freeipa/ipapython
Martin Kosek 306bdccfa4 Sanitize UDP checks in conncheck
UDP port checks in ipa-replica-conncheck always returns OK even
if they are closed by a firewall. They cannot be reliably checked
in the same way as TCP ports as there is no session management as
in TCP protocol. We cannot guarantee a response on the checked
side without our own echo server bound to checked port.

This patch removes UDP port checks in replica->master direction
as we would have to implement (kerberos) protocol-wise check
to make the other side actually respond. A list of skipped
ports is printed for user.

Direction master->replica was fixed and now it is able to report
error when the port is blocked.

https://fedorahosted.org/freeipa/ticket/2062
2012-02-26 18:08:59 -05:00
..
platform Add SSH service to platform-specific services. 2012-02-13 22:21:54 -05:00
py_default_encoding Check for Python.h during build of py_default_encoding extension 2011-11-16 18:34:16 -05:00
test Fix failed tests. API for utcoffset changed and strings are more robust. 2011-01-24 14:34:38 -05:00
__init__.py Rename ipa-python directory to ipapython so it is a real python library 2009-02-09 14:35:15 -05:00
certdb.py Move the compat module from ipalib to ipapython. 2012-02-13 22:22:49 -05:00
certmonger.py Use absolute paths when trying to find certmonger request id. 2011-12-08 09:31:20 +01:00
compat.py Move the compat module from ipalib to ipapython. 2012-02-13 22:22:49 -05:00
config.py Force kerberos realm to be a string 2011-10-10 16:35:17 -04:00
dnsclient.py Fix ipa-server-install for dual NICs 2012-01-22 23:01:42 -05:00
dogtag.py Add the -v option to sslget to provide more verbose errors 2012-02-23 11:26:06 +01:00
entity.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
ipa_log_manager.py Restore default log level in server to INFO 2011-12-01 08:34:02 +01:00
ipa.conf Rename ipa-python directory to ipapython so it is a real python library 2009-02-09 14:35:15 -05:00
ipautil.py Sanitize UDP checks in conncheck 2012-02-26 18:08:59 -05:00
ipavalidate.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
log_manager.py Restore default log level in server to INFO 2011-12-01 08:34:02 +01:00
Makefile Introduce platform-specific adaptation for services used by FreeIPA. 2011-09-13 11:25:58 +02:00
MANIFEST.in Rename ipa-python directory to ipapython so it is a real python library 2009-02-09 14:35:15 -05:00
nsslib.py Add API initialization to ipa-client-install. 2012-02-13 22:21:35 -05:00
README Remove radius options completely. 2011-01-14 14:06:56 -05:00
services.py.in Introduce platform-specific adaptation for services used by FreeIPA. 2011-09-13 11:25:58 +02:00
setup.py.in Introduce platform-specific adaptation for services used by FreeIPA. 2011-09-13 11:25:58 +02:00
sysrestore.py Remove unused kpasswd.keytab and ldappwd files if they exist. 2012-02-27 14:48:26 +01:00
version.py.in Add API version and have server reject incompatible clients. 2011-01-14 14:26:22 -05:00

This is a set of libraries common to IPA clients and servers though mostly
geared currently towards command-line tools.

A brief overview:

config.py - identify the IPA server domain and realm. It uses dnsclient to
            try to detect this information first and will fall back to
            /etc/ipa/default.conf if that fails.
dnsclient.py - find IPA information via DNS

ipautil.py - helper functions

entity.py - entity is the main data type. User and Group extend this class
            (but don't add anything currently).

ipavalidate.py - basic data validation routines