freeipa/ipaserver
Rob Crittenden 38b83c2b93 Run HSM validation as pkiuser to verify token permissions
Run all commands as pkiuser when validating that the HSM token
is available, that the token library path is correct and that
the password can read keys. This will avoid issues where the
initial validation is ok but the pkiuser is not granted read
access to some part of the token. This is very possible
when using softhsm2.

Fixes: https://pagure.io/freeipa/issue/9626

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2024-07-31 16:19:02 -04:00
..
advise The -d option of the ipa-advise command was able to used. 2024-07-11 10:30:59 +02:00
custodia custodia: do not use deprecated jwcrypto wrappers 2024-05-23 15:12:27 -04:00
dnssec pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
install Run HSM validation as pkiuser to verify token permissions 2024-07-31 16:19:02 -04:00
plugins PKINIT certificate: fix renewal on hidden replica 2024-06-26 07:36:53 +02:00
secrets pylint: disable missing-timeout message 2023-01-10 08:30:58 +01:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc_common.py Py3: Replace six.text_type with str 2018-09-27 16:11:18 +02:00
dcerpc.py ipaserver: fix incorrect double negative in exception message 2024-05-06 17:10:18 -04:00
dns_data_management.py Wipe the ipa-ca DNS record when updating system records 2023-02-09 14:24:14 -05:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
masters.py Configure affinity during server installation 2023-09-01 13:13:02 -04:00
p11helper.py Grammar: whitespace is a word 2020-06-23 10:16:29 +02:00
rpcserver.py ipalib: move json formatter to a separate file 2024-05-22 17:06:23 -04:00
servroles.py Use api.env.container_sysaccounts 2020-04-28 11:28:29 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Also drop Custodia client and forwarder 2021-06-16 10:28:17 -04:00
topology.py pylint: Fix consider-using-dict-items 2022-03-11 13:37:08 -05:00
wsgi.py Improve wsgi app loading 2021-04-07 11:43:23 +03:00