.git, branch ticket_88

Try to return a redirect instead a 400 for "not logged in" state

2015-03-27T18:39:21+00:00

If the user is not logged in and submits a valid logout request
then just redirect the user to the RelayState in the request
indicating that the logout was successful. This provides a better
user experience.

https://fedorahosted.org/ipsilon/ticket/88

Signed-off-by: Rob Crittenden

Add tests for Name ID functionality

2015-03-24T13:42:24+00:00

Some Name ID formats are not implemented so are expected to fail.

Kerberos is implemented but the test is done using form authentication
so no Kerberos principal is available so authentication is denied.

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Make unspecified the default Name ID format, add to enabled list

2015-03-23T22:00:34+00:00

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Allow user to specify Name ID format when configuring SP.

2015-03-23T22:00:27+00:00

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Implement urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified

2015-03-23T22:00:21+00:00

Return the name the user authenticated with.

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Implement urn:oasis:names:tc:SAML:2.0:nameid-format:persistent

2015-03-23T22:00:15+00:00

This also makes persistent the default NameID format when generating
metadata.

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Implement urn:oasis:names:tc:SAML:2.0:nameid-format:transient

2015-03-23T22:00:06+00:00

NameQualifier and SPNameQualifier are optional and are not included.

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

When a new logout session is received, save old session ids

2015-03-23T18:14:56+00:00

When a new login session is received and an existing session
exists in logout, save the old session IDs.

These will be included in the sessions to logout of the SP.

This will ensure that if the user clears their cookie cache,
for example, that any previous sessions will also be logged
out.

https://fedorahosted.org/ipsilon/ticket/64

Signed-off-by: Rob Crittenden

Add LDAP test

2015-03-23T14:44:25+00:00

This finally tests the LDAP login/info plugins as well as the special
"groups" attribute.

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Fix fetching infoldap plugin groups

2015-03-23T14:44:09+00:00

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk