IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity
1e06a5195b
freeipa/ipatests/test_xmlrpc
History
Fraser Tweedale bdbb1c34a2 Remove "Request Certificate with SubjectAltName" permission 
subjectAltName is required or relevant in most certificate use cases
(esp. TLS, where carrying DNS name in Subject DN CN attribute is
deprecated).  Therefore it does not really make sense to have a
special permission for this, over and above "request certificate"
permission.

Furthermore, we already do rigorously validate SAN contents again
the subject principal, and the permission is waived for self-service
requests or if the operator is a host principal.

So remove the permission, the associated virtual operation, and the
associated code in cert_request.

Fixes: https://fedorahosted.org/freeipa/ticket/6526
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2016-12-21 17:04:18 +01:00
..
data ipatests: remove ipacertbase option from test CSR configuration 2016-07-12 10:55:50 +02:00
tracker tests: Expect krbpwdpolicyreference in result of {host,service}-{find,show} --all 2016-12-14 17:46:12 +01:00
__init__.py Make an ipa-tests package 2013-06-17 19:22:50 +02:00
mock_trust.py ipatests: Move trust mock helper functions to a separate module 2016-07-29 09:04:42 +02:00
objectclasses.py ipatests: Tracker implementation for Sub CA feature 2016-07-12 10:55:50 +02:00
test_add_remove_cert_cmd.py tests: Added basic tests for certs in idoverrides 2016-11-29 18:30:44 +01:00
test_attr.py frontend: re-raise remote RequirementError using CLI name in CLI 2016-05-25 16:06:26 +02:00
test_automember_plugin.py test: automember: Fix expected exception message 2016-06-29 10:49:37 +02:00
test_automount_plugin.py Fix Python 3 bugs discovered by pylint 2016-11-25 16:18:22 +01:00
test_baseldap_plugin.py Remove unused variables in tests 2016-09-27 13:35:58 +02:00
test_batch_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_ca_plugin.py ipatests: Tracker implementation for Sub CA feature 2016-07-12 10:55:50 +02:00
test_caacl_plugin.py Test for caacl-add-service 2016-08-30 10:35:58 +02:00
test_caacl_profile_enforcement.py cert-request: match names against principal aliases 2016-12-06 16:13:45 +01:00
test_cert_plugin.py Tests: Verify that validity info is present in cert-show and cert-find command 2016-11-14 17:30:47 +01:00
test_certprofile_plugin.py Tests: Remove --force options from tracker base class 2016-09-21 18:39:56 +02:00
test_config_plugin.py config-mod: normalize attribute names for --usersearch/--groupsearch 2016-08-22 17:53:31 +02:00
test_delegation_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_dns_plugin.py DNS: Support URI resource record type 2016-10-11 16:48:47 +02:00
test_dns_realmdomains_integration.py DNS: Fix tests for realm domains integration with DNS zone add 2016-06-28 14:19:56 +02:00
test_external_members.py rpc: specify connection options in API config 2016-06-03 09:00:34 +02:00
test_group_plugin.py Tests: Remove silent deleting and creating entries by tracker 2016-10-06 19:16:37 +02:00
test_hbac_plugin.py Remove unused variables in tests 2016-09-27 13:35:58 +02:00
test_hbacsvcgroup_plugin.py Performance: Find commands: do not process members by default 2016-05-31 14:08:54 +02:00
test_hbactest_plugin.py remove trailing newlines form python modules 2016-10-12 10:38:52 +02:00
test_host_plugin.py Remove unused variables in tests 2016-09-27 13:35:58 +02:00
test_hostgroup_plugin.py Performance: Find commands: do not process members by default 2016-05-31 14:08:54 +02:00
test_idviews_plugin.py tests: Expect krbpwdpolicyreference in result of {host,service}-{find,show} --all 2016-12-14 17:46:12 +01:00
test_kerberos_principal_aliases.py ipatests: Fix wrong fixture in kerberos principal alias test 2016-08-16 12:13:30 +02:00
test_krbtpolicy.py Applied tier0 and tier1 marks on unit tests and xmlrpc tests 2015-11-09 11:49:17 +01:00
test_location_plugin.py Tests: Fix for failing location tests 2016-06-23 15:29:06 +02:00
test_nesting.py Refactor test_nesting, create HostGroupTracker 2016-03-24 14:36:55 +01:00
test_netgroup_plugin.py Unify display of principal names/aliases across entities 2016-07-01 09:37:25 +02:00
test_old_permission_plugin.py Removed objectclass from LDAP*ReverseMember based tests 2016-08-10 13:53:55 +02:00
test_passwd_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_permission_plugin.py Remove "Request Certificate with SubjectAltName" permission 2016-12-21 17:04:18 +01:00
test_ping_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_privilege_plugin.py Removed objectclass from LDAP*ReverseMember based tests 2016-08-10 13:53:55 +02:00
test_pwpolicy_plugin.py Remove unused variables in tests 2016-09-27 13:35:58 +02:00
test_radiusproxy_plugin.py radiusproxy plugin tests: Expect bytes, not text, for ipatokenradiussecret 2016-05-05 16:42:46 +02:00
test_range_plugin.py ipatests: Move trust mock helper functions to a separate module 2016-07-29 09:04:42 +02:00
test_realmdomains_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_replace.py Refactor test_replace 2016-01-26 19:03:15 +01:00
test_role_plugin.py The LDAP*ReverseMember shouldn't imply --all is always specified 2016-06-29 10:44:30 +02:00
test_selfservice_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_selinuxusermap_plugin.py Unify display of principal names/aliases across entities 2016-07-01 09:37:25 +02:00
test_service_plugin.py tests: Expect krbpwdpolicyreference in result of {host,service}-{find,show} --all 2016-12-14 17:46:12 +01:00
test_servicedelegation_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_stageuser_plugin.py Tests: Remove silent deleting and creating entries by tracker 2016-10-06 19:16:37 +02:00
test_sudocmd_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_sudocmdgroup_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
test_sudorule_plugin.py Pylint: enable check for unused-variables 2016-09-27 13:35:58 +02:00
test_trust_plugin.py Tests: Add missing attributes to test_xmlrpc/test_trust tests 2016-08-31 15:05:41 +02:00
test_user_plugin.py Tests: Remove silent deleting and creating entries by tracker 2016-10-06 19:16:37 +02:00
test_vault_plugin.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
testcert.py Remove unused variables in tests 2016-09-27 13:35:58 +02:00
xmlrpc_test.py Add options to write lightweight CA cert or chain to file 2016-12-12 13:03:15 +01:00