freeipa/ipaserver/secrets
Christian Heimes c027b9334b Fix CustodiaClient ccache handling
A CustodiaClient object has to the process environment a bit, e.g. set
up GSSAPI credentials. To reuse the credentials in libldap connections,
it is also necessary to set up a custom ccache store and to set the
environment variable KRBCCNAME temporarily.

Fixes: https://pagure.io/freeipa/issue/7964
Co-Authored-By: Fraser Tweedale <ftweedal@redhat.com>
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
2019-06-18 10:36:24 +10:00
..
handlers Move Custodia secrets handler to scripts 2019-04-26 12:09:22 +02:00
__init__.py ipapython: move dnssec, p11helper and secrets to ipaserver 2016-11-29 14:50:51 +01:00
client.py Fix CustodiaClient ccache handling 2019-06-18 10:36:24 +10:00
common.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
kem.py Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
service.py secrets: disable relative-imports for custodia 2017-09-08 15:42:07 +02:00
store.py Move Custodia secrets handler to scripts 2019-04-26 12:09:22 +02:00