public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,116 Commits 9 Branches 0 Tags
eb9cb783ee171e2f8e9921399db65280ba9dfd21
Commit Graph
22 Commits
Author SHA1 Message Date
Jan Zeleny 8fd288df08 Print expected error message in hbac-mod 
This patch catches NotFound exception and calls handling function
which then sends exception with unified error message.

https://fedorahosted.org/freeipa/ticket/487
 2010-12-10 13:52:14 -05:00
Rob Crittenden bfb3e46996 Remove accessTime from HBAC. 
ticket 545
 2010-12-06 11:42:13 -05:00
Jan Zeleny ac62447329 Updated output when calling hbac-show 
Some attributes weren't included in the output of hbac-show command.
This patch fixes it.

https://fedorahosted.org/freeipa/ticket/494
https://fedorahosted.org/freeipa/ticket/495
 2010-12-02 16:10:25 -05:00
Jan Zeleny 58bcb5e7f9 Handle error messages during various HBAC operations 
During some HBAC operations, various error messages were handled
incorrectly - displaying only generic error messages instead of
correct ones, which were defined for the module.

This patch adds catching these generic exceptions and raising
new exceptions with the correct error message.

https://fedorahosted.org/freeipa/ticket/487
 2010-11-29 17:19:40 -05:00
Pavel Zuna 93290c8a72 Add LDAPObject setting to handle different attributes for RDN and PKEY. 2010-10-28 07:58:31 -04:00
Rob Crittenden fe7d97a3d9 Fix problem testing for mutual exclusivity in hbac plugin. 
This should fix the hbac tests.
 2010-10-18 15:47:16 -04:00
Rob Crittenden bed6e81935 If an HBAC category is 'all' don't allow individual objects to be added. 
Basically, make 'all' mutually exclusive. This makes debugging lots easier.
If say usercat='all' there is no point adding specific users to the rule
because it will always apply to everyone.

ticket 164
 2010-10-08 10:11:41 -04:00
Rob Crittenden 9fd7fedb76 Add an example for creating an HBAC service and service group. 
Try to tie in the hbacsvc and hbacsvcgroup plugins better through an
example.

ticket 159
 2010-09-23 11:59:14 -04:00
Rob Crittenden 4b6b710ba6 Update command documentation based on feedback from docs team. 
ticket #158
 2010-08-27 13:31:04 -04:00
Rob Crittenden 901ccc1393 First pass at per-command documentation 2010-06-22 13:58:04 -04:00
Rob Crittenden 58fed69768 Add groups of services to HBAC 
Replace serviceName with memberService so we can assign individual
services or groups of services to an HBAC rule.

588574
 2010-05-17 13:47:37 -04:00
Rob Crittenden fa59c8b9d3 Increase the attributes we display by default and fix up some labels. 2010-05-05 14:58:01 -04:00
Pavel Zuna 41312ca166 Code cleanup: remove unused stuff, take 1. 2010-03-01 16:53:30 -05:00
Jason Gerard DeRose 8c46e09735 Translatable Param.label, Param.doc 2010-02-24 02:47:39 -07:00
Jason Gerard DeRose 069763c5c6 Add Object.label class attribute, enable in webUI 2010-02-12 17:07:37 -05:00
Pavel Zuna 74a5384169 Add --all to LDAPCreate and make LDAP commands always display default attributes. 2010-01-11 13:28:05 -05:00
Jason Gerard DeRose b6e4972e7f Take 2: Extensible return values and validation; steps toward a single output_for_cli(); enable more webUI stuff 2009-12-10 08:29:15 -07:00
Pavel Zuna 34deb3fef3 Rename GeneralizedTime to AccessTime. 2009-12-01 10:38:56 -05:00
Pavel Zuna 40368f0d01 Add {user,host,sourcehost}Category to HBAC and make accessTime multivalue. 2009-12-01 10:38:49 -05:00
Pavel Zuna 2bbdf7be0d Handle ipaEnabledFlag as bool (TRUE/FALSE) instead of string (enabled/disabled). 2009-11-18 14:40:53 -05:00
Pavel Zuna 0373166002 Fix bug in HBAC and netgroup plugin get_primary_key_from_dn methods. 2009-10-08 10:11:29 -04:00
Pavel Zuna a6eb928f98 Add HBAC plugin and introduce GeneralizedTime parameter type. 2009-10-05 15:55:27 -04:00