mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
1de3f6c558
Each token in an NSS database is likely to have its own password/PIN. This allows the password to be set per token available in the PKI password file. This is necessary for HSM devices where the password is necessary to access information about the private key (e.g. presence) This may mean that to see all certificates in a given NSS database one will need multiple instances of the NSSDatabase class, one for each desired token (include None for the native token). https://pagure.io/freeipa/issue/9273 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This is a set of libraries common to IPA clients and servers though mostly
geared currently towards command-line tools.
A brief overview:
config.py - identify the IPA server domain and realm. It uses python-dns to
try to detect this information first and will fall back to
/etc/ipa/default.conf if that fails.
ipautil.py - helper functions
entity.py - entity is the main data type. User and Group extend this class
(but don't add anything currently).
ipavalidate.py - basic data validation routines