1133 Commits

Author SHA1 Message Date
Sunil Mohan Adapa
b331ba979d tor: Update menu item with generic name 2015-07-28 11:55:19 +05:30
Sunil Mohan Adapa
acf3a919f6 networks: Improvements to interface binding
- Fetch network interfaces list at the time of form creation instead of
  during definition.

- Add help text to interfaces list choice field.

- Don't write an explict check for requiring interface
  selection. required=True, which is default, takes care of that.

- Internationalize the empty selection text.

- Update the empty selection text.

- Re-order interface parameter in the same order of priority/appearance.
2015-07-27 22:03:02 +05:30
Daniel Steglich
378d6b8d84 networks: Always bind connections to a device 2015-07-27 22:03:02 +05:30
James Valleroy
c171d89554 ldap: Actually read from stdin if available.
I made a silly mistake while merging, sorry.
2015-07-26 20:33:25 -04:00
James Valleroy
7a464d6f5f first_boot: Switch to new ldap action. 2015-07-26 16:34:29 -04:00
Sunil Mohan Adapa
8c155bfafb ikiwiki: Update LDAP auth configuration
- Make the configuration work for new style user/group structure.
2015-07-26 16:33:06 -04:00
Sunil Mohan Adapa
9be829342e Add augeas-tools and ldapscripts as dependency 2015-07-26 16:33:06 -04:00
Sunil Mohan Adapa
d363d8db26 users: Use ldapscripts for user management
- Merge all ldap actions into one action.

- Setup ldapscripts using augeas.

- Use the default mechanisms used by ldapscripts.

- Remove adding admin users to 'sudo' group.  Mixing LDAP groups and
  local groups is not a good practice.  'admin' LDAP group will be added
  to sudoers in another patch to freedombox-setup.

- Make all users posixAccount and all groups posixGroup for simplicity.
  Shell access can be restricted in other ways.

- Work around ldapscripts not able to set password using SASL auth.

- Work around ldapscripts having issues with current locale.
2015-07-26 16:33:06 -04:00
Sunil Mohan Adapa
44ec564fd7 users: Fix incorrect replacement of _()
Apologies for the regression.
2015-07-26 13:34:23 -04:00
James Valleroy
d144f6634a Bug fixes:
Check if ejabberd is installed when running actions triggered by signals.
Encode LDAP passwords as bytes.
2015-07-23 22:30:50 +05:30
James Valleroy
97220b89f3 xmpp: Update module layout to match other modules.
Split forms and views into separate files.
Add configuration form to enable/disable the service.
2015-07-23 22:30:50 +05:30
James Valleroy
6bbc622b1a xmpp: Remove account registration and in-band configuration. 2015-07-23 22:30:50 +05:30
James Valleroy
b840875c16 xmpp: Always use LDAP authentication. 2015-07-23 22:30:50 +05:30
James Valleroy
cb7c9c26f7 Send LDAP user passwords to actions through stdin, not as arguments. 2015-07-23 22:30:50 +05:30
James Valleroy
86580c9121 Revert "Don't print LDAP user passwords in log."
This reverts commit b1c9c81d58c80d6b313dd2b8a5c5727ecdf6ac49.

Conflicts:
	plinth/modules/first_boot/forms.py
2015-07-23 22:30:50 +05:30
Sunil Mohan Adapa
cc365fb2eb config: Hide time zone not-set option normally
- After a time zone is set, don't show the option 'No time zone set' any
  more.

- Change the label to 'no time zone set'

- Update the help text to 'time zone' instead of 'timezone'.
2015-07-23 08:58:30 +05:30
Bharath Chava
d93fbba51f Issue 88: When no timezone is set, Plinth shows first one in list. 2015-07-22 22:56:28 +05:30
Sunil Mohan Adapa
d650273760 xmpp: Use webserver action utilties 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
c9d918157c transmission: Remove get-enabled from actions 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
384867dc25 roundcube: Remove get-enabled from actions 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
4906384b39 privoxy: Remove get-enabled from actions 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
cedec9b624 mumble: Remove get-enabled from actions 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
48da6862b9 ikiwiki: Remove get-enabled from actions 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
7cf47bbcb2 deluge: Remove get-enabled from actions
- Use webserver action utilites.

- Move status getting to module __init__.py so that it can be turned
  into an API in future for further simplificaiton.

- Apply this to other modules too in future commits.
2015-07-19 19:54:13 -04:00
Sunil Mohan Adapa
ac19238e91 Add utilites for Apache configuration management 2015-07-19 19:54:13 -04:00
Sunil Mohan Adapa
07e2c0ce14 Don't use actions to check if service is running
- To check whether a service is running does not require root
  privileges.  This can directly be done from a module without any
  action.

- Since actions are allowed to be run using sudo, introducing
  unnecessary sub-commands increases attack surface.

- Simple functions calls are unnecessarily being converted to command
  line invocations and involve parsing response.

- There is a lot of repeated code because of this that can be
  eliminated.

- To generalize this, we need to make all non-root system operations
  directly from module instead of delegating to action commands.
2015-07-19 19:54:13 -04:00
Sunil Mohan Adapa
3b6af2f29c Use only action utilities for service management
- When disabling a service, ignore if unable to stop the service.
2015-07-19 19:54:13 -04:00
Sunil Mohan Adapa
517c364559 pagekite: Move to using python3-augeas
- Merge actions/pagekite_util.py into plinth/modules/pagekite/util.py.

- Rename plinth/modules/pagekite/util.py to utils.py.

- Add python-augeus as dependency.

- Move actions/util.py to plinth/action_utils.py and update services
  that use it.

- Rename _run() method to run() as it is being used publicly.

- Import the utils in a more conventional manner.

- Move all python2 bits to python3.
2015-07-19 15:37:43 -04:00
Sunil Mohan Adapa
2b86ce9fdb users: Remove unused code checking for LDAP user 2015-07-18 17:23:04 +05:30
Sunil Mohan Adapa
f35d4257c2 users: Improve Django group handling with LDAP
- Create groups on first boot a bit more safely

- Use get_or_create instead of get() and create()

- Fix issue with not showing a full list of groups in user modify page
  when there is are no users for that group.
2015-07-18 17:17:07 +05:30
Sunil Mohan Adapa
02269a93cc ikiwiki: Update the LDAP login prompt message 2015-07-18 17:14:05 +05:30
Sunil Mohan Adapa
b0d65b4ead users: Use checkboxes for groups during create 2015-07-14 21:23:02 +05:30
James Valleroy
fcc37a8e28 Create initial django groups during first_boot. 2015-07-13 19:50:59 +05:30
James Valleroy
dbd4dff52e Cleanup from switching group types. 2015-07-13 19:50:59 +05:30
James Valleroy
925fbe6cd2 Fix group management issues. 2015-07-13 19:50:59 +05:30
James Valleroy
32bb08c269 Also add admin users to posixGroup for sudo privileges. 2015-07-13 19:50:59 +05:30
James Valleroy
6ca38ba665 Switch LDAP groups from groupOfUniqueNames to groupOfNames, to work with libpam-ldapd. 2015-07-13 19:50:59 +05:30
James Valleroy
b1c9c81d58 Don't print LDAP user passwords in log. 2015-07-13 19:50:58 +05:30
James Valleroy
d65d2c4725 Fix group deletion. 2015-07-13 19:50:58 +05:30
James Valleroy
0eb3d35b5b Add group management to user editing form. 2015-07-13 19:50:58 +05:30
James Valleroy
197c95a7bf Add actions for LDAP group management. 2015-07-13 19:50:58 +05:30
James Valleroy
2adf14b8b7 Remove POSIX users. 2015-07-13 19:50:58 +05:30
James Valleroy
d672e24ac4 Add posixAccount class for LDAP users. 2015-07-13 19:50:58 +05:30
James Valleroy
1f2dc5e730 Update LDAP admin group when renaming/deleting users. 2015-07-13 19:50:58 +05:30
James Valleroy
2c5b829fb0 ikiwiki: Authorize users from admin or wiki group. 2015-07-13 19:50:58 +05:30
James Valleroy
f4835b4515 Add new LDAP users to admin group. 2015-07-13 19:50:58 +05:30
James Valleroy
82cf4df0bc ikiwiki: Add required package for changing wiki settings. 2015-07-13 19:50:58 +05:30
James Valleroy
70e0c4f61a ikiwiki: Enable HTTP auth using LDAP. 2015-07-13 19:50:58 +05:30
James Valleroy
7d80c95048 ikiwiki: Fix indentation in setup automators. 2015-07-13 19:50:58 +05:30
Sunil Mohan Adapa
124656b5ba Add django-stronghold as dependency 2015-07-01 21:43:07 +05:30