Rob Crittenden
1e3ba09514
Add fail-safe so any kind of exception is handled in XML-RPC server.
...
If an exception is not handled here then the context isn't destroyed
leaving at least an LDAP connection dangling. This means the next time
this thread/process tries to handle a connection it will fail because
a context already exists.
2009-11-18 14:13:08 -05:00
Rob Crittenden
453a19fcac
First pass at enforcing certificates be requested from same host
...
We want to only allow a machine to request a certificate for itself, not for
other machines. I've added a new taksgroup which will allow this.
The requesting IP is resolved and compared to the subject of the CSR to
determine if they are the same host. The same is done with the service
principal. Subject alt names are not queried yet.
This does not yet grant machines actual permission to request certificates
yet, that is still limited to the taskgroup request_certs.
2009-10-21 03:22:44 -06:00
Jason Gerard DeRose
22493eef21
Fix three broken unit tests
2009-08-04 00:21:26 -06:00
Rob Crittenden
0e29dd7226
Add textui function to display and prompt user for selection for *-find.
...
Since we may end up executing a *-show when an entry is selected we need
to defer destroying the connection context.
2009-07-10 16:44:22 -04:00
Pavel Zuna
3ce00484f4
Always use new LDAP backend when creating context.
2009-07-02 13:33:00 -04:00
Pavel Zuna
7d0bd4b895
Rename errors2.py to errors.py. Modify all affected files.
2009-04-23 10:29:14 -04:00
Pavel Zuna
9ecbd845d4
Add conditional (env.use_ldap2 is True) modifications required by new LDAP backend.
2009-04-22 15:14:24 -04:00
Jason Gerard DeRose
13ff27e9ec
Fixed Executioner.execute() so that its 'name' argument doesn't conflict with a param called 'name' (which is a valid param name)
2009-03-13 10:31:00 -04:00
Jason Gerard DeRose
a0aebd46a1
Got new ldap connection working using Connectible.connect()
2009-02-03 15:29:04 -05:00
Jason Gerard DeRose
db0168f7af
Started reworking CLI class into cli plugin
2009-02-03 15:29:03 -05:00
Jason Gerard DeRose
9efda29d60
Added docstring to Connectible class
2009-02-03 15:29:03 -05:00
Jason Gerard DeRose
66b6029e40
Ported xmlclient to subclass from Connectible
2009-02-03 15:29:03 -05:00
Jason Gerard DeRose
0cfb0e191a
Removed the depreciated Context and LazyContext classes
2009-02-03 15:29:03 -05:00
Jason Gerard DeRose
f7375bb609
Added stuff for managing connections and new Executioner backend base class
2009-02-03 15:29:03 -05:00
Jason Gerard DeRose
ddb5449c7f
Did some initial work for Context plugins
2008-10-30 01:11:33 -06:00
Jason Gerard DeRose
f3aaf65f1c
320: plugable.API now respects the Plugin.__proxy__ flag; added test for plugins without proxy to unit tests for API
2008-09-24 00:44:41 +00:00
Jason Gerard DeRose
81de10f176
319: Added new backend and tests.test_backend modules; added place-holder Backend class and corresponding unit tests
2008-09-24 00:12:35 +00:00