.git, branch installer_fixes

Better error handling for login mgrs in server install/uninstall

2015-04-10T15:32:51+00:00

The purpose is to catch it when either no modules are enabled or if
you try to set the login module order and one of them is not
available/installed, then fail gracefully.

There were some baked-in assumptions that all login providers
are installed. Add some error handling around trying to determine
what is available, and rather than trying to force pam to be enabled
just exit with a handy message.

Don't rely on lm_order during uninstall. Use the list of enabled
Login managers instead.

Bail out of argument checking if uninstall is requested.

https://fedorahosted.org/ipsilon/ticket/105

Signed-off-by: Rob Crittenden

Add test for per-SP allowed and mapping attributes

2015-04-10T14:41:22+00:00

This buidls up a specific global mapping and allowed attributes then
creates an SP-specific configuration which differs enough to confirm
that it is in fact overriding the default. It finishes by removing the
per-SP configuration and ensuring that it falls back to the IdP-default.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Make the authtest login plugin provide more info

2015-04-10T14:41:22+00:00

Provide more variables to test for in allow attribute and mapping
testing.

Adds givenname (Test User), surname (the username) and
email (username@example.com).

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

The last allowed/mapping rule can be removed in SPs

2015-04-10T14:41:09+00:00

If you created rule(s) in an SP for either allowed attributes or
attribute mapping there was no way to remove the last rule meaning
it could never go back to use the global defaults.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

SAML SP template page is no longer needed

2015-04-10T14:38:30+00:00

The page is built up using the option_config.html template now.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Add per-SP attribute mapping and allowed attributes

2015-04-10T14:38:20+00:00

The per-SP values are considered overrides and the global values
are default.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Rename and move PluginConfig to ConfigHelper

2015-04-10T14:38:15+00:00

The configuration class was originally intended to be tied. At this
point it is quite generic and useful outside of plugins. Rename
it to something more generic and move it into the config module.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Convert SAML2 SP Provider UI to use Config object

2015-04-10T14:38:07+00:00

This makes the look-and-feel the same between the SAML2 configuration
and the per-SP configuration.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Move mapping and complex list helpers out of class

2015-04-10T14:37:56+00:00

This is so other classes which are not an AdminPage can also have
access to these helpers.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Rename plugin_config template to option_config

2015-04-10T14:37:49+00:00

Give the configuration template, which maps Config objects into
HTML, a more generic name.

Along with the rename this also drops the user.is_admin check so
a user can manage their SP data.

The backend still enforces writing.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce