public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
787 Commits 9 Branches 0 Tags
ff3ca61f73d8df244dbd4e6b31fcec3cbfc28097
Commit Graph
190 Commits
Author SHA1 Message Date
Rob Crittenden 8dafa9dc92 Add missing image 2008-04-03 15:40:11 -04:00
Rob Crittenden c30a533de6 Don't try to update ipauserobjectclasses or ipagroupobjectclasses 
since they aren't being displayed anymore. They will just get blanked.

Also add some error handling in ipahelper.fix_incoming_fields()

438256
 2008-04-02 21:15:49 -04:00
Rob Crittenden 749c396aae On the delegation edit screen allow the direct entry of a group name 
Fix the redirection errors, it was going to back to the Add delegation page

438257
 2008-03-24 17:03:40 -04:00
Rob Crittenden 4b4a13c201 Don't try to add the default group to a user when creating the group. 
This is done automatically and trying to do so will return an error.

432106
 2008-03-31 15:17:39 -04:00
Rob Crittenden 58cfc7ab68 Fix account activation. 
We do account activation by using a Class of Service based on group
membership. A problem can happen if the entry itself has an nsaccountlock
attribute and you try doing Class of Service work as well because the
local attribute has priority. So try to detect that the entry has a local
nsAccountLock attribute and report an appropriate error.

Don't allow the admins or editors groups to be de-activated.

Return a better error message if account [in]activation fails.

Catch errors when doing group [in]activation.

439230
 2008-03-31 11:36:13 -04:00
Rob Crittenden 034d9d6753 Do case-less comparisons when considering objectclass but store the 
current value to prevent unnecessary LPAP updates (and failed writes)

Don't check against these lists on updates, only add them on new entries.

Disable the ability to configure in the UI these values for now.

438256
 2008-03-28 14:47:53 -04:00
Rob Crittenden bde9959091 When getting members let user indicate what type of member they want. 
The memberOf attribute includes members that are directly in the group
via the "member" attribute and those that are included as a result of
being in a group that is in the group.

The UI needs to be able to distinguish between the two.

438706
 2008-03-27 09:54:41 -04:00
Rob Crittenden 1a1e020258 Add additional detail to error messages. 
This runs the risk of showing too much and confusing users but on the other
hand it often includes required information detailing why the error
occurred such as what attribute the user lacks write access too and why
changing a password failed.

438057
 2008-03-25 09:48:23 -04:00
Rob Crittenden c3a14e978c Don't error out if the user isn't in any groups. 
438222
 2008-03-26 16:45:06 -04:00
Rob Crittenden 4c288e653a Re-root the IPA web UI to /ipa and the XML-RPC interface to /ipaxml. 
438021
 2008-03-24 15:54:55 -04:00
Rob Crittenden 0b7117596d We are really changing the kerberos principal key and not the password when 
we do updates, so use the right terminology internally. Also fix the actual
field we update (and grant permission appropriately in delegations).

The DS password handles updating userPassword and any Samba passwords
as necessary.

438256
 2008-03-24 10:53:33 -04:00
Rob Crittenden 5547ed320a Remove ACI that was causing RDN changes to fail 
Fix for session code so RDN change can succeed

433523
 2008-03-10 10:04:15 -04:00
Rob Crittenden 2e46645ad5 Remove some duplicate id's that are not valid HTML 
Remove the footer. It was a leftover from the original TurboGears-generated
project that Kevin McCarthy had modified.
 2008-03-05 13:36:39 -05:00
Rob Crittenden 74c29b1bf6 Remove the ability for the average user to add/delete groups on user edit page 
If they have any delegations at all (are in editors group) they will have
these links.

433387
 2008-03-04 14:27:06 -05:00
Rob Crittenden 999bd4fb1e In the UI we don't want to display Edit links unless someone can actually 
edit things. We use the 'editors' group for this. This group itself grants
no permission other than displaying certain things in the UI.

In order to be in the editors group a user must be a member of a group that
is the source group in a delegation. The memberof plugin will do all the
hard work to be sure that a user's memberof contains cn=editors if they
are in a delegated group.

432874
 2008-02-27 15:14:52 -05:00
Rob Crittenden d6d12e9dc5 Require that service principals resolve to a DNS A record. 
There is a --force option for those who know what they are doing.

433483
 2008-02-26 13:51:56 -05:00
Rob Crittenden 66df51c754 Use the label "Full Name" for "Common Name" 
433525
 2008-02-26 09:33:39 -05:00
Rob Crittenden b9c7056a2a Remove HTML from Javascript error message and fix up language to be clearer 
433374
 2008-02-22 09:36:12 -05:00
Rob Crittenden 3ede5e42a5 Don't clear out the uid from the session until the record has been updated. 2008-02-20 16:57:01 -05:00
Rob Crittenden 4c588b3d5f Don't let a regular user edit their own active status or manager 
433384
 2008-02-20 23:24:39 -05:00
Rob Crittenden 4bf136d95c Use basestring class when testing to see if an object is a string to support 
both Unicode and byte strings.

433651
 2008-02-21 11:09:53 -05:00
Rob Crittenden 75ad48272a IE 6 doesn't support transparent PNG 
Remove stray character and a debug line from the CSS

429984
 2008-02-20 17:17:21 -05:00
Rob Crittenden 936b84f569 Include and use policy icon in the UI 
430954
 2008-02-20 10:53:31 -05:00
Rob Crittenden b5272bd8e0 Objects used by new CSS layout. 2008-02-20 10:45:00 -05:00
Rob Crittenden 7e5f1514b2 Only show Delete button for admins, editors and don't let user delete them self 
Resolves 433382
 2008-02-18 22:41:28 -05:00
Rob Crittenden c47248c5d8 Update of CSS from Máirín Duffy including some per-object images 2008-02-19 16:43:32 -05:00
Rob Crittenden 65960a2e58 Use the proper access methods in IPA policy subcontroller. 
Resolves 433062
 2008-02-18 17:41:58 -05:00
Rob Crittenden 1380d9d9de Fix incorrect form label 
Resolves 432731
 2008-02-14 16:04:53 -08:00
Rob Crittenden 5f86f5a5fd Generate the multi-value entries needed when redirecting to the edit_user 
page. This avoids a Nonetype error.

Resolves 432106
 2008-02-08 17:34:23 -05:00
Rob Crittenden 1a38b6dfdf Install principalshow.kid 2008-02-08 17:49:49 -05:00
Rob Crittenden c50ebd9657 Don't set blank values so we don't end up with empty attributes 
Resolves 429895
 2008-01-30 09:31:03 -05:00
Rob Crittenden 97d9c235dd Set the license uniformly to GPLv2 only. 2008-02-04 15:15:52 -05:00
Rob Crittenden 15e2abaa25 Use orig_user_dict to get krbprincipalname when changing passwords. 
Add an extra exception handler so we don't return a 500 on errors.
 2008-01-31 17:38:21 -05:00
Rob Crittenden 3302dc7446 Enable server-side sessions. It is currently using files for sessions. 2008-01-23 09:45:46 -05:00
Rob Crittenden 42d5ddc559 Service principal deletion 2008-01-11 11:44:23 -05:00
Rob Crittenden dd28d4e6f6 Make button test consistent with rest of page 2008-01-07 16:02:40 -05:00
Simo Sorce a9e4e5a1e2 Finishe removing previous code to fetch keytabs 2007-12-21 12:31:31 -05:00
Rob Crittenden baaead2709 Allow for direct entry of group names when creating delegations. 
This requires a bit of trickery. I use the onblur() javascript function
to note when the field is left and store whatever was entered there.

Then when the page is submitted if a dn doesn't exist for that field
but they did enter something, do a lookup to see if there is a group by
that name.
 2007-12-13 04:32:22 -05:00
Rob Crittenden b5af99c51d Fix the UI indicators for mandatory fields. 
The source and target groups weren't highlighted but the entire block of
checkboxes was and it looked absolutely horrible.
 2007-12-12 15:18:28 -05:00
Rob Crittenden 5c217ce31a Change from "Common Name" to "Full Name" 2007-12-11 15:14:29 -05:00
Rob Crittenden 40ff6f21db Prompt user before downloading a keytab that this will create a new secret, 
breaking any existing keytabs for that principal.
 2007-12-06 11:56:14 -05:00
Rob Crittenden 592329af18 Use more common names for first and last name labels 2007-12-10 11:55:52 -05:00
Rob Crittenden ca8e71d938 Move the sort arrow to the left of the column title and don't overlap the text 2007-12-10 21:55:12 -05:00
Rob Crittenden f169641aae Use title case for field labels 2007-12-10 17:44:04 -05:00
Rob Crittenden 5e4a162954 Fix delegation in the UI and add a missing aci that allows writes. 
Make ipa-deldelegation more user-friendly.
 2007-12-07 16:08:12 -05:00
Rob Crittenden b75d735b7e Add default e-mail domain to the IPA configuration 2007-12-10 11:53:00 -05:00
Rob Crittenden 059e8f00ef Add principal management templates 2007-12-10 09:58:18 -05:00
Karl MacMillan 6243410bdd Install principal edit page files. -
Rob Crittenden b3fa02225a Add back in some CSS that was removed in the big UI update. 
This adds back required field colors and colored error and warning msgs.
 2007-12-05 16:15:52 -05:00
Rob Crittenden 99c676702b The uid_hidden field needs to be retained until after validation succeeds 
otherwise if it ever fails, uid_hidden will be lost which can cause uid
to not be set which cascades into lots of other errors.
 2007-12-06 17:00:38 -05:00