freeipa.git/ipatests, branch certauth

Support for Certificate Identity Mapping

2017-02-23T12:05:07+00:00

See design http://www.freeipa.org/page/V4/Certificate_Identity_Mapping

https://fedorahosted.org/freeipa/ticket/6542

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22T08:07:48+00:00

Commit 1e6a204b4372bbbfb722a00370a5ce4e34406b9f added explicit confdir
setting to api.bootstrap() calls of a randomly selected portion of
server-side scripts and tests. This commit adds it to the rest of
server-side code for consistency.

https://fedorahosted.org/freeipa/ticket/6389

Reviewed-By: Stanislav Laznicka

test_config: fix tests for env.fips_mode

2017-02-21T16:09:00+00:00

Add optional key fips_mode to Env object in tests.

https://fedorahosted.org/freeipa/ticket/5695

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta 
Reviewed-By: Stanislav Laznicka

Add fix for ipa plugins command

2017-02-17T09:22:07+00:00

Fix adds count of plugins loaded to return dict

Fixes https://fedorahosted.org/freeipa/ticket/6513

Signed-off-by: Abhijeet Kasurde 
Reviewed-By: Martin Basti 
Reviewed-By: Martin Babinsky

Tests: search for disabled users

2017-02-17T09:07:46+00:00

Add tests for searching disabled/enabled users.

XFAIL: newly created users has no 'nsaccountlock' attribute set and
user-find doesn't return them as active users. This should be fixed.

Reviewed-By: Stanislav Laznicka

Fix test, nested lists are no longer converted to nested tuples

2017-02-15T16:27:56+00:00

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta

Test: DNS nsupdate from dns-update-system-records

2017-02-15T11:20:55+00:00

Get nsupdate data from dns-update-system-records, remove system records
and run nsupdate to verify that all system records were updated

https://fedorahosted.org/freeipa/ticket/6585

Reviewed-By: Tomas Krizek 
Reviewed-By: Jan Cholasta

Explicitly pass down ccache names for connections

2017-02-15T06:13:37+00:00

Instead of relying on side effects (setting the KRB5CCNAME env var),
explicitly pass the ccache name to be used if it is not the default
ccache. This fixes some tests that sometimes fail to work properly due
to the wrong ccache being used.

https://fedorahosted.org/freeipa/ticket/6543

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Separate RA cert store from the HTTP cert store

2017-02-15T06:13:37+00:00

This is in preparation for separating out the user under which the
ipa api framework runs as.

This commit also removes certs.NSS_DIR to avoid confusion and replaces
it where appropriate with the correct NSS DB directory, either the old
HTTPD_ALIAS_DIR ot the RA DB IPA_RADB_DIR. In some cases its use is
removed altogether as it was simply not necessary.

https://fedorahosted.org/freeipa/ticket/5959

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta

Configure HTTPD to work via Gss-Proxy

2017-02-15T06:13:37+00:00

https://fedorahosted.org/freeipa/ticket/4189
https://fedorahosted.org/freeipa/ticket/5959

Signed-off-by: Simo Sorce 
Reviewed-By: Jan Cholasta