.git, branch no_sssd_ui

Don't allow the SSSD info plugin to enabled/disabled in UI

2015-04-22T19:38:55+00:00

This is due to the fact that it requires root to modify the
SSSD configuration, modify the Apache configuration and
restart those services.

This uses the call location (from the stack) to determine the
source of the caller. We want to let enable() happen when the
Ipsilon service starts but not when it is accessed via the
admin UI. Ideally this would be passed in via a flag but since
there is only one use-case right now I went with the hackish
method.

https://fedorahosted.org/ipsilon/ticket/111

Signed-off-by: Rob Crittenden

Fix sticter lint checks

2015-04-17T20:09:17+00:00

Signed-off-by: Simo Sorce 
Reviewed-by: Rob Crittenden

Use mod_auth_gssapi instead of mod_auth_kerb

2015-04-17T20:05:11+00:00

Change configuration on new installs only.

Enable GssapiLocalName so we have access to the local name in
REMOTE_USER and the full principle in GSS_NAME.

Enable GssapiSSLonly even though SSLRequireSSL is also set.
The belt and suspenders principla.

https://fedorahosted.org/ipsilon/ticket/89

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Move ipsilon WSGI script from /usr/sbin to /usr/libexec

2015-04-15T17:57:42+00:00

This command is not intended to be executed by end-users.

https://fedorahosted.org/ipsilon/ticket/76

Signed-off-by: Rob Crittenden 
Reviewed-by: Nathan Kinder

Release v0.6.0

2015-04-15T14:40:59+00:00

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Close database sesssions

2015-04-15T14:35:04+00:00

This will close any opened database sessions at the end
of the request.

https://fedorahosted.org/ipsilon/ticket/110

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Better error handling for login mgrs in server install/uninstall

2015-04-13T16:30:37+00:00

The purpose is to catch it when either no modules are enabled or if
you try to set the login module order and one of them is not
available/installed, then fail gracefully.

There were some baked-in assumptions that all login providers
are installed. Add some error handling around trying to determine
what is available, and rather than trying to force pam to be enabled
just exit with a handy message.

Don't rely on lm_order during uninstall. Use the list of enabled
Login managers instead.

Bail out of argument checking if uninstall is requested.

https://fedorahosted.org/ipsilon/ticket/105

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Fix bootstrap tooltip error

2015-04-13T13:43:28+00:00

This was caused by running the tooltip() function against
the document object, while it should be ran against the
objects that use a tooltip.
This new method is the suggested way to enable tooltips
per http://getbootstrap.com/javascript/#tooltips-examples.

https://fedorahosted.org/ipsilon/ticket/98

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Simo Sorce

Add test for per-SP allowed and mapping attributes

2015-04-10T14:41:22+00:00

This buidls up a specific global mapping and allowed attributes then
creates an SP-specific configuration which differs enough to confirm
that it is in fact overriding the default. It finishes by removing the
per-SP configuration and ensuring that it falls back to the IdP-default.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Make the authtest login plugin provide more info

2015-04-10T14:41:22+00:00

Provide more variables to test for in allow attribute and mapping
testing.

Adds givenname (Test User), surname (the username) and
email (username@example.com).

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce