freeipa/ipaserver
Alexander Bokovoy e560899cce trust: always use oddjobd helper for fetching trust information
Since introduction of privilege separation in IPA framework none of the
operations that require direct access to the framework's credentials can
be done. All authentication has to be performed with GSSAPI.

As result, we cannot obtain TGT for HTTP/.. principal with kinit
anymore, so it is better to re-route all types of trust to oddjobd
helper and get rid of casing out two-way trust.

Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1438366

Reviewed-By: Martin Basti <mbasti@redhat.com>
2017-04-11 14:16:39 +02:00
..
advise scripts, tests: explicitly set confdir in the rest of server code 2017-02-22 08:07:48 +00:00
dnssec scripts, tests: explicitly set confdir in the rest of server code 2017-02-22 08:07:48 +00:00
install Remove surplus 'the' in output of ipa-adtrust-install 2017-04-11 13:06:13 +02:00
plugins trust: always use oddjobd helper for fetching trust information 2017-04-11 14:16:39 +02:00
secrets Use Custodia 0.3.1 features 2017-03-28 15:02:06 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc.py ipaserver/dcerpc: unify error processing 2017-04-11 14:16:39 +02:00
dns_data_management.py Fix compatibility with python-dns 1.15.0 2016-10-11 15:45:41 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
p11helper.py ipapython: move dnssec, p11helper and secrets to ipaserver 2016-11-29 14:50:51 +01:00
rpcserver.py rpcserver.login_x509: Actually return reply from __call__ method 2017-03-28 13:04:39 +02:00
servroles.py Introduce "NTP server" role 2016-06-15 13:51:48 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Add an option to build ipaserver wheels 2017-04-03 13:08:52 +02:00
topology.py Fix topologysuffix-verify failing connections 2016-06-24 13:32:02 +02:00