IntenseWebs/freeipa
3
0 Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-10-24 14:17:41 -05:00
Code Issues Packages Projects Releases Wiki Activity
8,772 Commits 11 Branches 63 Tags
6a55174bb6c24632bbd46c8421399343e1282ce0
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jan Cholasta 6a55174bb6 install: fix command line option validation 
The code which calls the validators was accidentally removed, re-add it.

https://fedorahosted.org/freeipa/ticket/5386
https://fedorahosted.org/freeipa/ticket/5391
https://fedorahosted.org/freeipa/ticket/5392

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-11-05 10:33:01 +01:00
Jan Cholasta 2f3450249d vault: fix private service vault creation 
https://fedorahosted.org/freeipa/ticket/5361

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-10-13 14:34:00 +02:00
Jan Cholasta 61bdbd6e47 upgrade: make sure ldap2 is connected in export_kra_agent_pem 
https://fedorahosted.org/freeipa/ticket/5360

Reviewed-By: Ales 'alich' Marecek <amarecek@redhat.com>
 2015-10-12 15:51:14 +02:00
Jan Cholasta 275e1482de schema: do not derive ipaVaultPublicKey from ipaPublicKey 
This is a workaround for DS bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1267782

https://fedorahosted.org/freeipa/ticket/5359

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2015-10-12 15:48:42 +02:00
Jan Cholasta 4b381b1503 vault: select a server with KRA for vault operations 
This uses the same mechanism which is used for the CA.

https://fedorahosted.org/freeipa/ticket/5302

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-10-08 13:42:58 +02:00
Jan Cholasta b035a2a114 install: always export KRA agent PEM file 
Export the file even when KRA is not installed locally so that vault commands
work on all IPA replicas.

https://fedorahosted.org/freeipa/ticket/5302

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-10-08 13:42:58 +02:00
Jan Cholasta 110e85cc74 install: fix KRA agent PEM file permissions 
This fixes CVE-2015-5284.

https://fedorahosted.org/freeipa/ticket/5347

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-10-08 13:41:08 +02:00
Jan Cholasta 6067824be4 install: fix ipa-server-install fail on missing --forwarder 
https://fedorahosted.org/freeipa/ticket/4517

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-10-01 14:59:41 +02:00
Jan Cholasta c388dbd4de install: fix invocation of KRAInstance.create_instance() 
Reviewed-By: Simo Sorce <ssorce@redhat.com>
 2015-10-01 07:42:33 +02:00
Jan Cholasta 4c39561261 install: fix kdcproxy user home directory 
https://fedorahosted.org/freeipa/ticket/5314

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-09-23 16:29:49 +02:00
Jan Cholasta 859590337a platform: add option to create home directory when adding user 
https://fedorahosted.org/freeipa/ticket/5314

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-09-23 16:29:49 +02:00
Jan Cholasta 0de8603183 install: create kdcproxy user during server install 
This change makes kdcproxy user creation consistent with DS and CA user
creation. Before, the user was created in the spec file, in %pre scriptlet
of freeipa-server.

https://fedorahosted.org/freeipa/ticket/5314

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-09-22 16:34:51 +02:00
Jan Cholasta 86edd6abeb install: Move unattended option to the general help section 
https://fedorahosted.org/freeipa/ticket/4517

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-09-22 12:09:22 +02:00
Jan Cholasta bed64a888a install: Add common base class for server and replica install 
https://fedorahosted.org/freeipa/ticket/4517

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-09-22 12:09:22 +02:00
Jan Cholasta 39f6f637a7 install: Support overriding knobs in subclasses 
https://fedorahosted.org/freeipa/ticket/4517

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-09-22 12:09:22 +02:00
Jan Cholasta 5137478fb8 install: support KRA update 
https://fedorahosted.org/freeipa/ticket/5250

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-09-17 14:55:54 +02:00
Jan Cholasta 0dfcf1d9db vault: add permissions and administrator privilege 
https://fedorahosted.org/freeipa/ticket/5250

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-09-17 14:55:54 +02:00
Jan Cholasta d3503043c4 vault: update access control 
Do not allow vault and container owners to manage owners. Allow adding vaults
and containers only if owner is set to the current user.

https://fedorahosted.org/freeipa/ticket/5250

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-09-17 14:55:54 +02:00
Jan Cholasta 5cf46b8936 vault: set owner to current user on container creation 
This reverts commit 419754b1c1.

https://fedorahosted.org/freeipa/ticket/5250

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-09-17 14:55:54 +02:00
Jan Cholasta 2964b019d9 baseldap: make subtree deletion optional in LDAPDelete 
https://fedorahosted.org/freeipa/ticket/5250

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-09-17 14:55:54 +02:00
Jan Cholasta 33aba6f35e Use byte literals where appropriate 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-09-17 11:08:43 +02:00
Jan Cholasta ba5201979d Use bytes instead of str where appropriate 
Under Python 2, "str" and "bytes" are synonyms.

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-09-17 11:08:43 +02:00
Jan Cholasta 23507e6124 Alias "unicode" to "str" under Python 3 
The six way of doing this is to replace all occurences of "unicode"
with "six.text_type". However, "unicode" is non-ambiguous and
(arguably) easier to read. Also, using it makes the patches smaller,
which should help with backporting.

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-09-17 11:08:43 +02:00
Jan Cholasta 60dd90cf77 config: allow user/host attributes with tagging options 
https://fedorahosted.org/freeipa/ticket/5295

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-09-16 15:01:34 +02:00
Jan Cholasta cc53526fd2 Decode script arguments using file system encoding 
This mimics Python 3's behavior, where sys.argv is automatically decoded
using file system encoding, as returned by sys.getfilesystemencoding(). This
includes reimplementation of os.fsdecode() from Python 3.

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-09-07 08:00:11 +02:00
Jan Cholasta cf9bf9dcaf Use six.python_2_unicode_compatible 
Rename __unicode__ to __str__ in classes which define it and use the
six.python_2_unicode_compatible decorator on them to make them compatible with
both Python 2 and 3.

Additional changes were required for the ipapython.dnsutil.DNSName class,
because it defined both __str__ and __unicode__.

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-09-07 08:00:11 +02:00
Jan Cholasta ebdfa4380b Use six.with_metaclass to specify metaclasses 
Metaclass specification is incompatible between Python 2 and 3. Use the
six.with_metaclass helper to specify metaclasses.

Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-09-07 08:00:11 +02:00
Jan Cholasta 198908ec78 ldap: Make ldap2 connection management thread-safe again 
This fixes the connection code in LDAPClient to not store the LDAP connection
in an attribute of the object, which in combination with ldap2's per-thread
connections lead to race conditions resulting in connection failures. ldap2
code was updated accordingly.

https://fedorahosted.org/freeipa/ticket/5268

Reviewed-By: Tomas Babej <tbabej@redhat.com>
 2015-09-04 13:31:46 +02:00
Jan Cholasta 0914cb663e install: Fix SASL mappings not added in ipa-server-install 
Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
 2015-08-27 16:05:11 +02:00
Jan Cholasta e9a76c3d12 cert renewal: Automatically update KRA agent PEM file 
https://fedorahosted.org/freeipa/ticket/5253

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2015-08-27 15:53:42 +02:00
Jan Cholasta 43ee695195 cert renewal: Include KRA users in Dogtag LDAP update 
https://fedorahosted.org/freeipa/ticket/5253

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2015-08-27 15:53:42 +02:00
Jan Cholasta aebb72e1fb spec file: Add Requires(post) on selinux-policy 
This prevents ipa-server-upgrade failures on SELinux AVCs because of old
selinux-policy version.

https://fedorahosted.org/freeipa/ticket/5256

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Martin Kosek <mkosek@redhat.com>
 2015-08-26 08:19:32 +02:00
Jan Cholasta 01dd951ddc vault: Add container information to vault command results 
https://fedorahosted.org/freeipa/ticket/5150

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-08-19 10:39:25 +02:00
Jan Cholasta 29cee7a4bc vault: Fix vault-find with criteria 
https://fedorahosted.org/freeipa/ticket/5212

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-08-19 10:28:27 +02:00
Jan Cholasta ff1e66375c install: Fix replica install with custom certificates 
https://fedorahosted.org/freeipa/ticket/5226

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-08-18 16:24:19 +02:00
Jan Cholasta d9e9e5088f vault: Fix param labels in output of vault owner commands 
https://fedorahosted.org/freeipa/ticket/5214

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-08-18 11:17:29 +02:00
Jan Cholasta d2da0d89d1 baseldap: Allow overriding member param label in LDAPModMember 
https://fedorahosted.org/freeipa/ticket/5214

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-08-18 11:17:29 +02:00
Jan Cholasta 391ccabb9f ULC: Prevent preserved users from being assigned membership 
https://fedorahosted.org/freeipa/ticket/5170

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-08-13 16:41:03 +02:00
Jan Cholasta a651be3eec install: Fix server and replica install options 
https://fedorahosted.org/freeipa/ticket/5184

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-08-12 16:42:01 +02:00
Jan Cholasta d6e701a793 spec file: Update minimum required version of krb5 
Automatically require the krb5 version used at build time.

https://fedorahosted.org/freeipa/ticket/5132

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2015-07-15 11:02:32 +00:00
Jan Cholasta ba31b41569 spec file: Move /etc/ipa/kdcproxy to the server subpackage 
The directory was in the python subpackage, but that broke client-only
build. We don't want the directory to be installed on clients anyway,
since it is part of a server-side feature.

