ipsilon.git, branch v0.2.3

Bump up release to 0.2.3

2014-05-10T14:01:31+00:00

Signed-off-by: Simo Sorce

Fix broken login plugins order config handling

2014-05-10T14:00:17+00:00

The administrative page for configuring login plugins order had
a number of problems.  The html template expects a list of plugin
names to be supplied,  but a list of the actual plugin objects
was being supplied.  This caused a 500 error since join() would
throw an exception when it encounters something other than a string.

Even after fixing the 500 error, actually modifying the plugin
order would not work due to further issues with plugin objects
being used when strings representing the plugin names are expected
(and vice-versa).

This patch ensures that strings representing plugin names are
supplied to the html template, and that plugin objects are used
when re-ordering the live plugin list.

Resolves: https://fedorahosted.org/ipsilon/ticket/2

Signed-off-by: Nathan Kinder 
Reviewed-by: Simo Sorce

WSGI settings incorrectly makes instance global

2014-05-10T13:57:28+00:00

The WSGIProcessGroup directive should only apply to the /idp URI.
Without wrapping this directive in the Location element, multiple
Ipsilon instances or an Ipsilon instance installed on a FreeIPA
server will conflict and encounter problems running in the same
httpd process. All wsgi processes will end up redirected to the
last process grup defined in the configuration in this case and
all other instances of wsgi applications will be unreachable.

Resolves: https://fedorahosted.org/ipsilon/ticket/1

Signed-off-by: Nathan Kinder 
Reviewed-by: Simo Sorce

Add details on using a principal for the admin

2014-05-10T13:56:23+00:00

When Ipsilon is being installed with IPA, one is most likely going
to use Kerberos to login to Ipsilon as the administrator.  We should
call this out, as the default of 'admin' for the Ipsilon admin user
will conflict with the IPA 'admin' user.  You will be unable to
create a local 'admin' user at this point, requiring you to modify
the sqlite database directly to change the admin user to a full
principal.

I also corrected a typo and wrapped a line that was > 79 chars.

Signed-off-by: Nathan Kinder 
Reviewed-by: Simo Sorce

Add 500 Error handler for krb module

2014-05-07T14:00:35+00:00

If mod_auth_kerb encounters an internal error, catch it so we can fall back to
the next authentication module, if any, or return a proper failure message.

Signed-off-by: Simo Sorce

Remind the user to restart HTTPD when done

2014-05-07T14:00:35+00:00

On a successful install you need to retsart apache to enable the instance,
remind the user that is necessary.

Signed-off-by: Simo Sorce

Give more user feedback around keytab issues

2014-05-07T14:00:25+00:00

Signed-off-by: Simo Sorce

Version bump, go to 0.2.2

2014-05-05T14:09:17+00:00

Signed-off-by: Simo Sorce

Add README file with basic installation HOWTO

2014-05-05T14:09:17+00:00

The HowTo cover the simplest scenarios for both the Identiry and
Service Provider applications.

Signed-off-by: Simo Sorce

Add IPA helper for server install

2014-05-02T01:05:47+00:00

The IPa helper chcks a krb keytab is available for the local HTTPD
service at the standard ipa location, and if not available, tries
to register the sevice and retrieve one from the IPA server.

At the end of the process forces the activation of the krb plugin
as well as the fallback to pam for authentication.

Signed-off-by: Simo Sorce