[Freeipa-users] How to add multivalued attribute to UI

2015-09-16 Thread John Duino
Greetings! I am wanting to add a multivalued attribute (mailAlternateAddress, from objectClass:MailRecipient) to the User UI. We are running IPA 4.1.0-18.el7.centos.4.x86_64, on CentOS7. Adding it to the CLI was fairly straightforward. I have a plugin at /usr/share/ipa/ui/js/plugins/altemail/al

Re: [Freeipa-users] How to add multivalued attribute to UI

2015-09-16 Thread John Duino
You shot right past me there, Rob. Forgive my ignorance but I'm not sure what you are referring to when saying "this configured", or what you are calling metadata. What I included was the user plugin. The UI loads it without error. But it only supplies a single field (which is correct) that inc

Re: [Freeipa-users] How to add multivalued attribute to UI

2015-09-16 Thread John Duino
Oh, okay. I didn't realize the ipalib plugin affected the UI. Sure, I can share it. So in /usr/lib/python2.7/site-packages/ipalib/plugins/altemail.py is the following. I have also (at one point) had a validation function and a precallback (both currently not used when trying to simplify/test). V

Re: [Freeipa-users] How to add multivalued attribute to UI

2015-09-16 Thread John Duino
I found my mistake (I'd call it a typo but that would assume I knew what I was doing in the first place!) In altemail.js, when defining the fields to be pushed, I used "type:" instead of "$type:". Once I fixed that (and restarted IPA, and cleared browser cache), it works as expected. For complet

[Freeipa-users] How grant access to userPassword for System Accounts

2015-10-26 Thread John Duino
I am trying to hook our VoIP solution (sipxecs-based openUC) to our FreeIPA. But it appears that it wants to read-in the userPassword rather than just auth against the ldap. I know Directory Manager is the only account that has the ability to read userPassword, but is there a way to grant that t

Re: [Freeipa-users] How grant access to userPassword for System Accounts

2015-10-27 Thread John Duino
Hmmm seems I have been misinformed, then. And then why does it have a field for 'mapping' the password? Well, I think that's off-topic for the list. I'll dig more later today. -- John Duino - Original Message - From: "Alexander Bokovoy" To: "Joh

[Freeipa-users] How to determine cause/source of user lockout?

2016-05-17 Thread John Duino
Is there a (relatively easy) way to determine what is causing a user account to be locked out? The admin account on our 'primary' ipa host is locked out frequently, but somewhat randomly; sometimes it will be less than 5 minutes it is available, and other times several hours. ipa user-status admin