Fraser Tweedale
6e4e522e52
cert-find: fix 'issuer' option
...
The 'issuer' option of cert-find was recently changed from Str to
DNParam, however, 'ra.find' expects a string and throws when it
receives a DN.
When constructing the dict that gets passed to 'ra.find', turn
DNParams into strings.
Part of: https://fedorahosted.org/freeipa/ticket/5381
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
2016-06-29 09:54:18 +02:00
Jan Cholasta
b00dbca98f
cert: allow search by certificate
...
Allow search by certificate data or file in cert-find.
https://fedorahosted.org/freeipa/ticket/5381
Reviewed-By: David Kupka <dkupka@redhat.com >
Reviewed-By: Pavel Vomacka <pvomacka@redhat.com >
2016-06-21 09:45:20 +02:00
Jan Cholasta
9b2146be40
cert: add owner information
...
Get owner information from LDAP in cert-show and cert-find. Allow search by
owner in cert-find.
https://fedorahosted.org/freeipa/ticket/5381
Reviewed-By: David Kupka <dkupka@redhat.com >
Reviewed-By: Pavel Vomacka <pvomacka@redhat.com >
2016-06-21 09:45:20 +02:00
Jan Cholasta
d44ffdad42
cert: add object plugin
...
Implement cert as an object with methods rather than a bunch of loosely
related commands.
https://fedorahosted.org/freeipa/ticket/5381
Reviewed-By: David Kupka <dkupka@redhat.com >
Reviewed-By: Pavel Vomacka <pvomacka@redhat.com >
2016-06-21 09:45:20 +02:00
Jan Cholasta
f554078291
frontend: don't copy command arguments to output params
...
Use only object params and params defined in has_output_params as output
params. This removes unnecessary duplication of params defined both in
object plugins and as command arguments.
This requires all command output params to be properly defined in either
the object plugins or the command's has_output_params. Fix the plugins
where this wasn't true.
https://fedorahosted.org/freeipa/ticket/4739
Reviewed-By: David Kupka <dkupka@redhat.com >
2016-06-20 16:39:12 +02:00
Yuri Chornoivan
dd6645afa9
Fix minor typos
...
Reviewed-By: Petr Spacek <pspacek@redhat.com >
2016-06-16 08:47:20 +02:00
Fraser Tweedale
08e0aa23b0
Add issuer options to cert-show and cert-find
...
Add options to cert-show and cert-find for specifying the issuer as
a DN, or a CA name.
Also add the issuer DN to the output of cert-find.
Part of: https://fedorahosted.org/freeipa/ticket/4559
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com >
2016-06-15 07:13:38 +02:00
Fraser Tweedale
ae6d5b79fb
Update cert-request to allow specifying CA
...
Add the '--ca' option to the 'ipa cert-request' command, for
specifying the CA to which to direct the request.
Part of: https://fedorahosted.org/freeipa/ticket/4559
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com >
2016-06-15 07:13:38 +02:00
Fraser Tweedale
0b0c07858a
Add CA argument to ra.request_certificate
...
Add the optional 'ca_id' argument to ra.request_certificate(), for
passing an Authority ID to Dogtag.
Part of: https://fedorahosted.org/freeipa/ticket/4559
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com >
2016-06-15 07:13:38 +02:00
Fraser Tweedale
9c93015e78
Update 'caacl' plugin to support lightweight CAs
...
For backwards compatibility, an ACL that has no CAs and no CA
category allows access to the IPA CA (host authority) only.
Part of: https://fedorahosted.org/freeipa/ticket/4559
Reviewed-By: Jan Cholasta <jcholast@redhat.com >
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com >
2016-06-15 07:13:38 +02:00
Jan Cholasta
6e44557b60
ipalib: move server-side plugins to ipaserver
...
Move the remaining plugin code from ipalib.plugins to ipaserver.plugins.
Remove the now unused ipalib.plugins package.
https://fedorahosted.org/freeipa/ticket/4739
Reviewed-By: David Kupka <dkupka@redhat.com >
2016-06-03 09:00:34 +02:00
Fraser Tweedale
Jan Cholasta
Yuri Chornoivan