Alexander Bokovoy 1255dbf2fd trusts: format Kerberos principal properly when fetching trust topology ...

For bidirectional trust if we have AD administrator credentials, we
should be using them with Kerberos authentication. If we don't have
AD administrator credentials, we should be using
HTTP/ipa.master@IPA.REALM credentials. This means we should ask
formatting 'creds' object in Kerberos style.

For one-way trust we'll be fetching trust topology as TDO object,
authenticating with pre-created Kerberos credentials cache, so in all
cases we do use Kerberos authentication to talk to Active Directory
domain controllers over cross-forest trust link.

Part of trust refactoring series.
Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1250190
Fixes: https://fedorahosted.org/freeipa/ticket/5182
Reviewed-By: Tomas Babej <tbabej@redhat.com>

2015-08-24 12:29:33 +02:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

automember.py

Fix error message for nonexistent members and add tests.

2014-11-24 16:04:57 +01:00

automount.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

baseldap.py

baseldap: Allow overriding member param label in LDAPModMember

2015-08-18 11:17:29 +02:00

baseuser.py

store certificates issued for user entries as userCertificate;binary

2015-08-04 13:57:33 +02:00

batch.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

caacl.py

caacl: fix incorrect construction of HbacRequest for hosts

2015-07-08 17:13:25 +02:00

cert.py

cert-request: remove allowed extensions check

2015-08-19 12:31:03 +02:00

certprofile.py

Prohibit deletion of predefined profiles

2015-08-18 19:44:43 +02:00

config.py

Expose the disabled User Auth Type

2015-02-12 10:31:24 +01:00

delegation.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

dns.py

Modernize function and method attribute names

2015-08-12 18:17:23 +02:00

domainlevel.py

domainlevel: Fix incorrect initializations of InvalidDomainLevelError exceptions

2015-07-20 13:53:21 +02:00

group.py

Modernize function and method attribute names

2015-08-12 18:17:23 +02:00

hbacrule.py

fix hbac rule search for non-admin users

2015-07-16 15:37:24 +02:00

hbacsvc.py

Convert HBAC Service default permissions to managed

2014-06-24 13:53:40 +02:00

hbacsvcgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

hbactest.py

Remove tuple unpacking from except clause ipalib/plugins/hbactest.py

2015-07-14 13:43:50 +02:00

host.py

Import 'reduce' from functools

2015-08-12 18:17:23 +02:00

hostgroup.py

adjust search so that it works for non-admin users

2015-08-12 16:14:21 +02:00

idrange.py

idranges: raise an error when local IPA ID range is being modified

2015-08-12 16:38:27 +02:00

idviews.py

idviews: Enforce objectclass check in idoverride*-del

2015-07-23 15:37:01 +02:00

internal.py

webui: add LDAP vs Kerberos behavior description to user auth types

2015-08-10 14:54:16 +02:00

kerberos.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

krbtpolicy.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

migration.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

misc.py

plugable: Pass API to plugins on initialization rather than using set_api

2015-07-01 13:05:30 +00:00

netgroup.py

adjust search so that it works for non-admin users

2015-08-12 16:14:21 +02:00

otpconfig.py

Fix TOTP Synchronization Window label

2015-02-17 08:26:42 +01:00

otptoken_yubikey.py

Create an OTP help topic

2014-12-05 13:44:51 +01:00

otptoken.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

passwd.py

ipa-passwd: add OTP support

2014-06-26 12:37:38 +02:00

permission.py

Modernize function and method attribute names

2015-08-12 18:17:23 +02:00

ping.py

Allow API plugin registration via a decorator

2013-08-14 12:08:27 +02:00

pkinit.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

privilege.py

Validate adding privilege to a permission

2015-07-17 04:57:54 +00:00

pwpolicy.py

Modernize function and method attribute names

2015-08-12 18:17:23 +02:00

radiusproxy.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

realmdomains.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

role.py

speed up indirect member processing

2015-04-27 05:55:04 +00:00

rpcclient.py

Switch client to JSON-RPC

2013-11-26 16:59:59 +01:00

selfservice.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

selinuxusermap.py

fix selinuxusermap search for non-admin users

2015-07-16 15:38:47 +02:00

server.py

adjust search so that it works for non-admin users

2015-08-12 16:14:21 +02:00

service.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

servicedelegation.py

Fix minor typos

2015-07-17 14:33:30 +02:00

session.py

do not import memcache on client

2015-07-16 11:23:40 +02:00

stageuser.py

Add user-stage command

2015-08-21 12:29:03 +02:00

sudocmd.py

Convert Sudo Command default permissions to managed

2014-06-24 13:53:41 +02:00

sudocmdgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

sudorule.py

Sudorule RunAsUser should work with external groups

2014-10-02 11:06:47 +02:00

topology.py

domainlevel: Fix incorrect initializations of InvalidDomainLevelError exceptions

2015-07-20 13:53:21 +02:00

trust.py

trusts: format Kerberos principal properly when fetching trust topology

2015-08-24 12:29:33 +02:00

user.py

Add user-stage command

2015-08-21 12:29:03 +02:00

vault.py

Add flag to list all service and user vaults

2015-08-19 14:47:58 +02:00

virtual.py

Give more info on virtual command access denial

2015-08-11 12:25:51 +02:00