.git, branch gssapi_test

Pull the GSSAPI principal out of the userattrs

2015-05-06T20:00:24+00:00

This was originally getting the principal from the
user object itself which meant it was looking for
it in the database. Look in the attributes instead
which are stored in the user session.

Signed-off-by: Rob Crittenden

Enable Kerberos NameID testing in testnameid

2015-05-06T20:00:24+00:00

Since there is now an easy way to stand up a KDC in the
tests go ahead and enable it so the Kerberos NameID can be
tested.

Signed-off-by: Rob Crittenden

Configure a KDC, add test for GSSAPI/Kerberos

2015-05-06T20:00:24+00:00

Using nss_wrappers so we can control host names we can
setup a KDC and test GSSAPI, including fallback to
forms-based auth.

This also means that fetch_page() needs to handle 401
a bit better, so it can re-try a failed authentication or
fall back to forms-based auth.

Note for posterity: if gss_localname() fails this is likely
due to using the wrong krb5.conf in Apache, so pass in all
environment variables.

The KDC setup code was based heavily on the tests in the
gssproxy project.

https://fedorahosted.org/ipsilon/ticket/116

Signed-off-by: Rob Crittenden

SSSD info plugin is immutable if not preconfigured

2015-05-06T19:18:31+00:00

The SSSD info plugin configures SSSD and modules in
Apache as root during installation. This cannot be
done in the UI so we must not allow users to modify
the state if it was not "preconfigured" during
install.

If it has been configured then users are allowed
to enable/disable the plugin.

This is controlled by a value stored in the
info_config table, preconfigured.

The plugin configuration is hidden from the UI by
overridding the get_config_object() method.

https://fedorahosted.org/ipsilon/ticket/111

Signed-off-by: Simo Sorce 
Reviewed-by: Rob Crittenden

Drop usage of self._debug and use self.debug instead

2015-05-05T18:32:24+00:00

This method was deprecated but still used in a lot of places.

https://fedorahosted.org/ipsilon/ticket/120

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Fix lint issues with loginstack changes

2015-04-29T18:27:30+00:00

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Merge the login and info plugins configurations

2015-04-29T17:30:04+00:00

Having separate login and info plugins configuration pages doesn't
really make a lot of sense. As a first step moving towards login stacks
put login and info plugin configuration into a common "Login Stack"
menu item.

https://fedorahosted.org/ipsilon/ticket/117

Signed-off-by: Simo Sorce 
Reviewed-by: Rob Crittenden

Change references to authkrb plugin to authgssapi

2015-04-28T21:30:07+00:00

With the switch to mod_auth_gssapi we aren't limited to only
negotiated Kerberos so name the plugin to reflect this.

https://fedorahosted.org/ipsilon/ticket/114

Signed-off-by: Rob Crittenden

Rename authkrb plugin to authgssapi

2015-04-28T21:30:03+00:00

https://fedorahosted.org/ipsilon/ticket/114

Signed-off-by: Rob Crittenden

Insert a small timeout before reporting the test successful

2015-04-28T19:50:28+00:00

This is so the OS gets enough time to clean up all
of the sockets used during the execution of the test.
Without this, sometimes a "port already in use" error
will fail the next test.

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden