Alexander Bokovoy ab5465639d server: use context.principal only when it is defined ...

In server-like context we use LDAPI connection with auto-binding to LDAP
object based on the UID of the process connecting to LDAPI UNIX domain
socket. This means context.principal is not set and we cannot use it.

Make sure to reject requests unless we are operating as a Directory
Manager in such cases.

Fixes: https://pagure.io/freeipa/issue/9583

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Thomas Woerner <twoerner@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Rafael Guterres Jeffman <rjeffman@redhat.com>

2024-05-22 10:03:38 +02:00

..

advise

pylint: Skip raising-bad-type

2022-03-11 13:37:08 -05:00

custodia

Remove ipaserver.custodia.__init__.py

2023-11-27 18:15:44 +01:00

dnssec

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

install

Don't try to validate the HSM arguments on a non-HSM installation

2024-05-20 14:46:55 -04:00

plugins

server: use context.principal only when it is defined

2024-05-22 10:03:38 +02:00

secrets

pylint: disable missing-timeout message

2023-01-10 08:30:58 +01:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc_common.py

Py3: Replace six.text_type with str

2018-09-27 16:11:18 +02:00

dcerpc.py

ipaserver: fix incorrect double negative in exception message

2024-05-06 17:10:18 -04:00

dns_data_management.py

Wipe the ipa-ca DNS record when updating system records

2023-02-09 14:24:14 -05:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

masters.py

Configure affinity during server installation

2023-09-01 13:13:02 -04:00

p11helper.py

Grammar: whitespace is a word

2020-06-23 10:16:29 +02:00

rpcserver.py

rpcserver: validate Kerberos principal name before running kinit

2024-02-21 17:07:33 -05:00

servroles.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Also drop Custodia client and forwarder

2021-06-16 10:28:17 -04:00

topology.py

pylint: Fix consider-using-dict-items

2022-03-11 13:37:08 -05:00

wsgi.py

Improve wsgi app loading

2021-04-07 11:43:23 +03:00