Fraser Tweedale 7f7c247bb5 Support multiple host and service certificates ...

Update the framework to support multiple host and service
certificates.

host-mod and service-mod revoke existing certificates that are not
included in the modified entry.  Using addattr=certificate=... will
result in no certificates being revoked.

The existing behaviour of host-disable, host-del, service-disable
and service-del (revoke existing certificate) is preserved but now
applies to all certificates in the host or service entry.

Also update host-show and service-show to write all the principal's
certificates to the file given by the ``--out=FILE`` option.

Part of: http://www.freeipa.org/page/V4/User_Certificates

https://fedorahosted.org/freeipa/ticket/4238

Reviewed-By: Martin Basti <mbasti@redhat.com>

2015-06-02 14:03:12 +00:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

aci plugin: Fix internal error when ACIs are not readable

2014-05-29 16:22:37 +02:00

automember.py

Fix error message for nonexistent members and add tests.

2014-11-24 16:04:57 +01:00

automount.py

Add several CRUD default permissions

2014-06-24 13:53:41 +02:00

baseldap.py

baseldap: Fix possible crash in LDAPObject.handle_duplicate_entry

2015-05-15 14:28:52 +00:00

baseuser.py

User life cycle: new stageuser commands activate

2015-05-18 09:37:21 +02:00

batch.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

cert.py

Check LDAP instead of local configuration to see if IPA CA is enabled

2014-10-17 12:53:11 +02:00

config.py

Expose the disabled User Auth Type

2015-02-12 10:31:24 +01:00

delegation.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

dns.py

DNS: remove NSEC3PARAM from records

2015-03-09 15:21:04 +01:00

domainlevel.py

Add Domain Level feature

2015-05-26 11:59:47 +00:00

group.py

group-detach does not add correct objectclasses

2015-02-18 13:18:31 +01:00

hbacrule.py

Convert HBAC Rule default permissions to managed

2014-06-24 13:53:40 +02:00

hbacsvc.py

Convert HBAC Service default permissions to managed

2014-06-24 13:53:40 +02:00

hbacsvcgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

hbactest.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

host.py

Support multiple host and service certificates

2015-06-02 14:03:12 +00:00

hostgroup.py

hostgroup: Selected PEP8 fixes for the hostgroup plugin

2014-09-30 10:42:06 +02:00

idrange.py

idrange: include raw range type in output

2014-11-11 10:56:16 +01:00

idviews.py

idviews: Use case-insensitive detection of Default Trust View

2015-02-23 17:51:21 +01:00

internal.py

webui: option to not create user private group

2015-05-20 14:18:17 +02:00

kerberos.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

krbtpolicy.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

migration.py

migrate-ds: log migrated group members only on debug level

2015-05-12 12:41:34 +02:00

misc.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

netgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

otpconfig.py

Fix TOTP Synchronization Window label

2015-02-17 08:26:42 +01:00

otptoken_yubikey.py

Create an OTP help topic

2014-12-05 13:44:51 +01:00

otptoken.py

Make lint work on Fedora 22.

2015-04-27 11:02:57 +02:00

passwd.py

ipa-passwd: add OTP support

2014-06-26 12:37:38 +02:00

permission.py

User life cycle: Stage user Administrators permission/priviledge

2015-05-18 09:37:21 +02:00

ping.py

Allow API plugin registration via a decorator

2013-08-14 12:08:27 +02:00

pkinit.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

privilege.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

pwpolicy.py

pwpolicy-add: Added better error handling

2014-09-02 10:40:12 +02:00

radiusproxy.py

Split long docstrings that were recently modified

2014-06-10 13:19:32 +02:00

realmdomains.py

Add Modify Realm Domains permission

2014-07-04 12:17:04 +02:00

role.py

speed up indirect member processing

2015-04-27 05:55:04 +00:00

rpcclient.py

Switch client to JSON-RPC

2013-11-26 16:59:59 +01:00

selfservice.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

selinuxusermap.py

Convert SELinux User Map default permissions to managed

2014-06-24 13:53:41 +02:00

server.py

server-find and server-show commands

2015-05-26 12:16:31 +00:00

service.py

Support multiple host and service certificates

2015-06-02 14:03:12 +00:00

stageuser.py

User life cycle: Add 'Stage User Provisioning' permission/priviledge

2015-05-18 09:37:21 +02:00

sudocmd.py

Convert Sudo Command default permissions to managed

2014-06-24 13:53:41 +02:00

sudocmdgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

sudorule.py

Sudorule RunAsUser should work with external groups

2014-10-02 11:06:47 +02:00

trust.py

Remove ipanttrustauthincoming/ipanttrustauthoutgoing from ipa trust-add output.

2015-01-13 15:33:55 +01:00

user.py

User life cycle: support of user-undel

2015-05-18 09:37:21 +02:00

vault.py

Added vault plugin.

2015-05-25 06:17:09 +00:00

virtual.py

Internationalization for public errors

2012-09-03 18:16:12 +02:00