freeipa.git, branch webui-cleanup

Add container and initial ACIs for entitlement support

2010-07-29T14:50:29+00:00

The entitlement entries themselves will be rather simple, consisting
of the objectClasses ipaObject and pkiUser. We will just store
userCertificate in it. The DN will contain the UUID of the entitlement.

ticket #27

Drop our own PKCS#10 ASN.1 decoder and use the one from python-nss

2010-07-29T14:50:10+00:00

This patch:
- bumps up the minimum version of python-nss
- will initialize NSS with nodb if a CSR is loaded and it isn't already
  init'd
- will shutdown NSS if initialized in the RPC subsystem so we use right db
- updated and added a few more tests

Relying more on NSS introduces a bit of a problem. For NSS to work you
need to have initialized a database (either a real one or no_db). But once
you've initialized one and want to use another you have to close down the
first one.  I've added some code to nsslib.py to do just that. This could
potentially have some bad side-effects at some point, it works ok now.

Add some basic tests for ipalib/x509

2010-07-29T14:45:11+00:00

This patch removes the existing UI functionality, as a prep for adding the Javascript based ui.

2010-07-29T14:44:56+00:00

1. Schema cleanup

2010-07-21T15:40:25+00:00

The ipaAssociation is the core of different association object.
It seems that the service is an exception rather then rule.
So it is moved into the object where it belongs.

Fixed matching rules and some attribute types.

Addressing ticket: https://fedorahosted.org/freeipa/ticket/89

Removed unused password attribute and realigned OIDs.

Become IPA v2 alpha 4 (1.9.0.pre4)

2010-07-15T15:25:39+00:00

Fix netgroup plugin to use correct member attribute names.

2010-07-15T15:18:18+00:00

When the netgroup plugin was rebased it ended up using the member
attribute for its memberships and not memberuser/memberhost.

I also fixed this same attribute problem in the tests and tried to beef
them up a little. If nis/schema compat are enabled it will try to compare
the generated triplets with a known-good value.

Fix nis netgroup configuration

2010-07-15T15:18:15+00:00

This was originally configured to pull from the compat area but Nalin
thinks that is a bad idea (and it stopped working anyway). This configures
the netgroup map to create the triples on its own.

Ticket #87

Fix ipa-compat-manage and ipa-nis-manage

2010-07-15T15:18:11+00:00

Neither of these was working properly, I assume due to changes in the ldap
backend. The normalizer now appends the basedn if it isn't included and
this was causing havoc with these utilities.

After fixing the basics I found a few corner cases that I also addressed:
- you can't/shouldn't disable compat if the nis plugin is enabled
- we always want to load the nis LDAP update so we get the netgroup config
- LDAPupdate.update() returns True/False, not an integer

I took some time and fixed up some things pylint complained about too.

Ticket #83

Use newer API in ipalib/x509 and add missing import.

2010-07-15T15:17:58+00:00

The import was only used when running the in-tree lite-server