Reviewed-By: Christian Heimes <cheimes@redhat.com>
 2015-07-15 10:46:18 +00:00
Jan Cholasta 7c0e7f7e3c spec file: Update minimal versions of required packages 
https://fedorahosted.org/freeipa/ticket/5103

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
 2015-07-08 16:08:06 +02:00
Jan Cholasta 232458a222 ipalib: Fix skip_version_check option 
This reverts commit ea7f392bb9.

The option can be either set in IPA config file or specified as
'ipa -e skip_version_check=1 [COMMAND]'.

https://fedorahosted.org/freeipa/ticket/4768

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-07-08 12:36:19 +00:00
Jan Cholasta e43296ba9a replica prepare: Do not use entry after disconnecting from LDAP 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 5b39bc1003 plugable: Remove unused call method of Plugin 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 2b12bca660 plugable: Specify plugin base classes and modules using API properties 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 4b277d0477 plugable: Change is_production_mode to method of API 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 1a21fd971c plugable: Remove SetProxy, DictProxy and MagicDict 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta e9c9e3f009 ipaplatform: Do not use MagicDict for KnownServices 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta b1fc875c3a plugable: Lock API on finalization rather than on initialization 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 860088208b plugable: Do not use DictProxy for API 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta e39fe4ed31 plugable: Pass API to plugins on initialization rather than using set_api 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 2d1515323a plugable: Load plugins only from modules imported by API 
Previously all plugin modules imported from anywhere were added to the API.

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 481f8ddaa3 plugable: Specify plugins to import in API by module names 
This change removes the automatic plugins sub-package magic and allows
specifying modules in addition to packages.

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 7715d5bb04 ipalib: Move find_modules_in_dir from util to plugable 
https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta fe2accf776 ipalib: Load ipaserver plugins when api.env.in_server is True 
https://fedorahosted.org/freeipa/ticket/3090
https://fedorahosted.org/freeipa/ticket/5073

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta f87ba5ee08 plugable: Move plugin base class and override logic to API 
Each API object now maintains its own view of registered plugins. This change
removes the need to register plugin base classes.

This reverts commit 2db741e847.

https://fedorahosted.org/freeipa/ticket/3090
https://fedorahosted.org/freeipa/ticket/5073

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-07-01 13:05:30 +00:00
Jan Cholasta 1d60825138 User life cycle: change user-del flags to be CLI-specific 
Rename --permanently to --no-preserve.

https://fedorahosted.org/freeipa/ticket/3813

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-06-18 15:48:53 +02:00
Jan Cholasta c3a3d789b5 install: Fix ipa-replica-install not installing RA cert 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-18 14:48:31 +02:00
Jan Cholasta 69607250b9 User life cycle: provide preserved user virtual attribute 
https://fedorahosted.org/freeipa/ticket/3813

Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2015-06-15 16:13:22 +02:00
Jan Cholasta bae80b00a6 install: Fix logging setup in server and replica install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-12 05:46:31 +00:00
Jan Cholasta e7ac57e139 vault: Fix ipa-kra-install 
Use state in LDAP rather than local state to check if KRA is installed.
Use correct log file names.

https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 16:17:34 +00:00
Jan Cholasta cbcd86b500 install: Initialize API early in server and replica install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 16:17:34 +00:00
Jan Cholasta 81729e22d3 vault: Move vaults to cn=vaults,cn=kra 
https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 16:17:34 +00:00
Jan Cholasta 46cbe26b51 install: Migrate ipa-replica-install to the install framework 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 07:29:58 +00:00
Jan Cholasta 6f1ae05d8d install: Allow setting usage in CLI tools 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 07:29:58 +00:00
Jan Cholasta eb0251c56b install: Add support for positional arguments in CLI tools 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 07:29:58 +00:00
Jan Cholasta 1bf383e0cf install: Handle Knob cli_name and cli_aliases values consistently 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-10 07:29:58 +00:00
Jan Cholasta eb959221e1 install: Migrate ipa-server-install to the install framework 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-08 15:34:11 +00:00
Jan Cholasta 9e9c01fba2 install: Introduce installer framework ipapython.install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-08 15:34:11 +00:00
Jan Cholasta 08229a0c54 install: Move private_ccache from ipaserver to ipapython 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-06-08 15:33:36 +00:00
Jan Cholasta 4c70590c2a install: Fix external CA server install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-08 15:32:33 +00:00
Jan Cholasta 90e400e57e install: Fix CA-less server install 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-06-08 15:32:33 +00:00
Jan Cholasta e01095dfb3 install: Fix missing variable initialization in replica install 
https://fedorahosted.org/freeipa/ticket/4468
 2015-06-08 06:24:06 +00:00
Jan Cholasta f451af9a5a install: Move ipa-server-upgrade code into a module 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-05-29 08:00:33 +00:00
Jan Cholasta 3cb42e33c0 install: Move ipa-replica-install code into a module 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-05-29 08:00:33 +00:00
Jan Cholasta 6dabe6ebb2 install: Move ipa-server-install code into a module 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-05-29 08:00:33 +00:00
Jan Cholasta 5a7b153ad2 install: Make a package out of ipaserver.install.server 
Until ipa-server-install, ipa-replica-install and ipa-server-upgrade are merged
into a single code base, keep their respective bits in separate modules in the
package.

https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2015-05-29 08:00:33 +00:00
Jan Cholasta 454e8691cf client-install: Fix kinits with non-default Kerberos config file 
https://fedorahosted.org/freeipa/ticket/4808

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
 2015-05-21 07:42:24 +00:00
Jan Cholasta dc668b1b6a baseldap: Fix possible crash in LDAPObject.handle_duplicate_entry 2015-05-15 14:28:52 +00:00
Jan Cholasta 37784625eb Fix stop_tracking_certificates call in ipa-restore 
CAInstance.stop_tracking_certificates() no longer has dogtag_constants
argument.

https://fedorahosted.org/freeipa/ticket/4775

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-05-07 08:29:40 +00:00
Jan Cholasta b48cfe05e9 ldap: Remove IPASimpleLDAPObject 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta e2b0981d60 ldap: Use SimpleLDAPObject instead of IPASimpleLDAPObject in LDAPClient 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta db88498c95 ldap: Move schema handling from IPASimpleLDAPObject to LDAPClient 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta cbb112dd57 ldap: Use LDAPClient instead of IPASimpleLDAPObject in LDAPEntry 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 955885d8d9 ldap: Move value encoding from IPASimpleLDAPObject to LDAPClient 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 964e7e906a makeaci: Use LDAPClient instead of IPASimpleLDAPObject 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 8dca1cbd53 cainstance: Use LDAPClient instead of IPASimpleLDAPObject 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta e1f7bcfbea ldap: Use LDAPClient instead of IPASimpleLDAPObject in ldap2.modify_password 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 32505157ea ldap: Use LDAPClient bind and unbind methods in ldap2 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 232e04d861 ldap: Use LDAPClient bind and unbind methods in IPAdmin 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta c904dea06a ldap: Add bind and unbind methods to LDAPClient 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 8f263df245 ldap: Use LDAPClient connection management in ldap2 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 45d9b82f40 ldap: Use LDAPClient connection management in IPAdmin 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta 02e1ebe07c ldap: Add connection management to LDAPClient 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta a849bca53f ldap: Remove unused IPAdmin methods 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta b106450dbf ldap: Drop python-ldap tuple compatibility 
Reviewed-By: Petr Viktorin <pviktori@redhat.com>
 2015-04-16 06:58:31 +00:00
Jan Cholasta fa50068607 upload_cacrt: Fix empty cACertificate in cn=CAcert 
https://fedorahosted.org/freeipa/ticket/4565

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-03-19 14:38:34 +00:00
Jan Cholasta 572d68b539 client: Fix ca_is_enabled calls 
The command was added in API version 2.107. Old IPA servers may crash with
NetworkError on ca_is_enabled, handle this case gracefully.

https://fedorahosted.org/freeipa/ticket/4565

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-03-19 14:38:34 +00:00
Jan Cholasta 95a628cfb9 client-install: Do not crash on invalid CA certificate in LDAP 
When CA certificates in LDAP are corrupted, use the otherwise acquired CA
certificates from before.

https://fedorahosted.org/freeipa/ticket/4565

Reviewed-By: David Kupka <dkupka@redhat.com>
 2015-03-19 14:38:34 +00:00