freeipa/ipalib
Rob Crittenden 5bf1cee702 Clear kernel keyring in client installer, save dbdir on new connections
This patch addresses two issues:

1. If a client is previously enrolled in an IPA server and the server
   gets re-installed then the client machine may still have a keyring
   entry for the old server. This can cause a redirect from the
   session URI to the negotiate one. As a rule, always clear the keyring
   when enrolling a new client.

2. We save the NSS dbdir in the connection so that when creating a new
   session we can determine if we need to re-initialize NSS or not. Most
   of the time we do not. The dbdir was not always being preserved between
   connections which could cause an NSS_Shutdown() to happen which would
   fail because of existing usage. This preserves the dbdir information when
   a new connection is created as part of the session mechanism.

https://fedorahosted.org/freeipa/ticket/3108
2012-10-03 19:22:00 +02:00
..
plugins Restrict admins group modifications 2012-10-03 13:22:46 +02:00
__init__.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
aci.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
backend.py Add CLI parsing tests 2012-03-28 15:25:33 +02:00
base.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
cli.py Internationalization for public errors 2012-09-03 18:16:12 +02:00
config.py Use DN objects instead of strings 2012-08-12 16:23:24 -04:00
constants.py Use Dogtag 10 only when it is available 2012-09-17 18:43:59 -04:00
crud.py Enforce that required attributes can't be set to None in CRUD Update 2012-03-12 17:16:14 +01:00
errors.py Restrict admins group modifications 2012-10-03 13:22:46 +02:00
frontend.py Improve output validation 2012-06-25 22:04:14 -04:00
krb_utils.py Fix ticket checks when using either s4u2proxy or a delegated krbtgt 2012-03-01 00:56:01 -05:00
output.py Typo fixes 2012-06-25 21:35:11 -04:00
parameters.py Improve StrEnum validation error message 2012-10-01 13:39:22 +02:00
pkcs10.py Fix assorted bugs found by pylint 2011-01-25 14:01:36 -05:00
plugable.py Disallow setattr on no_update/no_create params 2012-05-29 09:23:26 +02:00
request.py Remove deprecated i18n code from ipalib/request and all references to it. 2011-03-01 10:31:36 -05:00
rpc.py Clear kernel keyring in client installer, save dbdir on new connections 2012-10-03 19:22:00 +02:00
session.py Fix various typos. 2012-09-18 08:45:28 +02:00
text.py Fix regressions introduced by pylint false positive fixes. 2011-05-11 16:50:01 +02:00
util.py Fix NS records in installation 2012-09-27 16:01:22 +02:00
x509.py Internationalization for public errors 2012-09-03 18:16:12 +02:00