freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Florence Blanc-Renaud e2d69380fb AD user without override receive InternalServerError with API

When ipa commands are used by an Active Directory user that
does not have any idoverride-user set, they return the
following error message which can be misleading:
$ kinit aduser@ADDOMAIN.COM
$ ipa ping
ipa: ERROR: cannot connect to 'https://master.ipa.com/ipa/json': Internal Server Error

The fix properly handles ACIError exception received when
creating the context, and now the following message can be seen:

$ kinit aduser@ADDOMAIN.COM
$ ipa ping
ipa: ERROR: cannot connect to 'https://master.ipa.com/ipa/json': Unauthorized

with the following log in /var/log/httpd/error_log:
ipa: INFO: 401 Unauthorized: Insufficient access:  Invalid credentials

Fixes: https://pagure.io/freeipa/issue/8163
Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>

2020-01-10 17:07:57 +01:00

advise

smartcard: make the ipa-advise script compatible with authselect/authconfig

2019-11-08 12:57:54 +01:00

dnssec

Add ODS manager abstraction to ipaplatform

2019-04-24 14:08:20 +02:00

install

removed unused function export_pem_p12

2019-12-17 09:18:37 +01:00

plugins

ipaserver/plugins/dns.py: add "Dynamic Update" and "Bind update policy" to default dnszone* output