1121 Commits

Author SHA1 Message Date
James Valleroy
b840875c16 xmpp: Always use LDAP authentication. 2015-07-23 22:30:50 +05:30
James Valleroy
cb7c9c26f7 Send LDAP user passwords to actions through stdin, not as arguments. 2015-07-23 22:30:50 +05:30
James Valleroy
86580c9121 Revert "Don't print LDAP user passwords in log."
This reverts commit b1c9c81d58c80d6b313dd2b8a5c5727ecdf6ac49.

Conflicts:
	plinth/modules/first_boot/forms.py
2015-07-23 22:30:50 +05:30
Sunil Mohan Adapa
cc365fb2eb config: Hide time zone not-set option normally
- After a time zone is set, don't show the option 'No time zone set' any
  more.

- Change the label to 'no time zone set'

- Update the help text to 'time zone' instead of 'timezone'.
2015-07-23 08:58:30 +05:30
Bharath Chava
d93fbba51f Issue 88: When no timezone is set, Plinth shows first one in list. 2015-07-22 22:56:28 +05:30
Sunil Mohan Adapa
d650273760 xmpp: Use webserver action utilties 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
c9d918157c transmission: Remove get-enabled from actions 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
384867dc25 roundcube: Remove get-enabled from actions 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
4906384b39 privoxy: Remove get-enabled from actions 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
cedec9b624 mumble: Remove get-enabled from actions 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
48da6862b9 ikiwiki: Remove get-enabled from actions 2015-07-19 19:56:05 -04:00
Sunil Mohan Adapa
7cf47bbcb2 deluge: Remove get-enabled from actions
- Use webserver action utilites.

- Move status getting to module __init__.py so that it can be turned
  into an API in future for further simplificaiton.

- Apply this to other modules too in future commits.
2015-07-19 19:54:13 -04:00
Sunil Mohan Adapa
ac19238e91 Add utilites for Apache configuration management 2015-07-19 19:54:13 -04:00
Sunil Mohan Adapa
07e2c0ce14 Don't use actions to check if service is running
- To check whether a service is running does not require root
  privileges.  This can directly be done from a module without any
  action.

- Since actions are allowed to be run using sudo, introducing
  unnecessary sub-commands increases attack surface.

- Simple functions calls are unnecessarily being converted to command
  line invocations and involve parsing response.

- There is a lot of repeated code because of this that can be
  eliminated.

- To generalize this, we need to make all non-root system operations
  directly from module instead of delegating to action commands.
2015-07-19 19:54:13 -04:00
Sunil Mohan Adapa
3b6af2f29c Use only action utilities for service management
- When disabling a service, ignore if unable to stop the service.
2015-07-19 19:54:13 -04:00
Sunil Mohan Adapa
517c364559 pagekite: Move to using python3-augeas
- Merge actions/pagekite_util.py into plinth/modules/pagekite/util.py.

- Rename plinth/modules/pagekite/util.py to utils.py.

- Add python-augeus as dependency.

- Move actions/util.py to plinth/action_utils.py and update services
  that use it.

- Rename _run() method to run() as it is being used publicly.

- Import the utils in a more conventional manner.

- Move all python2 bits to python3.
2015-07-19 15:37:43 -04:00
Sunil Mohan Adapa
2b86ce9fdb users: Remove unused code checking for LDAP user 2015-07-18 17:23:04 +05:30
Sunil Mohan Adapa
f35d4257c2 users: Improve Django group handling with LDAP
- Create groups on first boot a bit more safely

- Use get_or_create instead of get() and create()

- Fix issue with not showing a full list of groups in user modify page
  when there is are no users for that group.
2015-07-18 17:17:07 +05:30
Sunil Mohan Adapa
02269a93cc ikiwiki: Update the LDAP login prompt message 2015-07-18 17:14:05 +05:30
Sunil Mohan Adapa
b0d65b4ead users: Use checkboxes for groups during create 2015-07-14 21:23:02 +05:30
James Valleroy
fcc37a8e28 Create initial django groups during first_boot. 2015-07-13 19:50:59 +05:30
James Valleroy
dbd4dff52e Cleanup from switching group types. 2015-07-13 19:50:59 +05:30
James Valleroy
925fbe6cd2 Fix group management issues. 2015-07-13 19:50:59 +05:30
James Valleroy
32bb08c269 Also add admin users to posixGroup for sudo privileges. 2015-07-13 19:50:59 +05:30
James Valleroy
6ca38ba665 Switch LDAP groups from groupOfUniqueNames to groupOfNames, to work with libpam-ldapd. 2015-07-13 19:50:59 +05:30
James Valleroy
b1c9c81d58 Don't print LDAP user passwords in log. 2015-07-13 19:50:58 +05:30
James Valleroy
d65d2c4725 Fix group deletion. 2015-07-13 19:50:58 +05:30
James Valleroy
0eb3d35b5b Add group management to user editing form. 2015-07-13 19:50:58 +05:30
James Valleroy
197c95a7bf Add actions for LDAP group management. 2015-07-13 19:50:58 +05:30
James Valleroy
2adf14b8b7 Remove POSIX users. 2015-07-13 19:50:58 +05:30
James Valleroy
d672e24ac4 Add posixAccount class for LDAP users. 2015-07-13 19:50:58 +05:30
James Valleroy
1f2dc5e730 Update LDAP admin group when renaming/deleting users. 2015-07-13 19:50:58 +05:30
James Valleroy
2c5b829fb0 ikiwiki: Authorize users from admin or wiki group. 2015-07-13 19:50:58 +05:30
James Valleroy
f4835b4515 Add new LDAP users to admin group. 2015-07-13 19:50:58 +05:30
James Valleroy
82cf4df0bc ikiwiki: Add required package for changing wiki settings. 2015-07-13 19:50:58 +05:30
James Valleroy
70e0c4f61a ikiwiki: Enable HTTP auth using LDAP. 2015-07-13 19:50:58 +05:30
James Valleroy
7d80c95048 ikiwiki: Fix indentation in setup automators. 2015-07-13 19:50:58 +05:30
Sunil Mohan Adapa
124656b5ba Add django-stronghold as dependency 2015-07-01 21:43:07 +05:30
Sunil Mohan Adapa
6fd04808d5 Don't require login for logout page & minor fixes 2015-07-01 07:57:21 +05:30
fonfon
9321aa4952 made first_boot state0 public 2015-07-01 00:01:02 +05:30
fonfon
824a9091c1 use django-stronghold for authentication handling (instead of @login_required) 2015-07-01 00:01:02 +05:30
Sunil Mohan Adapa
0335ee9c32 deluge: Further improvements to actions
- Perform disable even when the service is not running.

- Improve checking if deluge is enabled.
2015-06-28 11:17:17 +05:30
Sunil Mohan Adapa
2f56a516de ikiwiki: Minor styling and fix
- Minor styling update in service description.

- Fix a minor issue that a2query outputs on STDERR when the
  configuration is disabled.
2015-06-28 11:15:52 +05:30
Sunil Mohan Adapa
21e12b3c1f deluge: Perform setup operations during enable
We should use on_install setups as sparingly as possible.  We don't get
callbacks in cases where package is already installed.  Until we
implement our versioned setup mechanism, doing some idempotent setup()
during enable() is much safer.
2015-06-26 18:52:26 +05:30
James Valleroy
a2fdd879d9 deluge, ikiwiki: Notify when service is enabled/disabled. 2015-06-26 17:34:38 +05:30
James Valleroy
2871519322 deluge: enable/disable refactoring 2015-06-26 17:34:38 +05:30
James Valleroy
5712c3d9ea deluge: Also disable the service when stopping. 2015-06-26 17:34:38 +05:30
James Valleroy
fd73bcd734 deluge: Run setup and enable after install. 2015-06-26 17:34:38 +05:30
James Valleroy
9c717246ee deluge: Install apache conf file during Plinth install. 2015-06-26 17:34:37 +05:30
James Valleroy
9d6ceaa0ff ikiwiki: Use a2query to check if enabled. 2015-06-26 17:34:37 +05:30