ipsilon.git/Makefile, branch ecp

Report to user if an LDAP error occurs

2015-08-18T18:50:43+00:00

Catch LDAP errors and display them properly rather than
just dumping the exception.

Rename variable authed to authok.

Add test for case where LDAP server is not started to
confirm the user receives the error alert.

https://fedorahosted.org/ipsilon/ticket/55

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Clear testdir before test run

2015-08-18T16:49:48+00:00

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Simo Sorce

pylint 1.4.3 version fixes

2015-05-07T18:44:20+00:00

Pylint 1.4.3 completely stopped recognizing the star-args condition.
In order to avoid pylint error with > 1.4.3 stop caring for star-args
and add cmdline option to ignore those errors completly so older pylint
versions are happy too.

Also fix type() vs isinstance() checks, isinstance is generally a more
correct approach to check for classes.

In some 'admin' files the type() -> isinstance() fix required to invert
the order in which ComplexList and MappingList are checked as the latter
is a subclass of ComplexList, so it needs to be checked first otherwise
the check for isinstance(option, ComplexList) matches for both and the
code stops functioning properly.

Signed-off-by: Simo Sorce 
Reviewed-by: Rob Crittenden

Configure a KDC, add test for GSSAPI/Kerberos

2015-05-07T14:44:45+00:00

Using nss_wrappers so we can control host names we can
setup a KDC and test GSSAPI, including fallback to
forms-based auth.

This also means that fetch_page() needs to handle 401
a bit better, so it can re-try a failed authentication or
fall back to forms-based auth.

Note for posterity: if gss_localname() fails this is likely
due to using the wrong krb5.conf in Apache, so pass in all
environment variables.

The KDC setup code was based heavily on the tests in the
gssproxy project.

https://fedorahosted.org/ipsilon/ticket/116

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Add OpenID test suite

2015-04-28T18:53:06+00:00

This tests core OpenID and the Attribute Exchange,
Simple Registration and Teams extensions.

Using a small wsgi tool because mod_auth_openid does
not support all extensions.

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Add test for per-SP allowed and mapping attributes

2015-04-10T14:41:22+00:00

This buidls up a specific global mapping and allowed attributes then
creates an SP-specific configuration which differs enough to confirm
that it is in fact overriding the default. It finishes by removing the
per-SP configuration and ensuring that it falls back to the IdP-default.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Check if test deps are installed

2015-04-09T00:20:53+00:00

https://fedorahosted.org/ipsilon/ticket/91
Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Nathan Kinder

Add tests for Name ID functionality

2015-03-24T13:42:24+00:00

Some Name ID formats are not implemented so are expected to fail.

Kerberos is implemented but the test is done using form authentication
so no Kerberos principal is available so authentication is denied.

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Add LDAP test

2015-03-23T14:44:25+00:00

This finally tests the LDAP login/info plugins as well as the special
"groups" attribute.

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Build dated RPMs by default

2015-03-16T21:47:50+00:00

This stores the build date and git commit in the version.
This way, it's a lot easier to determine when it was last built.

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden