public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
380 Commits 9 Branches 0 Tags
eecbaf91e2c9dfd6a24c1d2c8b85c50adcff9d42
Commit Graph
305 Commits
Author SHA1 Message Date
Rob Crittenden eecbaf91e2 Use the dna plugin to automatically assign uid 
Set gid to the group "ipausers"
Add the user to this default group
 2007-11-13 15:03:20 -05:00
Rob Crittenden 79544637d6 The e-mail field should not be required. 2007-11-13 15:49:06 -05:00
Rob Crittenden 5011f64243 Restrict access to some parts of the UI to those in the admins group 2007-11-13 11:15:07 -05:00
Rob Crittenden cd489f0a73 Allow a user or group to change an attribute in its RDN 
Add secretary to the list of indexes otherwise RDN changing could be slow
Port --addattr, --setattr and --delattr from usermod to groupmod
 2007-11-12 23:11:55 -05:00
Rob Crittenden 99b84bfd01 Handle ldap.UNWILLING_TO_PERFORM more gracefully 2007-11-09 16:34:52 -05:00
Rob Crittenden d9194cdd09 Don't continue if a kerberos credentials cache is not available 
forked-model detection was incorrect.
Both of these return an error instead of raising one
 2007-11-09 14:55:41 -05:00
Rob Crittenden b7506a5ea6 Fix editing groups when cn is a single-valued field 
Fix some error messages that were printing the entire detail message
 2007-11-09 14:01:28 -05:00
Rob Crittenden 705d68ddcb Require uniqueness in the name/comment field of delegations 
Fix error reporting in the UI to include the detailed message
Sort delegations by name when displaying them
Update the name field from "Name" to "Delegation Name"
 2007-11-09 13:58:36 -05:00
Rob Crittenden 6f03dde1ab Underline columns on sort results page so users will know it is a link 
Restore the CSS to display the up/down arrow on sort columns
 2007-11-12 15:14:35 -05:00
Rob Crittenden 547e6e920e Redirect to the FQDN otherwise kerberos auth may fail 2007-11-12 14:47:48 -05:00
Rob Crittenden e1ca8c235c Initial support for policy editing 
More work is needed as the values are currently hardcoded and not saved
 2007-11-12 14:19:05 -05:00
Rob Crittenden e9dfbfa773 Enable multi-value field support for some attributes on the edit pages 
Better error reporting in the GUI
Include a document describing how multi-valued fields work
 2007-11-08 22:12:42 -05:00
Pete Rowley 24d5777bd6 Add posix auto gen for single master case 2007-11-06 15:57:15 -08:00
John Dennis 22493d9b9f remove offensive use of rpm 
add the radiusprofile to the list of objectclasses used when creating a user
 2007-11-06 16:26:10 -05:00
Rob Crittenden 50c383aeed Update text to reflect new CSS code (sidebar now on right) 2007-11-06 10:22:47 -05:00
Karl MacMillan 8e48393c61 Introduce service base class and clean up ipa-server-install 
1) Add a base class for all of the instance objects.
2) Normalize usage of logging.
3) General cleanups of ipa-server-install.
4) Make better use of httpinstance.
5) Add webguiinstance.
6) Improve progress reporting during installation.

Works Here (TM), but it would be nice to get someone else
to test since this moves code around a bit.
 -
John Dennis 8cfd270f34 merge initial radius work 2007-11-03 12:22:20 -04:00
Karl MacMillan 8f4362f2f2 Enable referential integrity plugin. -
Rob Crittenden 010fb65bfd define Self-Service as editting your own record. 
This has the side-effect of removing the realm from Loggin in as. This
can be changed by using user_name instead of display_name in master.kid.
 2007-11-02 17:41:24 -04:00
Rob Crittenden 9d24003528 Distinguish between active and inactive users on the Find People page. 2007-11-02 11:42:38 -04:00
Rob Crittenden dc01ea0fe6 groups come back as a list where the first element is the number of 
groups returned. Skip that element.
 2007-11-02 11:35:50 -04:00
Karl MacMillan 36e43aed1b NTP configuration for client and server. 
Configure ipa servers as an ntp server and clients
to (by default) us the ipa server as an ntp server.

Also corrected the messages about which ports should
be opened.
 -
Rob Crittenden 6a0ca23577 Update the UI look and feel 2007-11-01 16:15:32 -04:00
Simo Sorce 77a105688c Fix ticket #70 2007-11-01 13:56:03 -04:00
Rob Crittenden a51dd58278 TurboGears log files and log rotation 
The error log is rotated weekly on Sunday. 4 backups are saved.

The access log is not stored since it would be a duplicate of the
Apache logs. It can be enabled if desired.

