Pavel Zuna
87bfd6b21a
Fix bug in ldap2.normalize_dn.
...
DN was always returned as lower-case, sometimes resulting in 2 RDN values with different cases when creating entries.
2009-06-10 11:51:15 -04:00
Martin Nagy
1bc786e379
Use LDAP instead of flat file for zone storage
2009-06-02 12:32:01 +02:00
Martin Nagy
d1b3f39258
Move the __ldap_mod function to the Service class
...
We were duplicating it for KrbInstance and DsInstance. Since we will
also need it for BindInstance as well, it will be better if it is in the
Service class instead.
2009-06-02 12:30:59 +02:00
Pavel Zuna
85bc20b0df
Make it easier to search for a single entry by attribute value (find_entry_by_attr). Fix minor search filter generation issues.
2009-05-26 13:40:46 -04:00
Pavel Zuna
708fe4dfe5
Make ldap2 always return attribute names as lowercase. Add Encoder to ldap2 base classes and use encode_args/decode_retval where applicable.
2009-05-22 15:58:00 -06:00
Rob Crittenden
762d38a734
Fix password setting on python 2.4 systems (it doesn't like None for oldpw)
2009-05-21 22:43:10 -04:00
Rob Crittenden
e5bec4ae39
Schema change so the nisnetgroup triples work properly.
...
If we use cn for hostname there is no easy way to distinguish between
a host and a hostgroup. So adding a fqdn attribute to be used to store
the hostname instead.
2009-05-19 09:54:17 -04:00
Rob Crittenden
7ac2b8ae45
Use the csv module instead of my own hackish lexer.
...
The first character in a line is used to determine how the line will be
quoted. If it begins with no quote we use '. If it begins with either
' or " we use that character. So if you have a quoted string and you don't
want it to be considered a comma-separated value put the other quote string
around the whole block.
2009-05-19 09:49:01 -04:00
Rob Crittenden
9147f0da69
Don't pass non-existent arguments to _handle_errors()
2009-05-19 09:48:35 -04:00
Rob Crittenden
252e9b61eb
Fix a comment and some typos
2009-05-13 14:18:01 -04:00
Rob Crittenden
f06bb4fca7
Drop the binary subtype. This usage is deprecated according to Rich M.
2009-05-13 14:17:31 -04:00
Rob Crittenden
1c31b5bc08
Add a reason to the NotFound exception so we can provide more robust errors
2009-05-13 14:16:44 -04:00
Rob Crittenden
064240def3
Fix replica installation for self-signed CA (no dogtag)
2009-05-04 17:42:03 -04:00
Rob Crittenden
0dfb451c3f
Utilize the new dogtag library for retrieving the CA cert chain
2009-05-04 16:58:28 -04:00
Rob Crittenden
dfe9db5548
Add signing profile to CA installation so we can sign the firefox jar file.
...
Use the requestId we get back from the CA when requesting the RA agent cert
and use that to issue the certificate rather than hardcoding 7.
This also adds some clean-up of file permissions and leaking fds
2009-05-04 16:54:42 -04:00
Pavel Zuna
8eabf068fb
Make search filter generation a bit safer. Minor bug fixes/code improvements.
2009-04-30 16:17:44 -04:00
Pavel Zuna
24790748fe
Add method to generate DN from attribute directly, without making RDN first.
2009-04-30 13:27:49 -04:00
Rob Crittenden
b7438c3da2
Use XML rather than string routines to handle response from dogtag Remove trailing CR/LF from the password file
2009-04-28 17:16:18 -04:00
Pavel Zuna
7d0bd4b895
Rename errors2.py to errors.py. Modify all affected files.
2009-04-23 10:29:14 -04:00
Pavel Zuna
5fa7c76f72
Fix filter generator in ldapapi. Shouldn't produce invalid filters anymore.
2009-04-23 10:23:28 -04:00
Pavel Zuna
32ad0ab011
Throw AlreadyGroupMember instead of EmptyModlist when trying to re-add member to a group.
2009-04-22 15:18:51 -04:00
Pavel Zuna
9943b80841
Change ldap2.__handle_errors into the global _handle_errors function.
2009-04-22 15:17:32 -04:00
Pavel Zuna
58c10898c7
Make it possible to construct partial match filters using make_filter_* methods. Add missing _sasl_auth variable.
2009-04-22 15:17:28 -04:00
Rob Crittenden
cf8ed7b77a
Convert the RA plugin to use nsslib and remove the configure methods
2009-04-20 14:01:24 -04:00
Rob Crittenden
9182c10b03
Issue DS and Apache server certs during CA installation.
...
Notes:
- will create a CA instance (pki-ca) if it doesn't exist
- maintains support for a self-signed CA
- A signing cert is still not created so Firefox autoconfig still won't work
2009-04-20 14:01:00 -04:00
Rob Crittenden
fdf03cb07b
Remove unwanted white space
2009-04-20 13:59:41 -04:00
Rob Crittenden
64fa3dd4c3
Finish work replacing the errors module with errors2
...
Once this is committed we can start the process of renaming errors2 as errors.
I thought that combinig this into one commit would be more difficult to
review.
2009-04-20 13:58:26 -04:00
Rob Crittenden
ab73041174
Renaming the backend ldap plugin to ldapapi.py to prevent module import issues
2009-04-06 13:52:32 -04:00
Pavel Zuna
82bc30d17e
Use full OID for LDAP SYNTAX identification. Don't convert Booleans and Integers into respective python types as their ranges might not match. Rename module-scope functions.
2009-04-06 11:23:25 -04:00
root
dc3547cd7b
Add new LDAP backend plugin.
2009-04-03 14:08:13 -04:00
Rob Crittenden
484eff1016
Implement an installer for the Dogtag certificate system.
...
The CA is currently not automatically installed. You have to pass in the
--ca flag to install it.
What works:
- installation
- unistallation
- cert/ra plugins can issue and retrieve server certs
What doesn't work:
- self-signed CA is still created and issues Apache and DS certs
- dogtag and python-nss not in rpm requires
- requires that CS be in the "pre" install state from pkicreate
2009-04-03 14:06:09 -04:00
Jason Gerard DeRose
a6294ba041
Renamed remaining plugins still using f_* b_* convention
2009-04-01 10:34:57 -04:00
Rob Crittenden
fcfcc76524
Translate variables on all lines and sort files to be updated
...
Only the dn and the first line of any entry that was spread across
multiple lines were getting passed through the template engine.
If we are given a directory to process, sort the files in that directory
so the order can be predicted. Some updates rely on others.
2009-03-25 11:02:59 -04:00
Rob Crittenden
7d19cee7fc
DNA is now configured using an update file
2009-03-25 11:02:55 -04:00
Rob Crittenden
cf09aab18b
Allow a search using only the exact search filter
2009-03-25 11:02:52 -04:00
Rob Crittenden
233a4cb5fd
Raise a more specific error when a user lacks the proper permissions.
...
The info part of the message will contain details on what permission
failed on what attribute.
2009-03-25 11:02:44 -04:00
Rob Crittenden
be0cac932a
Update objectclasses for groups, by default not posix groups.
...
This change depends on DS bugs 487574 and 487725. Groups cannot be
promoted properly without these fixed. It will fail with an
Object Class violation because gidNumber isn't set.
2009-02-27 23:18:19 -05:00
Rob Crittenden
3fdf9abfce
Enforce netgroup uniqueness, allow netgroups to be members of netgroups
...
When adding an entry, convert a constraint violation of "already exists"
into a DuplicateEntry exception so the user gets a useful response
2009-02-27 12:57:21 -05:00
Jason Gerard DeRose
7e23ee7cc6
Removed 'Assert False' that was mistakingly left in cert.py; small cleanup in cert.py and ra.py imports
2009-02-17 16:03:10 -05:00
Jason Gerard DeRose
4ab133c3cb
Implemented more elegant way for entire plugin module to be conditionally skipped; updated cert.py and ra.py modules to use this
2009-02-17 16:03:10 -05:00
Jason Gerard DeRose
e0fe732318
Added env.enable_ra variable and change cert.py and ra.py plugin modules to register plugins conditionally
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
0e6e11d2e3
Cleaned up ra.revoke_certificate() and ra.take_certificate_off_hold(); added more tests in integration.py
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
80df8f6e15
Some cleanup in ra.request_certificate()
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
1518772d75
More work on ra.check_request_status() and ra.get_certificate()
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
97c04c491b
Continued cleanup cert/ra plugins
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
d7a1e61da3
Fixed a few problems in ra.py backend plugin
2009-02-17 16:03:09 -05:00
Jason Gerard DeRose
a8c3f054d4
Started cleanup work on ra plugin; fixed problem in api.bootstrap() when process does not have permision to open log file
2009-02-17 16:03:08 -05:00
Jason Gerard DeRose
ad901da259
Renamed b_ra.py plugin module to ra.py
2009-02-17 16:03:08 -05:00
Rob Crittenden
2df3ef411d
Fix AttributeError on python 2.4 when referencing _ldap.dn
2009-02-13 14:12:34 -05:00
Jakub Hrozek
c9311da3fd
Install policy schema
2009-02-13 13:04:49 -05:00
