ipsilon.git, branch v0.2.4

Bump up release to 0.2.4

2014-05-20T12:07:35+00:00

Signed-off-by: Simo Sorce

Distribute README file too

2014-05-20T12:07:35+00:00

Signed-off-by: Simo Sorce

Fix typo in selinux boolean name

2014-05-20T12:03:46+00:00

This was causing pam auth to fail, as the boolean was not being turned on.

Signed-off-by: Simo Sorce

Fix generation fo server's metadata file

2014-05-19T19:17:06+00:00

At some point a '/' got lost, causing the generation of wrong endpoints.
Clients would then be redirected to an unexisting path and get a 404.

Signed-off-by: Simo Sorce

Bump up release to 0.2.3

2014-05-10T14:01:31+00:00

Signed-off-by: Simo Sorce

Fix broken login plugins order config handling

2014-05-10T14:00:17+00:00

The administrative page for configuring login plugins order had
a number of problems.  The html template expects a list of plugin
names to be supplied,  but a list of the actual plugin objects
was being supplied.  This caused a 500 error since join() would
throw an exception when it encounters something other than a string.

Even after fixing the 500 error, actually modifying the plugin
order would not work due to further issues with plugin objects
being used when strings representing the plugin names are expected
(and vice-versa).

This patch ensures that strings representing plugin names are
supplied to the html template, and that plugin objects are used
when re-ordering the live plugin list.

Resolves: https://fedorahosted.org/ipsilon/ticket/2

Signed-off-by: Nathan Kinder 
Reviewed-by: Simo Sorce

WSGI settings incorrectly makes instance global

2014-05-10T13:57:28+00:00

The WSGIProcessGroup directive should only apply to the /idp URI.
Without wrapping this directive in the Location element, multiple
Ipsilon instances or an Ipsilon instance installed on a FreeIPA
server will conflict and encounter problems running in the same
httpd process. All wsgi processes will end up redirected to the
last process grup defined in the configuration in this case and
all other instances of wsgi applications will be unreachable.

Resolves: https://fedorahosted.org/ipsilon/ticket/1

Signed-off-by: Nathan Kinder 
Reviewed-by: Simo Sorce

Add details on using a principal for the admin

2014-05-10T13:56:23+00:00

When Ipsilon is being installed with IPA, one is most likely going
to use Kerberos to login to Ipsilon as the administrator.  We should
call this out, as the default of 'admin' for the Ipsilon admin user
will conflict with the IPA 'admin' user.  You will be unable to
create a local 'admin' user at this point, requiring you to modify
the sqlite database directly to change the admin user to a full
principal.

I also corrected a typo and wrapped a line that was > 79 chars.

Signed-off-by: Nathan Kinder 
Reviewed-by: Simo Sorce

Add 500 Error handler for krb module

2014-05-07T14:00:35+00:00

If mod_auth_kerb encounters an internal error, catch it so we can fall back to
the next authentication module, if any, or return a proper failure message.

Signed-off-by: Simo Sorce

Remind the user to restart HTTPD when done

2014-05-07T14:00:35+00:00

On a successful install you need to retsart apache to enable the instance,
remind the user that is necessary.

Signed-off-by: Simo Sorce