Rob Crittenden
c8ee910ff6
Issue an SSL server cert when joining the IPA domain
2009-05-04 17:41:06 -04:00
Rob Crittenden
2f7c6bc3db
Add python-nss as a dependency
2009-05-04 17:01:57 -04:00
Rob Crittenden
0dfb451c3f
Utilize the new dogtag library for retrieving the CA cert chain
2009-05-04 16:58:28 -04:00
Rob Crittenden
8424ea8c03
A class for dealing with a temporary NSS certificate database
2009-05-04 16:56:12 -04:00
Rob Crittenden
dfe9db5548
Add signing profile to CA installation so we can sign the firefox jar file.
...
Use the requestId we get back from the CA when requesting the RA agent cert
and use that to issue the certificate rather than hardcoding 7.
This also adds some clean-up of file permissions and leaking fds
2009-05-04 16:54:42 -04:00
Pavel Zuna
36c239cda4
Add DNS management plugin port to the new ldap backend.
2009-04-30 16:17:49 -04:00
Pavel Zuna
8eabf068fb
Make search filter generation a bit safer. Minor bug fixes/code improvements.
2009-04-30 16:17:44 -04:00
Pavel Zuna
9992b23a08
Change help interface to display builtin commands and a list of topics based on plugin modules.
2009-04-30 15:55:16 -04:00
Pavel Zuna
75b551fd5e
Use right attribute name for e-mail in user2 plugin.
2009-04-30 13:50:05 -04:00
Pavel Zuna
24790748fe
Add method to generate DN from attribute directly, without making RDN first.
2009-04-30 13:27:49 -04:00
Rob Crittenden
21ccdec860
Add missing required attribute, nisdomainname
2009-04-30 13:26:27 -04:00
Rob Crittenden
536b215078
Use correct attribute for e-mail address
...
Resolves 498269
2009-04-29 13:51:47 -04:00
Jason Gerard DeRose
3f4a0a2d77
Fixed cli.run() catching SystemExit exception under Python2.4
...
Resolves BZ #498088
2009-04-28 22:29:10 -04:00
Rob Crittenden
b7438c3da2
Use XML rather than string routines to handle response from dogtag Remove trailing CR/LF from the password file
2009-04-28 17:16:18 -04:00
David O'Brien
763c7ef914
trivial update to standardize terms in docstring
2009-04-28 13:32:01 -04:00
Rob Crittenden
bbbac4b24f
Fix bind zone installer
2009-04-27 15:44:26 -04:00
Rob Crittenden
d5290a60f9
Utilities for dealing with dogtag
2009-04-24 16:22:38 -04:00
Rob Crittenden
298d5fbce4
Import the RequiresRoot error and make note to replace this at some point
2009-04-24 16:22:22 -04:00
Pavel Zuna
7d0bd4b895
Rename errors2.py to errors.py. Modify all affected files.
2009-04-23 10:29:14 -04:00
Pavel Zuna
596d410471
Make LDAP entry output slightly nicer, don't print u's in front of unicode strings etc.
2009-04-23 10:25:51 -04:00
Pavel Zuna
5fa7c76f72
Fix filter generator in ldapapi. Shouldn't produce invalid filters anymore.
2009-04-23 10:23:28 -04:00
Pavel Zuna
32ad0ab011
Throw AlreadyGroupMember instead of EmptyModlist when trying to re-add member to a group.
2009-04-22 15:18:51 -04:00
Pavel Zuna
4e48e1fbf7
Introduce AlreadyGroupMember exception, raised when a member is attempted to be re-added to a group.
2009-04-22 15:18:47 -04:00
Pavel Zuna
9943b80841
Change ldap2.__handle_errors into the global _handle_errors function.
2009-04-22 15:17:32 -04:00
Pavel Zuna
58c10898c7
Make it possible to construct partial match filters using make_filter_* methods. Add missing _sasl_auth variable.
2009-04-22 15:17:28 -04:00
Pavel Zuna
af82879009
Add user plugin port with some bugs fixed to the new LDAP backend.
2009-04-22 15:16:51 -04:00
Pavel Zuna
9ecbd845d4
Add conditional (env.use_ldap2 is True) modifications required by new LDAP backend.
2009-04-22 15:14:24 -04:00
Pavel Zuna
ff0819b189
Add new env variables. 'container_dns' for DNS plugin, 'use_ldap2' for new LDAP backend debugging.
2009-04-22 15:12:39 -04:00
Rob Crittenden
cf8ed7b77a
Convert the RA plugin to use nsslib and remove the configure methods
2009-04-20 14:01:24 -04:00
Rob Crittenden
9182c10b03
Issue DS and Apache server certs during CA installation.
...
Notes:
- will create a CA instance (pki-ca) if it doesn't exist
- maintains support for a self-signed CA
- A signing cert is still not created so Firefox autoconfig still won't work
2009-04-20 14:01:00 -04:00
Rob Crittenden
fdf03cb07b
Remove unwanted white space
2009-04-20 13:59:41 -04:00
Rob Crittenden
64fa3dd4c3
Finish work replacing the errors module with errors2
...
Once this is committed we can start the process of renaming errors2 as errors.
I thought that combinig this into one commit would be more difficult to
review.
2009-04-20 13:58:26 -04:00
Rob Crittenden
a9387b48e6
Handle GSSAPI exceptions more gracefully
2009-04-20 13:44:08 -04:00
Rob Crittenden
e6171404bf
Make parentmap a autofill variable and add tests when parentmap is not passed
2009-04-13 15:22:49 -04:00
Rob Crittenden
8821d8cac3
Fill in default values for os and platform
2009-04-13 14:54:16 -04:00
Rob Crittenden
44afa977a8
The new admin tool 'ipa' uses a different configuration file, create it.
2009-04-13 14:53:08 -04:00
Rob Crittenden
ab73041174
Renaming the backend ldap plugin to ldapapi.py to prevent module import issues
2009-04-06 13:52:32 -04:00
Pavel Zuna
82bc30d17e
Use full OID for LDAP SYNTAX identification. Don't convert Booleans and Integers into respective python types as their ranges might not match. Rename module-scope functions.
2009-04-06 11:23:25 -04:00
root
dc3547cd7b
Add new LDAP backend plugin.
2009-04-03 14:08:13 -04:00
root
6ca80e312a
Add 'container_hbac' env variable.
2009-04-03 14:07:30 -04:00
Rob Crittenden
484eff1016
Implement an installer for the Dogtag certificate system.
...
The CA is currently not automatically installed. You have to pass in the
--ca flag to install it.
What works:
- installation
- unistallation
- cert/ra plugins can issue and retrieve server certs
What doesn't work:
- self-signed CA is still created and issues Apache and DS certs
- dogtag and python-nss not in rpm requires
- requires that CS be in the "pre" install state from pkicreate
2009-04-03 14:06:09 -04:00
Jason Gerard DeRose
a6294ba041
Renamed remaining plugins still using f_* b_* convention
2009-04-01 10:34:57 -04:00
Rob Crittenden
0c63ed3f5e
Fill in the ACIs and taskgroups for most of the plugins.
...
This adds:
group administration
host administration
host group administration
delegation administration
service administration
automount administration
netgroup administration
2009-04-01 10:33:43 -04:00
Rob Crittenden
c00281a9f9
Name update files so they can be easily sorted.
...
We want to process some updates in a particular order (schema, structural).
Using an init-inspired ordering mechanism.
2009-03-25 11:03:07 -04:00
Rob Crittenden
d6814f3aae
Implement a few new targets for ACIs
...
Also switch to the StrEnum parameter type for some options so we let the
framework do the enforcement
2009-03-25 11:03:03 -04:00
Rob Crittenden
fcfcc76524
Translate variables on all lines and sort files to be updated
...
Only the dn and the first line of any entry that was spread across
multiple lines were getting passed through the template engine.
If we are given a directory to process, sort the files in that directory
so the order can be predicted. Some updates rely on others.
2009-03-25 11:02:59 -04:00
Rob Crittenden
7d19cee7fc
DNA is now configured using an update file
2009-03-25 11:02:55 -04:00
Rob Crittenden
cf09aab18b
Allow a search using only the exact search filter
2009-03-25 11:02:52 -04:00
Rob Crittenden
1b1f9af01c
Add a 'showall' command so one can pick from a list of tasks to add to a role
2009-03-25 11:02:49 -04:00
Rob Crittenden
5aed824a6c
Use tuples instead of lists for class variables
2009-03-25 11:02:47 -04:00
