Alexander Bokovoy 3e1c04f933 Include indirect membership and canonicalize hosts during HBAC rules testing ...

When users and hosts are included into groups indirectly, make sure that
during HBAC test e fill in all indirect groups properly into an HBAC request.

Also, if hosts provided for test are not specified fully, canonicalize them
using IPA domain.

This makes possible following requests:
ipa hbactest --user foobar --srchost vm-101 --host vm-101 --service sshd

Request to evaluate:
 <user <name foobar groups [hbacusers,ipausers]>
  service <name sshd groups []>
  targethost <name vm-101.ipa.local groups []>
  srchost <name vm-101.ipa.local groups []>
 >

Fixes:
https://fedorahosted.org/freeipa/ticket/1862
https://fedorahosted.org/freeipa/ticket/1949

2011-10-10 17:09:22 -04:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

Fix typos

2011-09-07 13:20:42 +02:00

automember.py

34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin

2011-08-31 09:49:43 +02:00

automount.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

baseldap.py

Fix LDAPCreate search failure

2011-09-30 12:24:20 +02:00

batch.py

Do batch logging on successful commands too, not just failures.

2011-08-19 02:54:04 -04:00

cert.py

Skip the cert validator if the csr we are passed in is a valid filename

2011-09-14 18:27:05 +02:00

config.py

Fix i18n in config plugin

2011-10-11 14:51:09 +02:00

delegation.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

dns.py

Validate name_from_ip parameter of dnszone.

2011-10-04 09:25:44 +02:00

entitle.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

group.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

hbacrule.py

Fix error messages in hbacrule

2011-09-27 15:37:01 +02:00

hbacsvc.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

hbacsvcgroup.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

hbactest.py

Include indirect membership and canonicalize hosts during HBAC rules testing

2011-10-10 17:09:22 -04:00

host.py

Add regular expression pattern to host names.

2011-09-27 16:08:26 +02:00

hostgroup.py

Prevent collisions of hostgroup and netgroup

2011-10-06 05:29:56 -04:00

internal.py

split metadata call

2011-10-09 23:32:52 -04:00

kerberos.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

krbtpolicy.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

migration.py

migrate process cannot handle multivalued pkey attribute

2011-10-03 10:47:49 +02:00

misc.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

netgroup.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

passwd.py

Require current password when using passwd to change your own password.

2011-10-04 15:16:15 +02:00

permission.py

Remove normalizer that made role, privilege and permission names lower-case

2011-09-12 16:51:25 -04:00

ping.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

pkinit.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

privilege.py

Remove normalizer that made role, privilege and permission names lower-case

2011-09-12 16:51:25 -04:00

pwpolicy.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

role.py

Remove normalizer that made role, privilege and permission names lower-case

2011-09-12 16:51:25 -04:00

selfservice.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

service.py

ticket 1669 - improve i18n docstring extraction

2011-08-24 23:13:16 -04:00

sudocmd.py

Fix sudo help and summaries

2011-08-29 21:26:23 -04:00

sudocmdgroup.py

Fix sudo help and summaries

2011-08-29 21:26:23 -04:00

sudorule.py

Fixed labels for run-as users and groups.

2011-09-13 17:32:33 +00:00

user.py

Normalize uid in user principal to lower-case and do validation

2011-09-22 15:41:19 +02:00

virtual.py

Add default success/failure output logging.

2011-02-14 10:23:52 -05:00

xmlclient.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00