freeipa.git/ipatests, branch sync-token

webui: rebase user password dialog on password dialog and add otp support

2014-06-26T10:37:39+00:00

https://fedorahosted.org/freeipa/ticket/4262

Reviewed-By: Endi Sukma Dewata

ipaplatform: Fix misspelled path constant

2014-06-25T19:07:07+00:00

Reviewed-By: Petr Viktorin

ipatests: test_sudo: Expect root listed out if no RunAsUser available

2014-06-25T18:14:52+00:00

Reviewed-By: Petr Viktorin

ipatests: test_sudo: Do not expect enumeration of runasuser groups

2014-06-25T18:14:52+00:00

Reviewed-By: Petr Viktorin

ipatests: test_sudo: Fix assertions not assuming runasgroupcat set to ALL

2014-06-25T18:14:52+00:00

Reviewed-By: Petr Viktorin

ipatests: test_sudo: Add coverage for category ALL validation

2014-06-25T18:14:52+00:00

Makes sure sudorules behave correctly both when adding new entries
with corresponding category set to ALL, and when setting the
category to all when corresponding entries exist.

The only exception of deny commands with cmdcategory ALL is
covered as well.

Reviewed-By: Petr Viktorin

ipatests: test_sudo: Add coverage for external entries

2014-06-25T18:14:52+00:00

Covers functionality of external entries for:
* users
* runAsUsers
* groups of RunAsUsers
* runAsGroups

Reviewed-By: Petr Viktorin

ipatests: test_sudo: Add tests for allowing hosts via hostmasks

2014-06-25T18:14:51+00:00

Reviewed-By: Petr Viktorin

webui-ci: adjust tests to dns changes

2014-06-25T14:23:14+00:00

All DNS Zone names must be fully qualified.

Reviewed-By: Endi Sukma Dewata

Implement OTP token importing

2014-06-25T10:55:02+00:00

This patch adds support for importing tokens using RFC 6030 key container
files. This includes decryption support. For sysadmin sanity, any tokens
which fail to add will be written to the output file for examination. The
main use case here is where a small subset of a large set of tokens fails
to validate or add. Using the output file, the sysadmin can attempt to
recover these specific tokens.

This code is implemented as a server-side script. However, it doesn't
actually need to run on the server. This was done because importing is an
odd fit for the IPA command framework:
1. We need to write an output file.
2. The operation may be long-running (thousands of tokens).
3. Only admins need to perform this task and it only happens infrequently.

https://fedorahosted.org/freeipa/ticket/4261

Reviewed-By: Alexander Bokovoy