Petr Viktorin eab334dde8 Handle binascii.Error from base64.b64decode() ...

In Python 3, the base64.b64decode function raises binascii.Error (a ValueError
subclass) when it finds incorrect padding. In Python 2 it raises TypeError.

Callers should usually handle ValueError; unless they are specifically
concerned with handling base64 padding issues).

In some cases, callers should handle ValueError:
- ipalib.pkcs10 (get_friendlyname, load_certificate_request): callers should
  handle ValueError
- ipalib.x509 (load_certificate*, get_*): callers should handle ValueError

In other cases ValueError is handled:
- ipalib.parameters
- ipapython.ssh
- ipalib.rpc (json_decode_binary - callers already expect ValueError)
- ipaserver.install.ldapupdate

Elsewhere no error handling is done, because values come from trusted
sources, or are pre-validated:
- vault plugin
- ipaserver.install.cainstance
- ipaserver.install.certs
- ipaserver.install.ipa_otptoken_import

Reviewed-By: Tomas Babej <tbabej@redhat.com>

2015-10-22 18:34:46 +02:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

automember.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

automount.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

baseldap.py

Rename caught exception for use outside the except: block.

2015-10-13 14:16:32 +02:00

baseuser.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

batch.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

caacl.py

caacl: fix incorrect construction of HbacRequest for hosts

2015-07-08 17:13:25 +02:00

cert.py

Handle binascii.Error from base64.b64decode()

2015-10-22 18:34:46 +02:00

certprofile.py

certprofile: remove 'rename' option

2015-09-02 13:47:48 +02:00

config.py

Standardize minvalue for ipasearchrecordlimit and ipasesarchsizelimit for unlimited minvalue

2015-09-22 08:00:16 +02:00

delegation.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

dns.py

DNSSEC: warn user if DNSSEC key master is not installed

2015-10-22 18:29:44 +02:00

domainlevel.py

domainlevel: Fix incorrect initializations of InvalidDomainLevelError exceptions

2015-07-20 13:53:21 +02:00

group.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

hbacrule.py

fix hbac rule search for non-admin users

2015-07-16 15:37:24 +02:00

hbacsvc.py

Convert HBAC Service default permissions to managed

2014-06-24 13:53:40 +02:00

hbacsvcgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

hbactest.py

Remove uses of the types module

2015-10-07 10:27:20 +02:00

host.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

hostgroup.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

idrange.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

idviews.py

idoverride: Ignore ValidationErrors when converting the anchor

2015-10-14 16:11:25 +02:00

internal.py

Use the print function

2015-09-01 11:42:01 +02:00

krbtpolicy.py

Make 'permission' the default bind type for managed permissions

2014-06-11 13:21:29 +02:00

migration.py

Replace StandardError with Exception

2015-09-30 10:51:36 +02:00

misc.py

plugable: Pass API to plugins on initialization rather than using set_api

2015-07-01 13:05:30 +00:00

netgroup.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

otpconfig.py

Fix TOTP Synchronization Window label

2015-02-17 08:26:42 +01:00

otptoken_yubikey.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

otptoken.py

Use six.moves.urllib instead of urllib/urllib2/urlparse

2015-10-07 10:27:20 +02:00

passwd.py

Port from python-krbV to python-gssapi

2015-08-26 09:41:36 +02:00

permission.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

ping.py

Allow API plugin registration via a decorator

2013-08-14 12:08:27 +02:00

pkinit.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

privilege.py

Validate adding privilege to a permission

2015-07-17 04:57:54 +00:00

pwpolicy.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

radiusproxy.py

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

realmdomains.py

realmdomains: Do not fail due the ValidationError when adding _kerberos TXT record

2015-10-12 13:34:20 +02:00

role.py

speed up indirect member processing

2015-04-27 05:55:04 +00:00

rpcclient.py

Switch client to JSON-RPC

2013-11-26 16:59:59 +01:00

selfservice.py

Update all remaining plugins to the new Registry API

2014-06-11 09:24:22 +02:00

selinuxusermap.py

fix selinuxusermap search for non-admin users

2015-07-16 15:38:47 +02:00

server.py

adjust search so that it works for non-admin users

2015-08-12 16:14:21 +02:00

service.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

servicedelegation.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

session.py

do not import memcache on client

2015-07-16 11:23:40 +02:00

stageuser.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

sudocmd.py

Convert Sudo Command default permissions to managed

2014-06-24 13:53:41 +02:00

sudocmdgroup.py

Do not require description in UI.

2014-09-29 12:53:43 +02:00

sudorule.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

topology.py

do not ask for segment direction when running topology commands

2015-10-20 15:32:47 +02:00

trust.py

Alias "unicode" to "str" under Python 3

2015-09-17 11:08:43 +02:00

user.py

execute user-del pre-callback also during user preservation

2015-10-21 12:33:39 +02:00

vault.py

vault: fix private service vault creation

2015-10-13 14:34:00 +02:00

virtual.py

Give more info on virtual command access denial

2015-08-11 12:25:51 +02:00