FQDN of the target

Resolves 432904
 2008-02-14 17:39:06 -08:00
Nathan Kinder 71c21b5293 Fix bugs in handling of circular groupings in memberOf plug-in. 
Resolves 432140
 2008-02-14 16:27:34 -08:00
Rob Crittenden 1380d9d9de Fix incorrect form label 
Resolves 432731
 2008-02-14 16:04:53 -08:00
Rob Crittenden 5be3defccf Gracefully handle sys.exit() in python 2.4 2008-02-11 09:41:14 -05:00