| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| |
|
|
|
|
| |
exploding (but now ruled safe)
battery correctly.
|
| |\ |
|
| | | |
|
| | | |
|
| | |\
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* 'master' of ssh://git.fedoraproject.org/git/hosted/func:
missed an import somewhere, fix
Generalize test code.
Merge with alikins.
Adding a noglobs=True/False parameter to the client. When set to True, the return codes assume
use the FuncServer class from sslclient instead of the
Enable ssl cert useage by default for funcd
Add gitignore for compressed man pages in docs
Two things. First Client("*").hardware.info() and the like now works, due to some clever magic with getattr. You have one client object that can address multiples and returns a hash with the results for each machine. Second, results are hashes, not lists, and we are a bit more clever in returning a return code the CLI .. the highest int wins if there's an int, for instance. Still, return codes are relatively meaningless for multi-control ... the true power is in scripting things.
add a simple FuncServer class that sets up most of the pki related bits
requires pyOpenSSL otherwise certmaster won't start
|
| | | |\ |
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | | |
added sign/list capabilities into certmaster since we can use the same object for both
|
| | | | |
| | | |
| | | |
| | | | |
to recall.
|
| | |_|/
|/| |
| | |
| | |
| | |
| | |
| | | |
it is not
in any version of Fedora quite yet and we don't want to answer the user questions about
the import errors :) Can move back in once it's all good.
|
| | | | |
|
| | | | |
|
| |\ \ \
| | |/
| |/| |
|
| | | |
| | |
| | |
| | |
| | |
| | | |
non-ssl xmlrpclib.ServerProxy
aka, enabled ssl support
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
add a FuncSSLXMLRPCServer that is based on the
AuthedXMLRPCServer.AuthedSSLXMLRPCServer
add bits to pull out cert CN and cert CN hash
and add it to the audit log bits
update logger.py to understand this
Some minor refactoring in server.py (use XmlRpcInterface
as a baseclass inherited into FuncSSLXMLRPCServer)
|
| | | | |
|
| |/ /
| |
| |
| |
| |
| |
| |
| | |
return codes assume
the server specification is NOT a glob and return a single value instead of a hash. This minimizes
code when needing to address only one system at a time. The command line will always assume globs are
possible and will not use this shortcut.
|
| |\ \ |
|
| | |\ \ |
|
| | | |/
| | |
| | |
| | |
| | |
| | | |
to reasonable defaults.
No idea if this actually works at the moment.
|
| | | |
| | |
| | |
| | | |
to some clever magic with getattr. You have one client object that can address multiples and returns a hash with the results for each machine. Second, results are hashes, not lists, and we are a bit more clever in returning a return code the CLI .. the highest int wins if there's an int, for instance. Still, return codes are relatively meaningless for multi-control ... the true power is in scripting things.
|
| | |/
|/| |
|
| | | |
|
| | |
| |
| |
| | |
update scripts/funcd and func/certmaster to use them
|
| | |
| |
| |
| |
| | |
maybe we could special case this in the code, but this
makes the default at least work for now
|
| |\| |
|
| | | |
|
| |/
|
|
| |
the init scripts also work correctly
|
| |
|
|
| |
specfiles to understand.
|
| | |
|
| | |
|
| |\ |
|
| | |\ |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
server.py:
we really only need to run load_modules once
module_loader.py:
keep track of modules that failed to load so we
don't keep trying
satisfy rnorwoods curiosity
|
| | |/
|/|
| |
| |
| | |
certmaster/funcd to generate certs, you will now need them in order to use the
client for testing.
|
| |\ \ |
|
| | |\|
| | |
| | |
| | |
| | | |
* 'master' of ssh://git.fedoraproject.org/git/hosted/func:
add stuff for specify a mode/uid/gid and a "force" just for
|
| | | |
| | |
| | |
| | | |
kicks
|
| | |/
| |
| |
| | |
present
|
| |/ |
|
| |
|
|
| |
fix setup.py and func.spec for it
|
| | |
|
| |\
| |
| |
| |
| | |
* 'master' of ssh://git.fedoraproject.org/git/hosted/func:
Adding client module, which contains code for both the CLI and those
|
| | |\ |
|
| | | |
| | |
| | |
| | |
| | |
| | | |
that want to script against func. Placeholders are there for globbing
of multiple certs, and places are also marked where we need to add
SSL.
|
| | |/
|/|
| |
| | |
fix self.cfg.autosign in certmaster
|
| |\ \
| | |
| | |
| | |
| | |
| | |
| | | |
* 'master' of ssh://git.fedoraproject.org/git/hosted/func:
catch some potentially bad args to the process.kill method
fix up logging a bit. I was sending the audit logs and the svc logs
Be a bit more paranoid about sub processes. Before
|
| | | |
| | |
| | |
| | |
| | | |
We don't want empty args to end up killing the calling process,
aka, funcd, so we filter those out.
|
| | | |
| | |
| | |
| | | |
to the same logger before
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
we could just send "aux; some_arbitrary_command_here" and
"some_arbitrary_command_here" would get executed.
Also, for some reason, if we send process.kill just one
argument, it kills funcd dead. I'm not sure why currently
|