freeipa.git, branch certauth

WIP: IPA certauth plugin

2017-02-23T12:05:17+00:00

ipa-kdb: add ipadb_fetch_principals_with_extra_filter()

2017-02-23T12:05:07+00:00

Additionally make ipadb_find_principal public.

Support for Certificate Identity Mapping

2017-02-23T12:05:07+00:00

See design http://www.freeipa.org/page/V4/Certificate_Identity_Mapping

https://fedorahosted.org/freeipa/ticket/6542

Update Contributors.txt

2017-02-23T09:16:44+00:00

Update mailmap with the new mistyped authors and generate a new
Contributors list.

Reviewed-By: Tomas Krizek 
Reviewed-By: Stanislav Laznicka

Fix ipa-server-upgrade

2017-02-23T09:14:49+00:00

Running ipa-server-upgrade would fail to stop ipa_memcached if
it's already uninstalled.

https://fedorahosted.org/freeipa/ticket/5959

Reviewed-By: Christian Heimes

Use newer Certificate.serial_number in krainstance.py

2017-02-23T09:14:04+00:00

Reviewed-By: Florence Blanc-Renaud

use the methods of the parent class to retrieve CIFS kerberos keys

2017-02-22T17:50:30+00:00

adtrustinstance will now use parent's methods to retrieve keys for CIFS
principal. Since the keys are appended to the host keytab
(/etc/krb5.keytab) we need to make sure that only the stale CIFS keys
are purged from the file and that we do not re-set its ownership.

https://fedorahosted.org/freeipa/ticket/6638

Reviewed-By: Martin Basti 
Reviewed-By: Alexander Bokovoy

httpinstance: re-use parent's methods to retrieve anonymous keytab

2017-02-22T17:50:30+00:00

https://fedorahosted.org/freeipa/ticket/6638

Reviewed-By: Martin Basti 
Reviewed-By: Alexander Bokovoy

Make request_service_keytab into a public method

2017-02-22T17:50:30+00:00

a cosmetic change: we had private method comprising of calls to public
ones, which did not make much sense in our case

https://fedorahosted.org/freeipa/ticket/6638

Reviewed-By: Martin Basti 
Reviewed-By: Alexander Bokovoy

allow for more flexibility when requesting service keytab

2017-02-22T17:50:30+00:00

The service installers can now override the methods for cleaning up
stale keytabs and changing file ownership of the newly acquired keytabs.

The default actions should be usable by most installers without specific
overriding.

https://fedorahosted.org/freeipa/ticket/6638

Reviewed-By: Martin Basti 
Reviewed-By: Alexander Bokovoy