public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
9,751 Commits 9 Branches 0 Tags
cf713ac28362c40e6414e9bf9701e58e36c07deb
Commit Graph
4 Commits
Author SHA1 Message Date
Fraser Tweedale 0d37d230c0 Optionally add service name to Custodia key DNs 
Lightweight CAs support introduces new service principals for
Dogtag, with Custodia keys.  The current Custodia key creation uses
a DN that contains only they key type and the hostname, so keys for
multiple services on the same host cannot be created.

Add the 'generate_keys' method to generate keys for a host or an
arbitrary service.  When a service name is given, add the key
entries in a nested container with RDN 'cn=<service name>'.  (The
container is assumed to exist).

This change does not affect searching because subtree search is
used, filtering on the ipaKeyUsage and memberPrincipal attributes.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-09 09:04:27 +02:00
Petr Viktorin 75d0a73bbc ipapython.secrets.kem: Use ConfigParser from six.moves 
In Python 3, the module name changed from 'ConfigParser' to
'configparser'. Use the appropriate location from six.

Part of the work for: https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2016-05-30 16:44:08 +02:00
Jan Cholasta 01ddf51df7 custodia: do not modify memberPrincipal on key update 
https://fedorahosted.org/freeipa/ticket/5401

Reviewed-By: Martin Basti <mbasti@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
 2015-12-07 08:14:13 +01:00
Simo Sorce 463dda3067 Add ipa-custodia service 
Add a customized Custodia daemon and enable it after installation.
Generates server keys and loads them in LDAP autonomously on install
or update.
Provides client code classes too.

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2015-10-15 14:24:33 +02:00