freeipa.git, branch ccachesess

Store session cookie in a ccache option

2017-03-09T13:43:49+00:00

Instead of using the kernel keyring, store the session cookie within the
ccache. This way kdestroy will really wipe away all credentials.

Ticket: https://pagure.io/freeipa/issue/6661

Signed-off-by: Simo Sorce

ipa-managed-entries: only permit running the command on IPA master

2017-03-09T09:31:43+00:00

https://pagure.io/freeipa/issue/6735

Reviewed-By: Tomas Krizek

ipa-managed-entries: use server-mode API

2017-03-09T09:31:43+00:00

During LDAP connection management refactoring the ad-hoc ldap connection
in `ipa-managed-entries` was replaced by calls to ldap2 backend without
updating API initialization.

https://pagure.io/freeipa/issue/6735

Reviewed-By: Tomas Krizek

Don't use weak ciphers for client HTTPS connections

2017-03-09T09:27:55+00:00

https://pagure.io/freeipa/issue/6730

Reviewed-By: Martin Basti

WebUI: Add cermapmatch module

2017-03-08T15:22:01+00:00

Add module which can show users which are mapped to the provided certificate.
Additionaly, the certificate is parsed and parsed information are
also displayed.

https://pagure.io/freeipa/issue/6601

Reviewed-By: Petr Vobornik

WebUI: Add Adapter for certmap_match result table

2017-03-08T15:22:01+00:00

Result of certmap_match command is in the following format:
[{domain: 'domain1', uid:[uid11,uid12,uid13]}, {domain: 'domain2',
uid:[uid21, uid22, uid23},...]

For correct displaying in table we need to reformat it to the following:
[{domain: 'domain1', uid: 'uid11'}, {domain: 'domain1', uid: 'uid12'},...

This can be done using this Adapter.

Part of: https://pagure.io/freeipa/issue/6601

Reviewed-By: Petr Vobornik

WebUI: Possibility to choose object when API call returns list of objects

2017-03-08T15:22:01+00:00

In case that API call returns array of objects which contains data, using
'object_index' attribute in adapter specification we can set which object
should be used.

It is possible to choose only one object specified by its index in array.

Part of: https://pagure.io/freeipa/issue/6601

Reviewed-By: Petr Vobornik

WebUI: Add possibility to turn of autoload when details.load is called

2017-03-08T15:22:01+00:00

When field on details facet has set 'autoload_value' to false, then it won't
be loaded using that.load method of details facet. That means that field
might stay unchanged even that loading of data was performed.

Part of: https://pagure.io/freeipa/issue/6601

Reviewed-By: Petr Vobornik

config: re-add `init_config` and `config`

2017-03-08T15:08:30+00:00

Re-add `init_config` and `config` to `ipapython.config`, because they are
used by Ipsilon (see https://pagure.io/ipsilon/issue/265).

This partially reverts commit 7b966e8577fdb56f069cf26a6ab4d6c77b8743b9.

https://pagure.io/freeipa/issue/6707

Reviewed-By: Martin Basti

Chain CSR generator file loaders

2017-03-08T14:59:26+00:00

First try custom location, then csrgen subdir in confdir and finally
fall back to package data.

Signed-off-by: Christian Heimes 
Reviewed-By: Ben Lipton 
Reviewed-By: Martin Basti