ipsilon.git, branch sp_register

Allow SP registration from ipsilon-client-install

2015-04-02T01:17:46+00:00

This optionally allows a SAML SP to be registered with the IDP when
running ipsilon-client-install.  To register an SP, the following
options are used:

  --saml-idp-url   (Ipsilon IDP URL)
  --saml-sp-name   (Name to register the SP as)
  --admin-user     (Ipsilon admin user)
  --admin-password (Ipsilon admin password file)

If the --saml-idp-url option is set, we attempt to register the SP.
The --saml-sp-name option is required if you are registering a SP.
The --admin-user already defaults to admin, so it only needs to be
specified if your admin user has a different username.  If the
--admin-password option is not specified, we prompt for the password.

The --saml-idp-metadata was previously required, but this option is
redundant if the new --saml-idp-url option is specified and you are
not using a local copy of the IDP metadata.  You can now just use
the --saml-idp-url option, and we build the metadata URL from it.
This helps to minimize the number of required options when you are
registering an SP during installation.

https://fedorahosted.org/ipsilon/ticket/101
Signed-off-by: Nathan Kinder

SP uninstall attempts to run install

2015-03-31T04:23:03+00:00

When running 'ipsilon-client-install --uninstall' to uninstall a SP,
we call the install routine again after completing the uninstallation.
This leads to confusing error messages about missing required options.
This patch corrects the uninstallation logic.

https://fedorahosted.org/ipsilon/ticket/100
Signed-off-by: Nathan Kinder

Release v0.5.0

2015-03-30T21:13:54+00:00

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Add options to explicitly set database uris during install

2015-03-30T18:20:11+00:00

Also offer the option to set the OpenID database URI during install

https://fedorahosted.org/ipsilon/ticket/17

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Use all SSSD domains for info plugin by default.

2015-03-27T18:47:11+00:00

Rather than requiring --info-sssd-domain as an argument make it
an optional argument, defaulting to enabling all SSSD domains.

Convert the argument from a single value into a list so that multiple
invocations can be made and all domains in the list will be enabled.

There is still the possibility that failures in configuring a domain
will occur (no domain found, for example) and these are considered
"soft" failures. That is it won't abort the server installation.

https://fedorahosted.org/ipsilon/ticket/78

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Add a method to Installer classes to validate argument input

2015-03-27T18:46:52+00:00

There was no way to validate argument input from plugins and
cause the installer to bail out. If a plugin needs to validate
some input it can use the validate_args() method and raise
ConfigurationError() if an issue is found.

https://fedorahosted.org/ipsilon/ticket/78

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Try to return a redirect instead a 400 for "not logged in" state

2015-03-27T18:43:26+00:00

If the user is not logged in and submits a valid logout request
then just redirect the user to the RelayState in the request
indicating that the logout was successful. This provides a better
user experience.

https://fedorahosted.org/ipsilon/ticket/88

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Add tests for Name ID functionality

2015-03-24T13:42:24+00:00

Some Name ID formats are not implemented so are expected to fail.

Kerberos is implemented but the test is done using form authentication
so no Kerberos principal is available so authentication is denied.

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Make unspecified the default Name ID format, add to enabled list

2015-03-23T22:00:34+00:00

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Allow user to specify Name ID format when configuring SP.

2015-03-23T22:00:27+00:00

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce