freeipa/ipalib/plugins
Alexander Bokovoy 3e1c04f933 Include indirect membership and canonicalize hosts during HBAC rules testing
When users and hosts are included into groups indirectly, make sure that
during HBAC test e fill in all indirect groups properly into an HBAC request.

Also, if hosts provided for test are not specified fully, canonicalize them
using IPA domain.

This makes possible following requests:
ipa hbactest --user foobar --srchost vm-101 --host vm-101 --service sshd

Request to evaluate:
 <user <name foobar groups [hbacusers,ipausers]>
  service <name sshd groups []>
  targethost <name vm-101.ipa.local groups []>
  srchost <name vm-101.ipa.local groups []>
 >

Fixes:
https://fedorahosted.org/freeipa/ticket/1862
https://fedorahosted.org/freeipa/ticket/1949
2011-10-10 17:09:22 -04:00
..
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
aci.py Fix typos 2011-09-07 13:20:42 +02:00
automember.py 34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin 2011-08-31 09:49:43 +02:00
automount.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
baseldap.py Fix LDAPCreate search failure 2011-09-30 12:24:20 +02:00
batch.py Do batch logging on successful commands too, not just failures. 2011-08-19 02:54:04 -04:00
cert.py Skip the cert validator if the csr we are passed in is a valid filename 2011-09-14 18:27:05 +02:00
config.py Fix i18n in config plugin 2011-10-11 14:51:09 +02:00
delegation.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
dns.py Validate name_from_ip parameter of dnszone. 2011-10-04 09:25:44 +02:00
entitle.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
group.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
hbacrule.py Fix error messages in hbacrule 2011-09-27 15:37:01 +02:00
hbacsvc.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
hbacsvcgroup.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
hbactest.py Include indirect membership and canonicalize hosts during HBAC rules testing 2011-10-10 17:09:22 -04:00
host.py Add regular expression pattern to host names. 2011-09-27 16:08:26 +02:00
hostgroup.py Prevent collisions of hostgroup and netgroup 2011-10-06 05:29:56 -04:00
internal.py split metadata call 2011-10-09 23:32:52 -04:00
kerberos.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
krbtpolicy.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
migration.py migrate process cannot handle multivalued pkey attribute 2011-10-03 10:47:49 +02:00
misc.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
netgroup.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
passwd.py Require current password when using passwd to change your own password. 2011-10-04 15:16:15 +02:00
permission.py Remove normalizer that made role, privilege and permission names lower-case 2011-09-12 16:51:25 -04:00
ping.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
pkinit.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
privilege.py Remove normalizer that made role, privilege and permission names lower-case 2011-09-12 16:51:25 -04:00
pwpolicy.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
role.py Remove normalizer that made role, privilege and permission names lower-case 2011-09-12 16:51:25 -04:00
selfservice.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
service.py ticket 1669 - improve i18n docstring extraction 2011-08-24 23:13:16 -04:00
sudocmd.py Fix sudo help and summaries 2011-08-29 21:26:23 -04:00
sudocmdgroup.py Fix sudo help and summaries 2011-08-29 21:26:23 -04:00
sudorule.py Fixed labels for run-as users and groups. 2011-09-13 17:32:33 +00:00
user.py Normalize uid in user principal to lower-case and do validation 2011-09-22 15:41:19 +02:00
virtual.py Add default success/failure output logging. 2011-02-14 10:23:52 -05:00
xmlclient.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00