ipsilon.git, branch ticket_25

Mapped Attrs - WIP

2015-03-20T14:57:46+00:00

Set Cache-control on all generated pages, centralize in Endpoint

2015-03-19T20:57:55+00:00

See "Bindings for the OASIS Security Assertion Markup Language (SAML)
V2.0" section 3.2.3.2.

https://fedorahosted.org/ipsilon/ticket/7

Signed-off-by: Rob Crittenden 
Reviewed-by: Nathan Kinder

Assertion AttributeStatements must be non-empty

2015-03-18T21:49:43+00:00

The saml-core-2.0-os specification section 2.7.3 requires
the AttributeStatement element to be non-empty. Shibboleth verifies
this and rejects assertions that do not comply. We gather attributes
into a local dict first before adding them to the AttributeStatement
so the fix is easy. Test if the dict is empty, move the initialization
of the assertion AttributeStatement inside the test so it's
conditional on whether the dict has members.

https://fedorahosted.org/ipsilon/ticket/61

Signed-off-by: John Dennis 
Reviewed-by: Nathan Kinder

Allow SP installation to be on non-standard ports

2015-03-18T21:49:43+00:00

When setting up a SP using ipsilon-client-install, there is no
ability to use a non-standard port.  We should allow a port number
to be specified that results in the proper URLs in the SP metadata.

This patch adds a --port option to ipsilon-client-install.  This is
used in the construction of the URLs used in the SP metadata as well
as in the httpd redirect rules if httpd is being configured.

https://fedorahosted.org/ipsilon/ticket/92

Signed-off-by: Nathan Kinder 
Reviewed-by: Rob Crittenden

Properly handle groups info in SAML provider

2015-03-18T00:38:27+00:00

Also removes internal attributes (any attribute that starts with _

Fixes: https://fedorahosted.org/ipsilon/ticket/71

Signed-off-by: Simo Sorce 
Reviewed-by: Nathan Kinder

Add negative authentication test

2015-03-18T00:37:55+00:00

Signed-off-by: Simo Sorce 
Reviewed-by: Nathan Kinder

Fix error returned from login plugins

2015-03-18T00:37:19+00:00

Some login plugins use form based authentication and let the user retry
on authentication errors. This is fine, however the wrong error code is
returned in this case, 401 should be returned.

Fixes: https://fedorahosted.org/ipsilon/ticket/94

Signed-off-by: Simo Sorce 
Reviewed-by: Nathan Kinder

Make SSSD Info enable the httpd_dbus_sssd boolean.

2015-03-17T14:52:25+00:00

https://fedorahosted.org/ipsilon/ticket/23#comment:13

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Build dated RPMs by default

2015-03-16T21:47:50+00:00

This stores the build date and git commit in the version.
This way, it's a lot easier to determine when it was last built.

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Save user attributes on subsequent calls to login.

2015-03-16T21:18:13+00:00

When a login comes in via the remote_login() call no
user attributes are set. These may be later filled in by
a subsequent call to login() after the info plugins are
called but a short-circuit in that function exits if the
user matches the current session.

Add an extra conditional such that if the user matches,
userattributes are passed in and the current user attributes
for this user is empty then save the new data.

https://fedorahosted.org/ipsilon/ticket/86

Signed-off-by: Rob Crittenden 
Reviewed-by: Nathan Kinder