freeipa.git/API.txt, branch ccachesess

IdM Server: list all Employees with matching Smart Card

2017-03-08T14:08:41+00:00

Implement a new IPA command allowing to retrieve the list of users matching
the provided certificate.
The command is using SSSD Dbus interface, thus including users from IPA
domain and from trusted domains. This requires sssd-dbus package to be
installed on IPA server.

https://fedorahosted.org/freeipa/ticket/6646

Reviewed-By: David Kupka 
Reviewed-By: Jan Cholasta

Support for Certificate Identity Mapping

2017-03-02T14:09:42+00:00

See design http://www.freeipa.org/page/V4/Certificate_Identity_Mapping

https://fedorahosted.org/freeipa/ticket/6542

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta 
Reviewed-By: David Kupka

Allow nsaccountlock to be searched in user-find command

2017-02-14T16:09:45+00:00

This patch provides the ability to search and find users who are
enabled/disabled in `ipa user-find` command without breaking API compatibility.

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta

stageuser: Add stageuser-{add,remove}-principal

2017-02-07T12:58:48+00:00

https://fedorahosted.org/freeipa/ticket/6623

Reviewed-By: Martin Basti

stageuser: Add stageuser-{add,remove}-cert

2017-02-07T12:58:48+00:00

Move {add,remove}-cert implementation from user to baseuser and inherit
{,stage}user-{add,remove}-cert from it.

https://fedorahosted.org/freeipa/ticket/6623

Reviewed-By: Martin Basti

Add options to write lightweight CA cert or chain to file

2016-12-12T12:03:15+00:00

Administrators need a way to retrieve the certificate or certificate
chain of an IPA-managed lightweight CA.  Add params to the `ca'
object for carrying the CA certificate and chain (as multiple DER
values).  Add the `--chain' flag for including the chain in the
result (chain is also included with `--all').  Add the
`--certificate-out' option for writing the certificate to a file (or
the chain, if `--chain' was given).

Fixes: https://fedorahosted.org/freeipa/ticket/6178
Reviewed-By: Jan Cholasta 
Reviewed-By: Tomas Krizek

DNS: Support URI resource record type

2016-10-11T14:48:47+00:00

https://fedorahosted.org/freeipa/ticket/6344

Reviewed-By: Martin Basti

dns: re-introduce --raw in dnsrecord-del

2016-09-19T15:36:20+00:00

The flag was removed in commit ff52c25ae299abba8bed653fe324951979a41293
because it is unused. Add it back for compatibility with old clients.

https://fedorahosted.org/freeipa/ticket/5644

Reviewed-By: Martin Basti

Add ca-disable and ca-enable commands

2016-09-07T10:37:48+00:00

We soon plan to revoke certificates upon lightweight CA deletion.
This makes it important to provide a way to prevent a CA from
issuing certificates whilst not deleting and revoking it, and
continuing to allow management of issued certs.

This commit adds the ca-disable and ca-enable commands.

Fixes: https://fedorahosted.org/freeipa/ticket/6257
Reviewed-By: Martin Babinsky 
Reviewed-By: Jan Cholasta

dns: prompt for missing record parts in CLI

2016-09-06T10:54:38+00:00

Fix the code which determines if a record part is required and thus should
be prompted not to wrongfully consider all record parts to be optional.

https://fedorahosted.org/freeipa/ticket/6203

Reviewed-By: Martin Basti