Pavel Zuna
356375ef18
Make ldap2.add_entry proof to None values, because python-ldap hate'em.
2009-09-08 13:38:25 -04:00
Pavel Zuna
91d01a532a
Introduce a list of attributes for which only MOD_REPLACE operations are generated.
2009-08-28 13:18:21 -04:00
Rob Crittenden
cab5525076
Enable ldapi connections in the management framework.
...
If you don't want to use ldapi then you can remove the ldap_uri setting
in /etc/ipa/default.conf. The default for the framework is to use
ldap://localhost:389/
2009-08-27 13:36:58 -04:00
Rob Crittenden
8780751330
Clean up some problems discovered with pylint and pychecker
...
Much of this is formatting to make pylint happy but it also fixes some
real bugs.
2009-08-12 13:18:15 -04:00
Pavel Zuna
b4d173d844
Fix bug in _get_syntax (it was always returning None).
...
Also prevent a few cases of double processing of arguments.
2009-08-03 23:01:44 -06:00
Pavel Zuna
3b613091bb
Import explode_dn from ldap.functions for backward compatibility with older version of python-ldap. Fix bug in add_entry_to_group.
...
Resolves 510149
2009-07-08 12:15:58 -04:00
Rob Crittenden
45a40635bb
Add class variable to indicate whether SSL is required or not.
...
Older python-ldap versions will crash if you call ldap.get_option()
on a value that has not been set.
2009-07-07 22:57:23 -04:00
Pavel Zuna
f59cab1ccd
Fix bug in ldap2.modify_password and make adding/removing members slightly more efficient.
2009-07-07 22:56:56 -04:00
Pavel Zuna
79ac9c6c78
Add conversion of attribute name synonyms when generating modlists.
2009-06-15 13:11:44 -04:00
Pavel Zuna
ad54fc3399
Add support for incomplete (truncated) search results.
...
ldap2.find_entries now returns a tuple containing 2 values. First,
a list of entries (dn, entry_attrs), Second, the truncated flag. If
the truncated flag is True, search results hit a server limitation
and are incomplete.
This patch also removes decoding of non-string scalar python types into
unicode (they are left unchanged).
2009-06-15 11:18:55 -04:00
Pavel Zuna
6e84f08143
Fix bugs in ldap2.
2009-06-12 15:10:57 -04:00
Pavel Zuna
87bfd6b21a
Fix bug in ldap2.normalize_dn.
...
DN was always returned as lower-case, sometimes resulting in 2 RDN values with different cases when creating entries.
2009-06-10 11:51:15 -04:00
Pavel Zuna
85bc20b0df
Make it easier to search for a single entry by attribute value (find_entry_by_attr). Fix minor search filter generation issues.
2009-05-26 13:40:46 -04:00
Pavel Zuna
708fe4dfe5
Make ldap2 always return attribute names as lowercase. Add Encoder to ldap2 base classes and use encode_args/decode_retval where applicable.
2009-05-22 15:58:00 -06:00
Rob Crittenden
762d38a734
Fix password setting on python 2.4 systems (it doesn't like None for oldpw)
2009-05-21 22:43:10 -04:00
Rob Crittenden
e5bec4ae39
Schema change so the nisnetgroup triples work properly.
...
If we use cn for hostname there is no easy way to distinguish between
a host and a hostgroup. So adding a fqdn attribute to be used to store
the hostname instead.
2009-05-19 09:54:17 -04:00
Rob Crittenden
252e9b61eb
Fix a comment and some typos
2009-05-13 14:18:01 -04:00
Pavel Zuna
8eabf068fb
Make search filter generation a bit safer. Minor bug fixes/code improvements.
2009-04-30 16:17:44 -04:00
Pavel Zuna
24790748fe
Add method to generate DN from attribute directly, without making RDN first.
2009-04-30 13:27:49 -04:00
Rob Crittenden
b7438c3da2
Use XML rather than string routines to handle response from dogtag Remove trailing CR/LF from the password file
2009-04-28 17:16:18 -04:00
Pavel Zuna
7d0bd4b895
Rename errors2.py to errors.py. Modify all affected files.
2009-04-23 10:29:14 -04:00
Pavel Zuna
5fa7c76f72
Fix filter generator in ldapapi. Shouldn't produce invalid filters anymore.
2009-04-23 10:23:28 -04:00
Pavel Zuna
32ad0ab011
Throw AlreadyGroupMember instead of EmptyModlist when trying to re-add member to a group.
2009-04-22 15:18:51 -04:00
Pavel Zuna
9943b80841
Change ldap2.__handle_errors into the global _handle_errors function.
2009-04-22 15:17:32 -04:00
Pavel Zuna
58c10898c7
Make it possible to construct partial match filters using make_filter_* methods. Add missing _sasl_auth variable.
2009-04-22 15:17:28 -04:00
Rob Crittenden
cf8ed7b77a
Convert the RA plugin to use nsslib and remove the configure methods
2009-04-20 14:01:24 -04:00
Rob Crittenden
fdf03cb07b
Remove unwanted white space
2009-04-20 13:59:41 -04:00
Rob Crittenden
64fa3dd4c3
Finish work replacing the errors module with errors2
...
Once this is committed we can start the process of renaming errors2 as errors.
I thought that combinig this into one commit would be more difficult to
review.
2009-04-20 13:58:26 -04:00
Rob Crittenden
ab73041174
Renaming the backend ldap plugin to ldapapi.py to prevent module import issues
2009-04-06 13:52:32 -04:00
Pavel Zuna
82bc30d17e
Use full OID for LDAP SYNTAX identification. Don't convert Booleans and Integers into respective python types as their ranges might not match. Rename module-scope functions.
2009-04-06 11:23:25 -04:00
root
dc3547cd7b
Add new LDAP backend plugin.
2009-04-03 14:08:13 -04:00
Rob Crittenden
484eff1016
Implement an installer for the Dogtag certificate system.
...
The CA is currently not automatically installed. You have to pass in the
--ca flag to install it.
What works:
- installation
- unistallation
- cert/ra plugins can issue and retrieve server certs
What doesn't work:
- self-signed CA is still created and issues Apache and DS certs
- dogtag and python-nss not in rpm requires
- requires that CS be in the "pre" install state from pkicreate
2009-04-03 14:06:09 -04:00
Jason Gerard DeRose
a6294ba041
Renamed remaining plugins still using f_* b_* convention
2009-04-01 10:34:57 -04:00
Rob Crittenden
cf09aab18b
Allow a search using only the exact search filter
2009-03-25 11:02:52 -04:00
Rob Crittenden
be0cac932a
Update objectclasses for groups, by default not posix groups.
...
This change depends on DS bugs 487574 and 487725. Groups cannot be
promoted properly without these fixed. It will fail with an
Object Class violation because gidNumber isn't set.
2009-02-27 23:18:19 -05:00
Jason Gerard DeRose
7e23ee7cc6
Removed 'Assert False' that was mistakingly left in cert.py; small cleanup in cert.py and ra.py imports
2009-02-17 16:03:10 -05:00
Jason Gerard DeRose
4ab133c3cb
Implemented more elegant way for entire plugin module to be conditionally skipped; updated cert.py and ra.py modules to use this
2009-02-17 16:03:10 -05:00
Jason Gerard DeRose
e0fe732318
Added env.enable_ra variable and change cert.py and ra.py plugin modules to register plugins conditionally
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
0e6e11d2e3
Cleaned up ra.revoke_certificate() and ra.take_certificate_off_hold(); added more tests in integration.py
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
80df8f6e15
Some cleanup in ra.request_certificate()
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
1518772d75
More work on ra.check_request_status() and ra.get_certificate()
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
97c04c491b
Continued cleanup cert/ra plugins
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
d7a1e61da3
Fixed a few problems in ra.py backend plugin
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
a8c3f054d4
Started cleanup work on ra plugin; fixed problem in api.bootstrap() when process does not have permision to open log file
2009-02-17 16:03:08 -05:00
Jason Gerard DeRose
ad901da259
Renamed b_ra.py plugin module to ra.py
2009-02-17 16:03:08 -05:00
Rob Crittenden
2df3ef411d
Fix AttributeError on python 2.4 when referencing _ldap.dn
2009-02-13 14:12:34 -05:00
Jakub Hrozek
ee87a281b5
Add make_xxx_dn routines for policy
2009-02-10 14:10:35 -05:00
Jakub Hrozek
9fe026b47d
Fix the default search scope
2009-02-10 14:10:12 -05:00
Jakub Hrozek
58ae191a5a
Allow specifying search scope in {ldap,servercore}.search
2009-02-09 13:13:18 -05:00
Jason Gerard DeRose
c2b0c80140
Started work on a much simplified mod_python server
2009-02-03 15:29:05 -05:00
