freeipa.git, branch kdc-fixes

TODO: make sure a single krbPrincipalName value gets used for canonicalization too

2015-08-10T21:03:29+00:00

IPA KDB: use empty profile to init krb5 context in tests

2015-08-10T09:39:22+00:00

If the systems /etc/krb5.conf contains some unexpected or broken
configuration the test might fail. With this patch the tests are run
with an empty configuration.

IPA KDB: allow case in-sensitive realm in AS request

2015-08-10T09:39:13+00:00

If the canonicalization flag is set the realm of the client principal in
an AS request (kinit) is transformed into upper-case to match the IPA
convention for realm names.

Resolves https://fedorahosted.org/freeipa/ticket/4844

dcerpc: Simplify generation of LSA-RPC binding strings

2015-08-07T16:06:02+00:00

https://fedorahosted.org/freeipa/ticket/5183

Reviewed-By: Tomas Babej

Fix selector of protocol for LSA RPC binding string

2015-08-07T15:55:48+00:00

For Windows Server 2012R2 and others which force SMB2 protocol use
we have to specify right DCE RPC binding options.

For using SMB1 protocol we have to omit specifying SMB2 protocol and
anything else or otherwise SMB1 would be considered a pipe to connect
to. This is by design of a binding string format.

https://fedorahosted.org/freeipa/ticket/5183

Reviewed-By: Tomas Babej

Fix incorrect type comparison in trust-fetch-domains

2015-08-06T08:16:30+00:00

Value needs to be unpacked from the list and converted before comparison.

https://fedorahosted.org/freeipa/ticket/5182

Reviewed-By: Alexander Bokovoy

Fix otptoken-remove-managedby command summary

2015-08-05T10:27:48+00:00

Reviewed-By: Tomas Babej

Port from python-kerberos to python-gssapi

2015-08-05T06:08:00+00:00

kerberos library doesn't support Python 3 and probably never will.
python-gssapi library is Python 3 compatible.

https://fedorahosted.org/freeipa/ticket/5147

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta 
Reviewed-By: Robbie Harwood 
Reviewed-By: Simo Sorce

store certificates issued for user entries as userCertificate;binary

2015-08-04T11:57:33+00:00

This patch forces the user management CLI command to store certificates as
userCertificate;binary attribute. The code to retrieve of user information was
modified to enable outputting of userCertificate;binary attribute to the
command line.

The modification also fixes https://fedorahosted.org/freeipa/ticket/5173

Reviewed-By: Jan Cholasta

test suite for user/host/service certificate management API commands

2015-08-03T12:40:12+00:00

These tests excercise various scenarios when using new class of API commands
to add or remove certificates to user/service/host entries.

Part of http://www.freeipa.org/page/V4/User_Certificates

Reviewed-By: Milan Kubík