freeipa/ipaserver/plugins
Fraser Tweedale 9dac0a13f1 caacl: fix regression in rule instantiation
The Principal refactor causes service collections
('memberservice_service' attribute) to return Principal objects
where previously it returned strings, but the HBAC machinery used
for CA ACL enforcement only handles strings.  Update the code to
stringify service Principal objects when adding them to HBAC rules.

Fixes: https://fedorahosted.org/freeipa/ticket/6146
Reviewed-By: Martin Basti <mbasti@redhat.com>
2016-08-05 11:51:43 +02:00
..
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
aci.py server: define missing virtual attributes 2016-06-30 16:32:20 +02:00
automember.py allow 'value' output param in commands without primary key 2016-07-20 13:57:01 +02:00
automount.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
baseldap.py baseldap: Fix MidairCollision instantiation during entry modification 2016-07-27 14:11:52 +02:00
baseuser.py Increase default length of auto generated passwords 2016-08-03 15:32:41 +02:00
batch.py server: exclude Local commands from RPC 2016-06-30 16:32:20 +02:00
ca.py Check for CA subject name collision before attempting creation 2016-06-30 16:03:32 +02:00
caacl.py caacl: fix regression in rule instantiation 2016-08-05 11:51:43 +02:00
cert.py Add --cn option to cert-status 2016-07-01 10:05:16 +02:00
certprofile.py server: define missing virtual attributes 2016-06-30 16:32:20 +02:00
config.py Introduce "NTP server" role 2016-06-15 13:51:48 +02:00
delegation.py server: define missing virtual attributes 2016-06-30 16:32:20 +02:00
dns.py server: define missing virtual attributes 2016-06-30 16:32:20 +02:00
dnsserver.py help: Add dnsserver commands to help topic 'dns' 2016-07-22 13:52:09 +02:00
dogtag.py Fix IssuerDN presence check in cert search result 2016-06-27 13:11:57 +02:00
domainlevel.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
group.py frontend: don't copy command arguments to output params 2016-06-20 16:39:12 +02:00
hbac.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
hbacrule.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
hbacsvc.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
hbacsvcgroup.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
hbactest.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
host.py Increase default length of auto generated passwords 2016-08-03 15:32:41 +02:00
hostgroup.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
idrange.py idrange: fix unassigned global variable 2016-07-29 17:09:07 +02:00
idviews.py Allow for commands that use positional parameters to add/remove attributes 2016-07-01 09:37:25 +02:00
internal.py Add widgets for kerberos aliases 2016-07-01 09:39:49 +02:00
join.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
krbtpolicy.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
ldap2.py ipalib, ipaserver: migrate all plugins to Registry-based registration 2016-05-25 16:06:26 +02:00
location.py DNS Location: add list of roles and DNS servers to location-show 2016-06-17 18:05:03 +02:00
migration.py re-set canonical principal name on migrated users 2016-08-01 17:13:13 +02:00
misc.py misc: generate plugins result directly in the command 2016-06-28 13:30:49 +02:00
netgroup.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
otp.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
otpconfig.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
otptoken.py server: define missing virtual attributes 2016-06-30 16:32:20 +02:00
passwd.py Migrate management framework plugins to use Principal parameter 2016-07-01 09:37:25 +02:00
permission.py server: define missing virtual attributes 2016-06-30 16:32:20 +02:00
ping.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
pkinit.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
privilege.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
pwpolicy.py Allow unexpiring passwords 2016-07-01 11:22:02 +02:00
rabase.py Add CA argument to ra.request_certificate 2016-06-15 07:13:38 +02:00
radiusproxy.py prevent search for RADIUS proxy servers by secret 2016-07-21 10:49:10 +02:00
realmdomains.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
role.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
schema.py schema: Fix subtopic -> topic mapping 2016-07-15 14:02:17 +02:00
selfservice.py server: define missing virtual attributes 2016-06-30 16:32:20 +02:00
selinuxusermap.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
server.py Fix incorrect construction of service principal during replica cleanup 2016-06-27 12:59:48 +02:00
serverrole.py Fix minor typos 2016-06-16 08:47:20 +02:00
serverroles.py Do not update result of *-config-show with empty server attributes 2016-06-21 13:07:24 +02:00
service.py Unify display of principal names/aliases across entities 2016-07-01 09:37:25 +02:00
servicedelegation.py Show full error message for selinuxusermap-add-hostgroup 2016-07-20 13:13:05 +02:00
session.py session: do not initialize session manager on import 2016-06-30 14:09:24 +02:00
stageuser.py Increase default length of auto generated passwords 2016-08-03 15:32:41 +02:00
sudo.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
sudocmd.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
sudocmdgroup.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
sudorule.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
topology.py topo segment-add: validate that both masters support target suffix 2016-06-24 13:32:02 +02:00
trust.py trust-add: handle --all/--raw options properly 2016-07-21 13:01:02 +02:00
user.py Increase default length of auto generated passwords 2016-08-03 15:32:41 +02:00
vault.py Migrate management framework plugins to use Principal parameter 2016-07-01 09:37:25 +02:00
virtual.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
xmlserver.py xmlserver: initialize RPC server plugins only in server context 2016-06-30 14:09:24 +02:00