freeipa.git/tests/test_xmlrpc/test_host_plugin.py, branch hbactest

Fix invalid issuer in unit tests

2011-07-28T00:56:16+00:00

Fix several test failures when issuer does not match the one
generated by make-testcert (CN=Certificate Authority,O=).

https://fedorahosted.org/freeipa/ticket/1527

find_entry_by_attr() should fail if multiple entries are found

2011-07-11T22:45:49+00:00

It will only ever return one entry so if more than one are found
then we raise an exception. This is most easily seen in the host
plugin where we search on the server shortname which can be the
same across sub-domains (e.g. foo.example.com &
foo.lab.example.com).

https://fedorahosted.org/freeipa/ticket/1388

Require an imported certificate's issuer to match our issuer.

2011-06-16T23:27:17+00:00

The goal is to not import foreign certificates.

This caused a bunch of tests to fail because we had a hardcoded server
certificate. Instead a developer will need to run make-testcert to
create a server certificate generated by the local CA to test against.

ticket 1134

Add a list of managed hosts

2011-06-15T10:47:57+00:00

Enhance Host plugin to provide not only "Managed By" list but also
a list of managed hosts. The new list is generated only when --all
option is passed.

https://fedorahosted.org/freeipa/ticket/993

Display the entries that failed when deleting with --continue.

2011-01-10T15:32:10+00:00

We collected the failures but didn't report it back. This changes the
API of most delete commands so rather than returning a boolean it returns
a dict with the only current key as failed.

This also adds a new parameter flag, suppress_empty. This will try to
not print values that are empty if included. This makes the output of
the delete commands a bit prettier.

ticket 687

Change FreeIPA license to GPLv3+

2010-12-20T22:19:53+00:00

The changes include:
 * Change license blobs in source files to mention GPLv3+ not GPLv2 only
 * Add GPLv3+ license text
 * Package COPYING not LICENSE as the license blobs (even the old ones)
   mention COPYING specifically, it is also more common, I think

 https://fedorahosted.org/freeipa/ticket/239

Add managedby to Host entries

2010-11-19T15:31:42+00:00

This will allow others to provision on behalf of the host.

ticket 280

Revoke a host's certificate (if any) when it is deleted or disabled.

2010-11-19T15:31:42+00:00

Disable any services when its host is disabled.

This also adds displaying the certificate attributes (subject, etc)
a bit more universal and centralized in a single function.

ticket 297

Allow RDN changes for users, groups, rolegroups and taskgroups.

2010-10-28T12:39:10+00:00

To do a change right now you have to perform a setattr like:

ipa user-mod --setattr uid=newuser olduser

The RDN change is performed before the rest of the mods. If the RDN
change is the only change done then the EmptyModlist that update_entry()
throws is ignored.

ticket 323

Enable a host to retrieve a keytab for all its services.

2010-08-16T21:13:56+00:00

Using the host service principal one should be able to retrieve a keytab
for other services for the host using ipa-getkeytab. This required a number
of changes:

- allow hosts in the service's managedby to write krbPrincipalKey
- automatically add the host to managedby when a service is created
- fix ipa-getkeytab to return the entire prinicpal and not just the
  first data element. It was returning "host" from the service tgt
  and not host/ipa.example.com
- fix the display of the managedby attribute in the service plugin

This led to a number of changes in the service unit tests. I took the
opportunity to switch to the Declarative scheme and tripled the number
of tests we were doing. This shed some light on a few bugs in the plugin:

- if a service had a bad usercertificate it was impossible to delete the
  service. I made it a bit more flexible.
- I added a summary for the mod and find commands
- has_keytab wasn't being set in the find output

ticket 68