Rob Crittenden 1c107542cf Retrieve all cert profiles from the CA with --all ...

Normally IPA only returns the locally-stored certificate profiles.
In order for certmonger to request CA subsystem certificates using
cert_request we need the full set of profiles. Return them all
when --all is provided and the requesting user has permission.

Related: https://pagure.io/freeipa/issue/9738

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rafael Guterres Jeffman <rjeffman@redhat.com>
Reviewed-By: Thomas Woerner <twoerner@redhat.com>

2025-11-19 16:50:37 -05:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

pylint: Fix unused-variable

2022-03-11 13:37:08 -05:00

automember.py

pylint: Fix consider-using-in

2022-03-11 13:37:08 -05:00

automount.py

Remove all references to deleted indirect map from parent map

2023-08-21 10:49:06 +02:00

baseldap.py

Add system accounts (sysaccounts)

2025-11-03 17:18:05 -05:00

baseuser.py

Warn when UID is out of local ID ranges

2025-06-03 15:46:56 +02:00

batch.py

batch: add keeponly option

2024-05-22 10:03:38 +02:00

ca.py

Replace REST with PKI python API for cert and LWCA

2025-11-19 16:50:37 -05:00

caacl.py

ipaldap: fix conversion from boolean OID to Python

2022-06-10 09:25:27 +02:00

cert.py

Use the APIClient instead of direct REST calls for ACME

2025-11-19 16:50:37 -05:00

certmap.py

ipaldap: fix conversion from boolean OID to Python

2022-06-10 09:25:27 +02:00

certprofile.py

Retrieve all cert profiles from the CA with --all

2025-11-19 16:50:37 -05:00

config.py

Add config option for RSA key size for HTTP, DS, PKINIT, RA certs

2025-11-19 16:50:37 -05:00

delegation.py

Fix errors found by Pylint-2.4.3

2019-10-21 18:01:32 +11:00

dns.py

Disable --raw and --structured together

2025-03-12 19:35:37 +05:30

dnsserver.py

dnsserver.py: dnsserver-find no longer returns internal server error

2017-06-15 13:51:06 +02:00

dogtag.py

Configure renewals to use the IPA JSON API

2025-11-19 16:50:37 -05:00

domainlevel.py

Use api.env.container_masters

2019-03-28 00:21:00 +01:00

group.py

pylint: fix errors

2024-01-09 08:40:47 +01:00

hbac.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

hbacrule.py

ipaldap: fix conversion from boolean OID to Python

2022-06-10 09:25:27 +02:00

hbacsvc.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

hbacsvcgroup.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

hbactest.py

pylint: fix errors

2024-01-09 08:40:47 +01:00

host.py

host: update System: Manage Host Keytab permission

2024-01-12 18:41:01 -05:00

hostgroup.py

Allow rename of a host group

2020-03-31 09:21:37 +03:00

idp.py

idp: when adding an IdP allow to override IdP options

2023-08-01 13:41:59 +02:00

idrange.py

Require baserid and secondarybaserid

2025-05-26 08:31:43 +02:00

idviews.py

idviews: Use ipaAnchorUUID without DCERPC bindings for SID anchors

2024-05-22 09:59:34 +02:00

internal.py

Add system accounts (sysaccounts)

2025-11-03 17:18:05 -05:00

join.py

Delay import of psutil to avoid AVC

2020-09-23 14:49:15 +02:00

krbtpolicy.py

CLI: add support for passkey authentication type

2023-06-01 08:20:37 +02:00

ldap2.py

Add switch for LDAP cache debug output

2022-06-14 15:56:21 +03:00

location.py

Fix div-by-zero when svc weight is 0 for all masters in location

2020-02-26 13:42:10 -05:00

migration.py

ipaldap: fix conversion from boolean OID to Python

2022-06-10 09:25:27 +02:00

misc.py

Make env and plugins commands local again

2016-12-02 13:00:06 +01:00

netgroup.py

LGTM: raise handle_not_found()

2018-01-09 07:53:28 +01:00

otp.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otpconfig.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otptoken.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

passkeyconfig.py

passkeyconfig: require-user-verification is a boolean

2023-06-01 08:20:37 +02:00

passwd.py

passwd: handle LDAP auto-bind use case as well

2024-05-22 10:03:38 +02:00

permission.py

Warn for permissions with read/write/search/compare and no attrs

2022-07-15 16:59:15 +02:00

ping.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

pkinit.py

Don't fail if config-show does not return servers

2019-03-28 17:57:58 +01:00

privilege.py

privilege: use context.principal only when it is defined

2024-05-22 10:03:38 +02:00

pwpolicy.py

Add support for libpwpolicy credit to password policy

2025-10-03 15:29:40 -04:00

rabase.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

radiusproxy.py

radiusproxy: add permission for reading radius proxy servers

2018-11-13 12:40:44 +01:00

realmdomains.py

Fix pylint 2.0 return-related violations

2018-07-11 10:11:38 +02:00

role.py

Add system accounts (sysaccounts)

2025-11-03 17:18:05 -05:00

schema.py

pylint: Fix modified-iterating-list

2023-01-10 08:30:58 +01:00

selfservice.py

Fix errors found by Pylint-2.4.3

2019-10-21 18:01:32 +11:00

selinuxusermap.py

ipaldap: fix conversion from boolean OID to Python

2022-06-10 09:25:27 +02:00

server.py

server: use context.principal only when it is defined

2024-05-22 10:03:38 +02:00

serverrole.py

servrole: takes_params must be a tuple

2020-04-27 10:15:58 +02:00

serverroles.py

Improve config-show to show hidden servers

2019-03-28 17:57:58 +01:00

service.py

Disallow removal of dogtag and ipa-dnskeysyncd services on IPA servers

2025-03-19 21:40:06 +05:30

servicedelegation.py

service delegation: allow to add and remove host principals

2020-05-14 21:47:17 +03:00

session.py

Fix some untranslatable commands in Web UI API Browser

2018-06-21 18:42:05 +02:00

stageuser.py

User plugin: improve error related to non existing idp

2023-07-19 16:59:25 -04:00

subid.py

config-mod: allow disabling subordinate ID integration

2025-03-13 21:22:37 +05:30

sudo.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

sudocmd.py

sudocmd: ensure command doesn't contain trailing dot before adding it

2021-02-15 09:59:41 +02:00

sudocmdgroup.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

sudorule.py

pylint: fix duplicate-value

2023-01-10 08:30:58 +01:00

sysaccounts.py

sysaccounts: extend permissions to include description and account lock

2025-11-12 17:16:48 +01:00

topology.py

Add iparepltopoconf objectclass to topology permissions

2024-06-12 11:08:29 -04:00

trust.py

trust-add: handle unavailable domain

2024-08-14 12:05:58 +02:00

user.py

config-mod: allow disabling subordinate ID integration

2025-03-13 21:22:37 +05:30

vault.py

vault: remove PKIConnection deprecation warning

2025-02-27 12:30:28 +01:00

virtual.py

extract virtual operation access check subroutine

2020-06-30 11:47:29 +02:00

whoami.py

whoami.py: Type error when running tests

2017-07-07 14:44:42 +02:00

xmlserver.py

Add endpoint for serving i18n requests

2018-07-17 15:32:28 -04:00