Fraser Tweedale 227cf8d4e9 cert-request: simplify request processing ...

Currently the cert-request execution is complicated and cannot
handle aliases in the --principal argument.

Implement the following simplifications:

- Search all user/host/service accounts at once, by krbPrincipalName
  (error if no account found).  Use principal canonical name to
  determine the type of the principal.

- Update subject principals userCertificate attribute uniformly,
  instead of dispatching to user/host/service-mod based on type of
  principal.

Fixes: https://fedorahosted.org/freeipa/ticket/6531
Reviewed-By: Felipe Volpone <felipevolpone@gmail.com>

2017-07-14 09:24:20 +02:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

wrap long line

2016-11-25 16:18:22 +01:00

automember.py

allow 'value' output param in commands without primary key

2016-07-20 13:57:01 +02:00

automount.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

baseldap.py

baseldap: fix format string

2017-07-14 09:19:11 +02:00

baseuser.py

Add --password-expiration to allow admin to force user password expiration

2017-03-31 12:19:40 +02:00

batch.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

ca.py

ca-add: validate Subject DN name attributes

2017-06-01 09:28:36 +02:00

caacl.py

Conditionally import pyhbac

2017-04-03 13:08:52 +02:00

cert.py

cert-request: simplify request processing

2017-07-14 09:24:20 +02:00

certmap.py

Re-use trust domain retrieval code in certmap validators

2017-03-14 18:37:10 +01:00

certprofile.py

Reuse self.api when executing ca_enabled_check

2017-01-11 15:26:20 +01:00

config.py

*config-show: Do not show empty roles/attributes

2017-07-04 14:42:43 +02:00

delegation.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

dns.py

CheckedIPAddress: remove match_local param

2017-06-20 11:29:41 +02:00

dnsserver.py

dnsserver.py: dnsserver-find no longer returns internal server error

2017-06-15 13:51:06 +02:00

dogtag.py

py3: dogtag.py: fix bytes warnings

2017-06-23 14:45:05 +02:00

domainlevel.py

Check for conflict entries before raising domain level

2016-12-13 12:25:07 +01:00

group.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

hbac.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

hbacrule.py

Allow renaming of the HBAC rule objects

2017-03-27 19:08:26 +02:00

hbacsvc.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

hbacsvcgroup.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

hbactest.py

Add an option to build ipaserver wheels

2017-04-03 13:08:52 +02:00

host.py

CheckedIPAddress: remove match_local param

2017-06-20 11:29:41 +02:00

hostgroup.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

idrange.py

fix minor spelling mistakes

2017-05-19 09:52:46 +02:00

idviews.py

fix minor spelling mistakes

2017-05-19 09:52:46 +02:00

internal.py

WebUI: Add support for login for AD users

2017-03-27 08:55:41 +02:00

join.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

krbtpolicy.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

ldap2.py

ldap2: remove URI argument from ldap2 constructor

2017-07-04 12:06:33 +02:00

location.py

DNS Location: add list of roles and DNS servers to location-show

2016-06-17 18:05:03 +02:00

migration.py

user, migration: use LDAPClient for ad-hoc LDAP connections

2017-07-04 12:06:33 +02:00

misc.py

Make env and plugins commands local again

2016-12-02 13:00:06 +01:00

netgroup.py

netgroup: avoid extraneous LDAP search when retrieving primary key from DN

2016-09-09 16:27:53 +02:00

otp.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otpconfig.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otptoken.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

passwd.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

permission.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

ping.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

pkinit.py

Add pkinit-status command

2017-05-26 16:11:40 +02:00

privilege.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

pwpolicy.py

pwpolicy: do not run klist on import

2016-10-24 14:11:08 +02:00

rabase.py

rabase.get_certificate: make serial number arg mandatory

2017-03-07 13:24:16 +01:00

radiusproxy.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

realmdomains.py

ipautil: remove get_domain_name()

2016-11-29 14:50:51 +01:00

role.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

schema.py

schema: Fix subtopic -> topic mapping

2016-07-15 14:02:17 +02:00

selfservice.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

selinuxusermap.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

server.py

server.py: Removes dns-server configuration from ldap

2017-06-08 16:54:04 +02:00

serverrole.py

Fix minor typos

2016-06-16 08:47:20 +02:00

serverroles.py

*config-show: Do not show empty roles/attributes

2017-07-04 14:42:43 +02:00

service.py

Add SHA256 fingerprints for certs

2017-03-07 19:52:43 +01:00

servicedelegation.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

session.py

Fix session logout

2017-02-22 10:15:50 +01:00

stageuser.py

Support for Certificate Identity Mapping

2017-03-02 15:09:42 +01:00

sudo.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

sudocmd.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

sudocmdgroup.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

sudorule.py

Allow renaming of the sudorule objects

2017-03-27 19:08:26 +02:00

topology.py

Fix regexp patterns in parameters to not enforce length

2016-09-20 17:35:28 +02:00

trust.py

trust-mod: allow modifying list of UPNs of a trusted forest

2017-06-14 16:38:12 +02:00

user.py

user, migration: use LDAPClient for ad-hoc LDAP connections

2017-07-04 12:06:33 +02:00

vault.py

Refactor the role/attribute member reporting code

2017-05-26 16:11:40 +02:00

virtual.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

whoami.py

whoami.py: Type error when running tests

2017-07-07 14:44:42 +02:00

xmlserver.py

Added new authentication method

2016-08-17 16:55:49 +02:00