Jakub Hrozek
7493d781df
Change FreeIPA license to GPLv3+
...
The changes include:
* Change license blobs in source files to mention GPLv3+ not GPLv2 only
* Add GPLv3+ license text
* Package COPYING not LICENSE as the license blobs (even the old ones)
mention COPYING specifically, it is also more common, I think
https://fedorahosted.org/freeipa/ticket/239
2010-12-20 17:19:53 -05:00
Jan Zeleny
8fd288df08
Print expected error message in hbac-mod
...
This patch catches NotFound exception and calls handling function
which then sends exception with unified error message.
https://fedorahosted.org/freeipa/ticket/487
2010-12-10 13:52:14 -05:00
Rob Crittenden
bfb3e46996
Remove accessTime from HBAC.
...
ticket 545
2010-12-06 11:42:13 -05:00
Jan Zeleny
ac62447329
Updated output when calling hbac-show
...
Some attributes weren't included in the output of hbac-show command.
This patch fixes it.
https://fedorahosted.org/freeipa/ticket/494
https://fedorahosted.org/freeipa/ticket/495
2010-12-02 16:10:25 -05:00
Jan Zeleny
58bcb5e7f9
Handle error messages during various HBAC operations
...
During some HBAC operations, various error messages were handled
incorrectly - displaying only generic error messages instead of
correct ones, which were defined for the module.
This patch adds catching these generic exceptions and raising
new exceptions with the correct error message.
https://fedorahosted.org/freeipa/ticket/487
2010-11-29 17:19:40 -05:00
Pavel Zuna
93290c8a72
Add LDAPObject setting to handle different attributes for RDN and PKEY.
2010-10-28 07:58:31 -04:00
Rob Crittenden
fe7d97a3d9
Fix problem testing for mutual exclusivity in hbac plugin.
...
This should fix the hbac tests.
2010-10-18 15:47:16 -04:00
Rob Crittenden
bed6e81935
If an HBAC category is 'all' don't allow individual objects to be added.
...
Basically, make 'all' mutually exclusive. This makes debugging lots easier.
If say usercat='all' there is no point adding specific users to the rule
because it will always apply to everyone.
ticket 164
2010-10-08 10:11:41 -04:00
Rob Crittenden
9fd7fedb76
Add an example for creating an HBAC service and service group.
...
Try to tie in the hbacsvc and hbacsvcgroup plugins better through an
example.
ticket 159
2010-09-23 11:59:14 -04:00
Rob Crittenden
4b6b710ba6
Update command documentation based on feedback from docs team.
...
ticket #158
2010-08-27 13:31:04 -04:00
Rob Crittenden
901ccc1393
First pass at per-command documentation
2010-06-22 13:58:04 -04:00
Rob Crittenden
58fed69768
Add groups of services to HBAC
...
Replace serviceName with memberService so we can assign individual
services or groups of services to an HBAC rule.
588574
2010-05-17 13:47:37 -04:00
Rob Crittenden
fa59c8b9d3
Increase the attributes we display by default and fix up some labels.
2010-05-05 14:58:01 -04:00
Pavel Zuna
41312ca166
Code cleanup: remove unused stuff, take 1.
2010-03-01 16:53:30 -05:00
Jason Gerard DeRose
8c46e09735
Translatable Param.label, Param.doc
2010-02-24 02:47:39 -07:00
Jason Gerard DeRose
069763c5c6
Add Object.label class attribute, enable in webUI
2010-02-12 17:07:37 -05:00
Pavel Zuna
74a5384169
Add --all to LDAPCreate and make LDAP commands always display default attributes.
2010-01-11 13:28:05 -05:00
Jason Gerard DeRose
b6e4972e7f
Take 2: Extensible return values and validation; steps toward a single output_for_cli(); enable more webUI stuff
2009-12-10 08:29:15 -07:00
Pavel Zuna
34deb3fef3
Rename GeneralizedTime to AccessTime.
2009-12-01 10:38:56 -05:00
Pavel Zuna
40368f0d01
Add {user,host,sourcehost}Category to HBAC and make accessTime multivalue.
2009-12-01 10:38:49 -05:00
Pavel Zuna
2bbdf7be0d
Handle ipaEnabledFlag as bool (TRUE/FALSE) instead of string (enabled/disabled).
2009-11-18 14:40:53 -05:00
Pavel Zuna
0373166002
Fix bug in HBAC and netgroup plugin get_primary_key_from_dn methods.
2009-10-08 10:11:29 -04:00
Pavel Zuna
a6eb928f98
Add HBAC plugin and introduce GeneralizedTime parameter type.
2009-10-05 15:55:27 -04:00
Jakub Hrozek
Jan Zeleny
Rob Crittenden
Pavel Zuna
Jason Gerard DeRose