.git/ipsilon, branch nameid_policy Unnamed repository; edit this file 'description' to name the repository. Make unspecified the default Name ID format, add to enabled list 2015-03-23T21:39:27+00:00 Rob Crittenden rcritten@redhat.com 2015-03-23T21:25:55+00:00 d04f6d2bf4842d18a66325be4caa83ac2820330d https://fedorahosted.org/ipsilon/ticket/27 Signed-off-by: Rob Crittenden <rcritten@redhat.com> 
https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Allow user to specify Name ID format when configuring SP. 2015-03-23T21:39:27+00:00 Rob Crittenden rcritten@redhat.com 2015-03-19T19:19:24+00:00 475a82027acb839c82905a81505d453126518550 https://fedorahosted.org/ipsilon/ticket/27 Signed-off-by: Rob Crittenden <rcritten@redhat.com> 
https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Implement urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified 2015-03-23T21:39:27+00:00 Rob Crittenden rcritten@redhat.com 2015-03-23T17:57:12+00:00 a26cd810fde8ba1e59e3bd5ff295e1d559ae719f Return the name the user authenticated with. https://fedorahosted.org/ipsilon/ticket/27 Signed-off-by: Rob Crittenden <rcritten@redhat.com> 
Return the name the user authenticated with.

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Implement urn:oasis:names:tc:SAML:2.0:nameid-format:persistent 2015-03-23T21:39:27+00:00 Rob Crittenden rcritten@redhat.com 2015-03-19T19:15:26+00:00 702ea162a23471b6545232dda4a07368c31ad9a8 This also makes persistent the default NameID format when generating metadata. https://fedorahosted.org/ipsilon/ticket/27 Signed-off-by: Rob Crittenden <rcritten@redhat.com> 
This also makes persistent the default NameID format when generating
metadata.

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Implement urn:oasis:names:tc:SAML:2.0:nameid-format:transient 2015-03-23T21:39:27+00:00 Rob Crittenden rcritten@redhat.com 2015-03-18T14:16:38+00:00 263fa992867bca26e9e50e28b9d3d7fced910b2c NameQualifier and SPNameQualifier are optional and are not included. https://fedorahosted.org/ipsilon/ticket/27 Signed-off-by: Rob Crittenden <rcritten@redhat.com> 
NameQualifier and SPNameQualifier are optional and are not included.

https://fedorahosted.org/ipsilon/ticket/27

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
When a new logout session is received, save old session ids 2015-03-23T18:14:56+00:00 Rob Crittenden rcritten@redhat.com 2015-02-26T20:25:07+00:00 c84eaa4d5f44524ea37f8c2444cbd53520d75a0c When a new login session is received and an existing session exists in logout, save the old session IDs. These will be included in the sessions to logout of the SP. This will ensure that if the user clears their cookie cache, for example, that any previous sessions will also be logged out. https://fedorahosted.org/ipsilon/ticket/64 Signed-off-by: Rob Crittenden <rcritten@redhat.com> 
When a new login session is received and an existing session
exists in logout, save the old session IDs.

These will be included in the sessions to logout of the SP.

This will ensure that if the user clears their cookie cache,
for example, that any previous sessions will also be logged
out.

https://fedorahosted.org/ipsilon/ticket/64

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Add LDAP test 2015-03-23T14:44:25+00:00 Simo Sorce simo@redhat.com 2015-03-18T00:25:18+00:00 cacb41e93b377496e77f824f4f1b0ce206da0bed This finally tests the LDAP login/info plugins as well as the special "groups" attribute. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com> 
This finally tests the LDAP login/info plugins as well as the special
"groups" attribute.

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Fix fetching infoldap plugin groups 2015-03-23T14:44:09+00:00 Simo Sorce simo@redhat.com 2015-03-18T00:22:25+00:00 521a28fd446a64c4fa5895e1aa768512249652f6 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com> 
Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
set SELinux boolean httpd_can_connect_ldap when install infolap and authldap 2015-03-23T11:45:50+00:00 John Dennis jdennis@redhat.com 2015-01-26T22:11:03+00:00 c95d08303cbf37b0ac39414c27daf9b0889cae3a Signed-off-by: John Dennis <jdennis@redhat.com> Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com> 
Signed-off-by: John Dennis <jdennis@redhat.com>
Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Set Cache-control on all generated pages, centralize in Endpoint 2015-03-19T20:57:55+00:00 Rob Crittenden rcritten@redhat.com 2015-03-16T20:31:55+00:00 83ec7148841303516fe31e76116b70c8a5f73aab See "Bindings for the OASIS Security Assertion Markup Language (SAML) V2.0" section 3.2.3.2. https://fedorahosted.org/ipsilon/ticket/7 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-by: Nathan Kinder <nkinder@redhat.com> 
See "Bindings for the OASIS Security Assertion Markup Language (SAML)
V2.0" section 3.2.3.2.

https://fedorahosted.org/ipsilon/ticket/7

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-by: Nathan Kinder <nkinder@redhat.com>