Fraser Tweedale daeaf2a823 Make host/service cert revocation aware of lightweight CAs ...

Revocation of host/service certs on host/service deletion or other
operations is broken when cert is issued by a lightweight (sub)CA,
causing the delete operation to be aborted.  Look up the issuing CA
and pass it to 'cert_revoke' to fix the issue.

Fixes: https://fedorahosted.org/freeipa/ticket/6221
Reviewed-By: Jan Cholasta <jcholast@redhat.com>

2016-09-07 13:21:29 +02:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

server: define missing virtual attributes

2016-06-30 16:32:20 +02:00

automember.py

allow 'value' output param in commands without primary key

2016-07-20 13:57:01 +02:00

automount.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

baseldap.py

baseldap: Fix MidairCollision instantiation during entry modification

2016-07-27 14:11:52 +02:00

baseuser.py

Increase default length of auto generated passwords

2016-08-03 15:32:41 +02:00

batch.py

server: exclude Local commands from RPC

2016-06-30 16:32:20 +02:00

ca.py

Add ca-disable and ca-enable commands

2016-09-07 12:37:48 +02:00

caacl.py

caacl: fix regression in rule instantiation

2016-08-05 11:51:43 +02:00

cert.py

cert-request: raise CertificateOperationError if CA disabled

2016-09-07 12:49:28 +02:00

certprofile.py

server: define missing virtual attributes

2016-06-30 16:32:20 +02:00

config.py

config-mod: normalize attribute names for --usersearch/--groupsearch

2016-08-22 17:53:31 +02:00

delegation.py

server: define missing virtual attributes

2016-06-30 16:32:20 +02:00

dns.py

dns: prompt for missing record parts in CLI

2016-09-06 12:54:38 +02:00

dnsserver.py

help: Add dnsserver commands to help topic 'dns'

2016-07-22 13:52:09 +02:00

dogtag.py

Use Dogtag REST API for certificate requests

2016-09-07 12:49:28 +02:00

domainlevel.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

group.py

frontend: don't copy command arguments to output params

2016-06-20 16:39:12 +02:00

hbac.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

hbacrule.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

hbacsvc.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

hbacsvcgroup.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

hbactest.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

host.py

Make host/service cert revocation aware of lightweight CAs

2016-09-07 13:21:29 +02:00

hostgroup.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

idrange.py

idrange: fix unassigned global variable

2016-07-29 17:09:07 +02:00

idviews.py

Allow for commands that use positional parameters to add/remove attributes

2016-07-01 09:37:25 +02:00

internal.py

Add warning about only one existing CA server

2016-08-17 13:54:57 +02:00

join.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

krbtpolicy.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

ldap2.py

ipalib, ipaserver: migrate all plugins to Registry-based registration

2016-05-25 16:06:26 +02:00

location.py

DNS Location: add list of roles and DNS servers to location-show

2016-06-17 18:05:03 +02:00

migration.py

re-set canonical principal name on migrated users

2016-08-01 17:13:13 +02:00

misc.py

misc: generate plugins result directly in the command

2016-06-28 13:30:49 +02:00

netgroup.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otp.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otpconfig.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otptoken.py

otptoken, permission: Convert custom type parameters on server

2016-08-29 10:45:12 +02:00

passwd.py

Migrate management framework plugins to use Principal parameter

2016-07-01 09:37:25 +02:00

permission.py

otptoken, permission: Convert custom type parameters on server

2016-08-29 10:45:12 +02:00

ping.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

pkinit.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

privilege.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

pwpolicy.py

Allow unexpiring passwords

2016-07-01 11:22:02 +02:00

rabase.py

Add CA argument to ra.request_certificate

2016-06-15 07:13:38 +02:00

radiusproxy.py

prevent search for RADIUS proxy servers by secret

2016-07-21 10:49:10 +02:00

realmdomains.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

role.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

schema.py

schema: Fix subtopic -> topic mapping

2016-07-15 14:02:17 +02:00

selfservice.py

server: define missing virtual attributes

2016-06-30 16:32:20 +02:00

selinuxusermap.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

server.py

Don't ignore --ignore-last-of-role for last CA

2016-08-29 13:46:47 +02:00

serverrole.py

Fix minor typos

2016-06-16 08:47:20 +02:00

serverroles.py

Do not update result of *-config-show with empty server attributes

2016-06-21 13:07:24 +02:00

service.py

Make host/service cert revocation aware of lightweight CAs

2016-09-07 13:21:29 +02:00

servicedelegation.py

Show full error message for selinuxusermap-add-hostgroup

2016-07-20 13:13:05 +02:00

session.py

session: do not initialize session manager on import

2016-06-30 14:09:24 +02:00

stageuser.py

Increase default length of auto generated passwords

2016-08-03 15:32:41 +02:00

sudo.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

sudocmd.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

sudocmdgroup.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

sudorule.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

topology.py

topo segment-add: validate that both masters support target suffix

2016-06-24 13:32:02 +02:00

trust.py

Always fetch forest info from root DCs when establishing two-way trust

2016-09-05 09:20:55 +02:00

user.py

Raise DuplicatedEnrty error when user exists in delete_container

2016-08-30 08:26:16 +02:00

vault.py

Fix: container owner should be able to add vault

2016-08-18 13:02:38 +02:00

virtual.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

xmlserver.py

Added new authentication method

2016-08-17 16:55:49 +02:00