Martin Babinsky 3adb9ca875 Use only anonymous PKINIT to fetch armor ccache ...

Since the anonymous principal can only use PKINIT to fetch credential
cache it makes no sense to try and use its kerberos key to establish
FAST channel.

We should also be able to use custom PKINIT anchor for the armoring.

https://pagure.io/freeipa/issue/6830

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>

2017-04-28 08:38:12 +00:00

..

install

Use only anonymous PKINIT to fetch armor ccache

2017-04-28 08:38:12 +00:00

__init__.py

pylint_plugins: add forbidden import checker

2017-03-10 13:04:59 +01:00

aci.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

backend.py

ldap2: change default time/size limit

2016-11-07 11:34:03 +01:00

base.py

Modernize use of range()

2015-09-01 11:42:01 +02:00

capabilities.py

Replace LooseVersion

2016-11-24 15:46:40 +01:00

cli.py

Revert "Add 'ipa localenv' subcommand"

2016-12-02 13:00:06 +01:00

config.py

pylint_plugins: add forbidden import checker

2017-03-10 13:04:59 +01:00

constants.py

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

crud.py

ipalib, ipaserver: fix incorrect API.register calls in docstrings

2016-05-25 16:06:26 +02:00

dns.py

dns: do not rely on custom param fields in record attributes

2016-06-20 16:39:12 +02:00

errors.py

csrgen: Add code to generate scripts that generate CSRs

2017-01-31 10:20:28 +01:00

frontend.py

fix: regression in API version comparison

2016-12-13 13:53:27 +01:00

krb_utils.py

Allow login to WebUI using Kerberos aliases/enterprise principals

2017-03-08 15:56:11 +01:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

messages.py

Fix malformed or missing docstrings in ipalib/messages

2016-08-16 11:59:35 +02:00

misc.py

Add fix for ipa plugins command

2017-02-17 10:22:07 +01:00

output.py

allow 'value' output param in commands without primary key

2016-07-20 13:57:01 +02:00

parameters.py

Add --password-expiration to allow admin to force user password expiration

2017-03-31 12:19:40 +02:00

pkcs10.py

cert-request: accept CSRs with extraneous data

2016-11-11 15:42:26 +01:00

plugable.py

Raise errors.EnvironmentError if IPA_CONFDIR var is incorrectly used

2016-12-02 15:05:33 +01:00

request.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

rpc.py

Prevent churn on ccaches

2017-03-28 13:36:30 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

setup, pylint, spec file: drop python-nss dependency

2017-03-31 12:20:35 +02:00

text.py

Python3 pylint fixes

2016-11-25 16:18:22 +01:00

util.py

Don't use weak ciphers for client HTTPS connections

2017-03-09 10:27:55 +01:00

x509.py

certdb: use certutil and match_hostname for cert verification

2017-03-31 12:20:35 +02:00