.git, branch master

Implement an IPA Foreman smartproxy server

2014-02-27T20:50:37+00:00

This currently server supports only host and hostgroup commands for
retrieving, adding and deleting entries.

The incoming requests are completely unauthenticated and by default
requests must be local.

Utilize GSS-Proxy to manage the TGT.

Configuration information is in the ipa-smartproxy man page.

Design: http://www.freeipa.org/page/V3/Smart_Proxy

Make all ipatokenTOTP attributes mandatory

2014-02-21T15:07:39+00:00

Originally we made them all optional as a workaround for the lack of SELFDN
support in 389DS. However, with the advent of SELFDN, this hack is no longer
necessary. This patch updates TOTP to match HOTP in this regard.

Reviewed-By: Jan Cholasta

Clarify error message about missing DNS component in ipa-replica-prepare.

2014-02-21T15:04:20+00:00

https://fedorahosted.org/freeipa/ticket/4188

Reviewed-By: Petr Viktorin

Use super() properly to avoid an exception

2014-02-21T15:01:22+00:00

https://fedorahosted.org/freeipa/ticket/4099

Reviewed-By: Alexander Bokovoy

permission plugin: Do not assume attribute-level rights for new attributes are present

2014-02-21T13:33:49+00:00

With the --all --raw options, the code assumed attribute-level rights
were set on ipaPermissionV2 attributes, even on permissions that did not
have the objectclass.
Add a check that the data is present before using it.

https://fedorahosted.org/freeipa/ticket/4121

Reviewed-By: Martin Kosek

Remove the unused ipalib.frontend.Property class

2014-02-21T10:58:00+00:00

This class was built into the framework from its early days but it's
not used anywhere.
Remove it along with its tests

https://fedorahosted.org/freeipa/ticket/3460

Reviewed-By: Jan Cholasta

libotp: do not call internal search for NULL dn

2014-02-21T09:27:34+00:00

Reviewed-By: Nathaniel McCallum

Teach ipa-pwd-extop to respect global ipaUserAuthType settings

2014-02-21T09:26:02+00:00

https://fedorahosted.org/freeipa/ticket/4105

Reviewed-By: Alexander Bokovoy

Add OTP sync support to ipa-pwd-extop

2014-02-21T09:26:02+00:00

Reviewed-By: Alexander Bokovoy

Add OTP last token plugin

2014-02-21T09:26:02+00:00

This plugin prevents the deletion or deactivation of the last
valid token for a user. This prevents the user from migrating
back to single factor authentication once OTP has been enabled.

Thanks to Mark Reynolds for helping me with this patch.

Reviewed-By: Alexander Bokovoy