public/freeipa
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
9,751 Commits 9 Branches 0 Tags
cf713ac28362c40e6414e9bf9701e58e36c07deb
Commit Graph
8 Commits
Author SHA1 Message Date
Stanislav Laznicka 235b19ba7f service: Added permissions for auth. indicators read/modify 
Added permissions for Kerberos authentication indicators reading and
modifying to service objects.

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
 2016-06-30 16:44:56 +02:00
Jan Cholasta ae5f11b4de server: define missing virtual attributes 
Move virtual attributes defined in output params of methods into params of
the related object.

This fixes the virtual attributes being ommited in CLI output.

https://fedorahosted.org/freeipa/ticket/4739

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-30 16:32:20 +02:00
Martin Babinsky 7b8247a485 keep setting ipakrbprincipal objectclass on new service entries 
this is required for replica promotion to work, since the ACI allowing hosts
to add their own services uses this objectclass as target filter.

This partially reverts changes from commit
705f66f749

https://fedorahosted.org/freeipa/ticket/5996

Reviewed-By: Petr Spacek <pspacek@redhat.com>
Reviewed-By: Martin Basti <mbasti@redhat.com>
 2016-06-27 13:38:07 +02:00
Martin Babinsky 705f66f749 IPA API: set krbcanonicalname instead of ipakrbprincipalalias on new entities 
Hosts, services, and (stage)-users will now have krbcanonicalname attribute
set to the same value as krbprincipalname on creation. Moreover, new services
will not have ipakrbprincipalalias set anymore.

Part of https://fedorahosted.org/freeipa/ticket/3864

Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
 2016-06-23 09:48:06 +02:00
Stanislav Laznicka 9a8c5c9dfd host/service-show/find shouldn't fail on invalid certificate 
host/service-show/find methods would have failed if the first
certificate they had in userCertificate attribute were invalid.
Expected behavior is that they just show the rest of the reqested
attributes.

https://fedorahosted.org/freeipa/ticket/5797

Reviewed-By: Martin Basti <mbasti@redhat.com>
 2016-06-22 17:43:14 +02:00
Jan Cholasta 3157eec28f replica install: use remote server API to create service entries 
Use the existing remote server API to create service entries instead of a
client API.

This fixes a crash during replica promotion due to unavailable schema.

https://fedorahosted.org/freeipa/ticket/4739

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-09 09:11:28 +02:00
Fraser Tweedale fa149cff86 Remove service and host cert issuer validation 
When adding certifiates to a host or service entry, we currently
check that the issuer matches the issuer DN of the IPA CA.  Now that
sub-CAs have been implemented, this check is no longer valid and
will cause false negatives.  Remove it and update call sites.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
 2016-06-06 08:58:01 +02:00
Jan Cholasta 6e44557b60 ipalib: move server-side plugins to ipaserver 
Move the remaining plugin code from ipalib.plugins to ipaserver.plugins.

Remove the now unused ipalib.plugins package.

https://fedorahosted.org/freeipa/ticket/4739

Reviewed-By: David Kupka <dkupka@redhat.com>
 2016-06-03 09:00:34 +02:00