Fraser Tweedale dfbdb53238 cert-request: match names against principal aliases ...

Currently we do not check Kerberos principal aliases when validating
a CSR.  Enhance cert-request to accept the following scenarios:

- for hosts and services: CN and SAN dnsNames match a principal
  alias (realm and service name must be same as nominated principal)

- for all principal types: UPN or KRB5PrincipalName othername match
  any principal alias.

Fixes: https://fedorahosted.org/freeipa/ticket/6295
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Reviewed-By: Milan Kubik <mkubik@redhat.com>

2016-12-06 16:13:45 +01:00

..

data

ipatests: remove ipacertbase option from test CSR configuration

2016-07-12 10:55:50 +02:00

tracker

Created idview tracker

2016-11-29 18:30:44 +01:00

__init__.py

Make an ipa-tests package

2013-06-17 19:22:50 +02:00

mock_trust.py

ipatests: Move trust mock helper functions to a separate module

2016-07-29 09:04:42 +02:00

objectclasses.py

ipatests: Tracker implementation for Sub CA feature

2016-07-12 10:55:50 +02:00

test_add_remove_cert_cmd.py

tests: Added basic tests for certs in idoverrides

2016-11-29 18:30:44 +01:00

test_attr.py

frontend: re-raise remote RequirementError using CLI name in CLI

2016-05-25 16:06:26 +02:00

test_automember_plugin.py

test: automember: Fix expected exception message

2016-06-29 10:49:37 +02:00

test_automount_plugin.py

Fix Python 3 bugs discovered by pylint

2016-11-25 16:18:22 +01:00

test_baseldap_plugin.py

Remove unused variables in tests

2016-09-27 13:35:58 +02:00

test_batch_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_ca_plugin.py

ipatests: Tracker implementation for Sub CA feature

2016-07-12 10:55:50 +02:00

test_caacl_plugin.py

Test for caacl-add-service

2016-08-30 10:35:58 +02:00

test_caacl_profile_enforcement.py

cert-request: match names against principal aliases

2016-12-06 16:13:45 +01:00

test_cert_plugin.py

Tests: Verify that validity info is present in cert-show and cert-find command

2016-11-14 17:30:47 +01:00

test_certprofile_plugin.py

Tests: Remove --force options from tracker base class

2016-09-21 18:39:56 +02:00

test_config_plugin.py

config-mod: normalize attribute names for --usersearch/--groupsearch

2016-08-22 17:53:31 +02:00

test_delegation_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_dns_plugin.py

DNS: Support URI resource record type

2016-10-11 16:48:47 +02:00

test_dns_realmdomains_integration.py

DNS: Fix tests for realm domains integration with DNS zone add

2016-06-28 14:19:56 +02:00

test_external_members.py

rpc: specify connection options in API config

2016-06-03 09:00:34 +02:00

test_group_plugin.py

Tests: Remove silent deleting and creating entries by tracker

2016-10-06 19:16:37 +02:00

test_hbac_plugin.py

Remove unused variables in tests

2016-09-27 13:35:58 +02:00

test_hbacsvcgroup_plugin.py

Performance: Find commands: do not process members by default

2016-05-31 14:08:54 +02:00

test_hbactest_plugin.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

test_host_plugin.py

Remove unused variables in tests

2016-09-27 13:35:58 +02:00

test_hostgroup_plugin.py

Performance: Find commands: do not process members by default

2016-05-31 14:08:54 +02:00

test_idviews_plugin.py

Tests: ID views tests do not recognize krbcanonicalname attribute

2016-08-24 14:20:53 +02:00

test_kerberos_principal_aliases.py

ipatests: Fix wrong fixture in kerberos principal alias test

2016-08-16 12:13:30 +02:00

test_krbtpolicy.py

Applied tier0 and tier1 marks on unit tests and xmlrpc tests

2015-11-09 11:49:17 +01:00

test_location_plugin.py

Tests: Fix for failing location tests

2016-06-23 15:29:06 +02:00

test_nesting.py

Refactor test_nesting, create HostGroupTracker

2016-03-24 14:36:55 +01:00

test_netgroup_plugin.py

Unify display of principal names/aliases across entities

2016-07-01 09:37:25 +02:00

test_old_permission_plugin.py

Removed objectclass from LDAP*ReverseMember based tests

2016-08-10 13:53:55 +02:00

test_passwd_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_permission_plugin.py

Remove unused variables in tests

2016-09-27 13:35:58 +02:00

test_ping_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_privilege_plugin.py

Removed objectclass from LDAP*ReverseMember based tests

2016-08-10 13:53:55 +02:00

test_pwpolicy_plugin.py

Remove unused variables in tests

2016-09-27 13:35:58 +02:00

test_radiusproxy_plugin.py

radiusproxy plugin tests: Expect bytes, not text, for ipatokenradiussecret

2016-05-05 16:42:46 +02:00

test_range_plugin.py

ipatests: Move trust mock helper functions to a separate module

2016-07-29 09:04:42 +02:00

test_realmdomains_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_replace.py

Refactor test_replace

2016-01-26 19:03:15 +01:00

test_role_plugin.py

The LDAP*ReverseMember shouldn't imply --all is always specified

2016-06-29 10:44:30 +02:00

test_selfservice_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_selinuxusermap_plugin.py

Unify display of principal names/aliases across entities

2016-07-01 09:37:25 +02:00

test_service_plugin.py

Tests: Random issuer certificate can be added to a service

2016-08-31 14:29:00 +02:00

test_servicedelegation_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_stageuser_plugin.py

Tests: Remove silent deleting and creating entries by tracker

2016-10-06 19:16:37 +02:00

test_sudocmd_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_sudocmdgroup_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

test_sudorule_plugin.py

Pylint: enable check for unused-variables

2016-09-27 13:35:58 +02:00

test_trust_plugin.py

Tests: Add missing attributes to test_xmlrpc/test_trust tests

2016-08-31 15:05:41 +02:00

test_user_plugin.py

Tests: Remove silent deleting and creating entries by tracker

2016-10-06 19:16:37 +02:00

test_vault_plugin.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

testcert.py

Remove unused variables in tests

2016-09-27 13:35:58 +02:00

xmlrpc_test.py

Tests: print what was expected from callables in xmlrpc_tests

2016-10-11 16:52:37 +02:00