Had to move the call to daemonize() in ipa-webgui so that the
fork is done before TurboGears is initialized. Otherwise the log
files end up getting closed.
 2007-11-01 11:55:53 -04:00
Karl MacMillan 29c0668e98 Bump versions for release. -
Simo Sorce 51a5130227 Properly increment kvno and keep recent key material around 
This is necessary for services that need to be able to respond
to requests from client that acquired a service ticket just before
a password change.
 2007-10-31 10:52:44 -04:00
Karl MacMillan 27f0aab667 Rename memberOf to group_members in xml-rpc interface. -
Rob Crittenden 303d5ebad9 Have the GUI use memberOf() instead of looping through the member DNs 
Fix a bug in the local transport version of memberOf()
 2007-10-31 10:08:16 -04:00
Rob Crittenden 1d6e88565c Add memberOf API call to the XML-RPC interface 
Make find-groups use memberOf to have a prettier dispaly of members
 2007-10-30 15:07:02 -04:00
Pete Rowley 1871e8dbf6 Add user self service aci 2007-10-29 14:52:19 -07:00
Karl MacMillan 4f4f947283 Update server deps to include acl and freeipa-admintools. -
Rob Crittenden ed387e2ebb Add inetUser to the admin user so memberOf will work 2007-10-30 14:42:19 -04:00
Rob Crittenden 3c8cfd94bd Create LDAP indeces on installation for fields the web GUI searches against 2007-10-30 13:41:41 -04:00
Rob Crittenden e40c583b12 Create configuration for MIT Windows kerberos client and install into 
http://hostname/config so users can point their MIT client at the IPA
server and automatically fetch the configuration.
 2007-10-29 12:00:48 -04:00
Kevin McCarthy 859291a706 Add delete user and group to webgui. 
NOTE: this doesn't handle referential integrity.
 2007-10-23 16:46:50 -07:00
Rob Crittenden 28641544e7 Set the user password when adding a user 2007-10-26 12:35:32 -04:00
Kevin McCarthy 1d746c9fc2 Rename the form fields parameter to be clearer: 
user -> user_fields
group -> group_fields
delegate -> delegate_fields
 2007-10-25 09:18:45 -07:00
Kevin McCarthy 358d279a53 webgui side of custom fields. 2007-10-24 16:04:17 -07:00
Mark McLoughlin 6e6237e54a Fix host_name buglet in ipa-server-install 
This patch fixes a couple of buglets with read_ip_address():

  1) It writes host_name to /etc/hosts, but isn't currently
     being passed host_name

  2) It doesn't return the IP address even though the caller
     expects it

Signed-off-by: Mark McLoughlin <markmc@redhat.com>
 2008-02-21 15:23:29 +00:00
Karl MacMillan 263fba1468 Handle selinux failure 
Ignore errors if setsebool fails and print a warning.
 -
Karl MacMillan 2703be51c8 Print warning about NTP 
After looking into setting up ntpd on the IPA servers I decided it
was better just to warn admins. There are just too many valid setups
for time synchronization for us to try to get this right. Additionally,
just installing ntp and accepting the default config will result in
a configuration that is perfectly valid for IPA.

This patch checks if ntpd is running and suggests enabling it if it
is not - for client and server. It also adds some suggested next
steps to the server installation.
 -
Rob Crittenden f5cc36507b Add dependency on python-krbV 2007-10-24 15:39:05 -04:00
Kevin McCarthy 60d46ac660 Fix devel mode for the webgui. 2007-10-23 09:02:55 -07:00
Rob Crittenden 04636b8ae7 Add an LDAP attribute -> label mapping function to XML-RPC layer 
Move some ACI functions around in preparation for cli delegation
 2007-10-22 17:06:52 -04:00
Rob Crittenden a47f893957 update_user and update_group need to be defined differently in order 
to be available to the XML-RPC interface
 2007-10-22 10:09:39 -04:00
Kevin McCarthy f881e21f7f Add add/edit/show for manager and secretary fields. 2007-10-19 15:19:28 -07:00
Karl MacMillan 1685751b1c Remove dependency between ipa-pyton and ipa-server 
Current ipa-python imports and calls code from ipaserver (which is in
the ipa-server package). This makes it impossible to use the admin
tools or the ipa-python package on a system without the server bits
installed. This fixes that in a fairly minimal way.
 -
Kevin McCarthy 5e651a6496 Finish the email autosuggest. 
For now I've added a new API call.  The field-specific searching is
a ways off.
 2007-10-18 14:33:55 -07:00
Rob Crittenden f018c2123c Require mod_nss-1.0.7-2 or higher. This version fixes an issue when 
using mod_nss with mod_proxy.
 2007-10-19 11:41:59 -04:00