freeipa/ipaserver
Fraser Tweedale 227cf8d4e9
cert-request: simplify request processing
Currently the cert-request execution is complicated and cannot
handle aliases in the --principal argument.

Implement the following simplifications:

- Search all user/host/service accounts at once, by krbPrincipalName
  (error if no account found).  Use principal canonical name to
  determine the type of the principal.

- Update subject principals userCertificate attribute uniformly,
  instead of dispatching to user/host/service-mod based on type of
  principal.

Fixes: https://fedorahosted.org/freeipa/ticket/6531
Reviewed-By: Felipe Volpone <felipevolpone@gmail.com>
2017-07-14 09:24:20 +02:00
..
advise smart-card-advises: ensure that krb5-pkinit is installed on client 2017-07-04 09:48:04 +02:00
dnssec Fix PKCS11 helper 2017-04-12 09:54:10 +02:00
install Always check peer has keys before connecting 2017-07-13 10:04:11 +02:00
plugins cert-request: simplify request processing 2017-07-14 09:24:20 +02:00
secrets py3: secrets: remove iteritems usage 2017-06-23 14:44:25 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc.py ipaserver/dcerpc: unify error processing 2017-04-11 14:16:39 +02:00
dns_data_management.py Fix compatibility with python-dns 1.15.0 2016-10-11 15:45:41 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
p11helper.py py3: softhsm key_id must be bytes 2017-06-01 09:24:24 +02:00
rpcserver.py py3: Remove comparison >=2 of debnug log level 2017-06-28 16:26:50 +02:00
servroles.py Do not remove the old masters when setting the attribute fails 2017-07-04 14:42:43 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Turn on NSSOCSP check in mod_nss conf 2017-05-10 09:08:34 +02:00
topology.py fix incorrect suffix handling in topology checks 2017-06-05 18:37:37 +02:00