ipsilon.git/ipsilon/install, branch master

Validate options of the LDAP auth plugin on installation

2015-08-27T00:22:15+00:00

Few of the LDAP options had any validation at all so it was
easy to provide a bad DN template, basedn and server URL.

These types of errors are now sufficient to kill the installer
rather than letting it limp along and hope the user notices the
failures in the output.

https://fedorahosted.org/ipsilon/ticket/40

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Count IPA as a login plugin when checking for enabled plugins

2015-08-25T12:50:43+00:00

The installer ensures that at least one login plugin is enabled.
It didn't consider IPA, which automatically enables gssapi,
when doing this calculation. Add a check so that IPA counts as well.

https://fedorahosted.org/ipsilon/ticket/152

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Drop all the calls to .keys() when iterating on the keys of a dict

2015-08-11T10:08:50+00:00

When browsing the keys of a dictionary, you can use the ``.keys()`` method but
that is in fact only really useful if you want to store the list of keys first
and act on them (like sorting them or so).
If you just want to iterate through all the keys, no matter the order, then it
is much much faster to just do: ``for key in dict``

Some stats about this can be found there:
http://blog.pingoured.fr/index.php?post/2012/03/12/Python-notes-to-self

Signed-off-by: Pierre-Yves Chibon 
Reviewed-by: Simo Sorce

Log caught exceptions in server installer at debug level

2015-07-27T09:58:30+00:00

exception() is a helper that logs a traceback at the ERROR
level. Since the stdout logs at INFO the traceback was going to
both the log file and stdout. We really only want it in the debug
log.

https://fedorahosted.org/ipsilon/ticket/143

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Add client install option to disable logout over SOAP

2015-07-16T13:04:57+00:00

This is at least somewhat for testing to ensure that
a mixed environment works but HTTP Redirect is the
recommended mechanism in the spec so some may want
to use only that.

https://fedorahosted.org/ipsilon/ticket/59

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Add support for logout over SOAP

2015-07-16T13:04:36+00:00

As each login session comes in, store the supported logout
mechanisms in the SP metadata.

Upon a logout request, loop through all of those SP's that
support SOAP and log those out first, then log out any
remaining sessions using HTTP Redirect.

https://fedorahosted.org/ipsilon/ticket/59

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Default --saml-sp-logout/post base on --saml-sp

2015-07-07T21:07:32+00:00

In ipsilon-client-install salow setting only --saml-sp and have
--saml-sp-logout and --saml-sp-post values based upon the provided value
rather than complaining that the defaults are wrong.

Closes-Ticket: 145
Signed-off-by: Jamie Lennox 
Reviewed-by: Simo Sorce

ipsilon-client-install give password in env. var.

2015-06-09T16:54:02+00:00

https://fedorahosted.org/ipsilon/ticket/142

If --admin-password is not given, see if the IPSILON_ADMIN_PASSWORD
environment variable is set, and use it for the admin_password, before
doing getpass().

Signed-off-by: Rich Megginson 
Reviewed-by: Patrick Uiterwijk

Configure the SAML2 session database during installation

2015-05-11T22:39:06+00:00

https://fedorahosted.org/ipsilon/ticket/90

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Add uninstallation support to infosssd

2015-05-08T20:35:20+00:00

This should make it revert any changes it made during
installation.

https://fedorahosted.org/ipsilon/ticket/67

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden