IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-29 10:21:18 -06:00
Code Issues Packages Projects Releases Wiki Activity
bc0c606885
freeipa/ipalib/plugins
History
Fraser Tweedale bc0c606885 Add CA ACL plugin 
Implement the caacl commands, which are used to indicate which
principals may be issued certificates from which (sub-)CAs, using
which profiles.

At this commit, and until sub-CAs are implemented, all rules refer
to the top-level CA (represented as ".") and no ca-ref argument is
exposed.

Also, during install and upgrade add a default CA ACL that permits
certificate issuance for all hosts and services using the profile
'caIPAserviceCert' on the top-level CA.

Part of: https://fedorahosted.org/freeipa/ticket/57
Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Martin Basti <mbasti@redhat.com>
2015-06-11 10:50:31 +00:00
..
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
aci.py aci plugin: Fix internal error when ACIs are not readable 2014-05-29 16:22:37 +02:00
automember.py Fix error message for nonexistent members and add tests. 2014-11-24 16:04:57 +01:00
automount.py Add several CRUD default permissions 2014-06-24 13:53:41 +02:00
baseldap.py baseldap: Fix possible crash in LDAPObject.handle_duplicate_entry 2015-05-15 14:28:52 +00:00
baseuser.py Add usercertificate attribute to user plugin 2015-06-04 08:27:33 +00:00
batch.py Update all remaining plugins to the new Registry API 2014-06-11 09:24:22 +02:00
caacl.py Add CA ACL plugin 2015-06-11 10:50:31 +00:00
cert.py Update cert-request to support user certs and profiles 2015-06-04 08:27:33 +00:00
certprofile.py Add certprofile plugin 2015-06-04 08:27:33 +00:00
config.py Expose the disabled User Auth Type 2015-02-12 10:31:24 +01:00
delegation.py Update all remaining plugins to the new Registry API 2014-06-11 09:24:22 +02:00
dns.py DNS: remove NSEC3PARAM from records 2015-03-09 15:21:04 +01:00
domainlevel.py Add Domain Level feature 2015-05-26 11:59:47 +00:00
group.py group-detach does not add correct objectclasses 2015-02-18 13:18:31 +01:00
hbacrule.py Convert HBAC Rule default permissions to managed 2014-06-24 13:53:40 +02:00
hbacsvc.py Convert HBAC Service default permissions to managed 2014-06-24 13:53:40 +02:00
hbacsvcgroup.py Do not require description in UI. 2014-09-29 12:53:43 +02:00
hbactest.py Update all remaining plugins to the new Registry API 2014-06-11 09:24:22 +02:00
host.py Fix: regression in host and service plugin 2015-06-03 17:52:30 +00:00
hostgroup.py hostgroup: Selected PEP8 fixes for the hostgroup plugin 2014-09-30 10:42:06 +02:00
idrange.py idrange: include raw range type in output 2014-11-11 10:56:16 +01:00
idviews.py idviews: Use case-insensitive detection of Default Trust View 2015-02-23 17:51:21 +01:00
internal.py webui: topology plugin 2015-06-04 13:20:44 +02:00
kerberos.py Update all remaining plugins to the new Registry API 2014-06-11 09:24:22 +02:00
krbtpolicy.py Make 'permission' the default bind type for managed permissions 2014-06-11 13:21:29 +02:00
migration.py Migration now accepts scope as argument 2015-06-05 19:31:18 +02:00
misc.py Update all remaining plugins to the new Registry API 2014-06-11 09:24:22 +02:00
netgroup.py Do not require description in UI. 2014-09-29 12:53:43 +02:00
otpconfig.py Fix TOTP Synchronization Window label 2015-02-17 08:26:42 +01:00
otptoken_yubikey.py Create an OTP help topic 2014-12-05 13:44:51 +01:00
otptoken.py Make lint work on Fedora 22. 2015-04-27 11:02:57 +02:00
passwd.py ipa-passwd: add OTP support 2014-06-26 12:37:38 +02:00
permission.py User life cycle: Stage user Administrators permission/priviledge 2015-05-18 09:37:21 +02:00
ping.py Allow API plugin registration via a decorator 2013-08-14 12:08:27 +02:00
pkinit.py Update all remaining plugins to the new Registry API 2014-06-11 09:24:22 +02:00
privilege.py Do not require description in UI. 2014-09-29 12:53:43 +02:00
pwpolicy.py pwpolicy-add: Added better error handling 2014-09-02 10:40:12 +02:00
radiusproxy.py Split long docstrings that were recently modified 2014-06-10 13:19:32 +02:00
realmdomains.py Add Modify Realm Domains permission 2014-07-04 12:17:04 +02:00
role.py speed up indirect member processing 2015-04-27 05:55:04 +00:00
rpcclient.py Switch client to JSON-RPC 2013-11-26 16:59:59 +01:00
selfservice.py Update all remaining plugins to the new Registry API 2014-06-11 09:24:22 +02:00
selinuxusermap.py Convert SELinux User Map default permissions to managed 2014-06-24 13:53:41 +02:00
server.py server-find and server-show commands 2015-05-26 12:16:31 +00:00
service.py Add generic split_any_principal method 2015-06-04 08:27:33 +00:00
servicedelegation.py Add plugin to manage service constraint delegations 2015-06-03 09:47:40 +00:00
stageuser.py User life cycle: Add 'Stage User Provisioning' permission/priviledge 2015-05-18 09:37:21 +02:00
sudocmd.py Convert Sudo Command default permissions to managed 2014-06-24 13:53:41 +02:00
sudocmdgroup.py Do not require description in UI. 2014-09-29 12:53:43 +02:00
sudorule.py Sudorule RunAsUser should work with external groups 2014-10-02 11:06:47 +02:00
topology.py topology: hide topologysuffix-add del mod commands 2015-06-10 14:16:03 +02:00
trust.py Remove ipanttrustauthincoming/ipanttrustauthoutgoing from ipa trust-add output. 2015-01-13 15:33:55 +01:00
user.py Add usercertificate attribute to user plugin 2015-06-04 08:27:33 +00:00
vault.py vault: Fix ipa-kra-install 2015-06-10 16:17:34 +00:00
virtual.py Internationalization for public errors 2012-09-03 18:16:12 +02:00