freeipa.git/ipaclient/remote_plugins, branch master

vault: cache the transport certificate on client

2017-03-13T15:02:16+00:00

Cache the KRA transport certificate on disk (in ~/.cache/ipa) as well as
in memory.

https://fedorahosted.org/freeipa/ticket/6652

Reviewed-By: Martin Basti 
Reviewed-By: Christian Heimes

pylint_plugins: add forbidden import checker

2017-03-10T12:04:59+00:00

Add new pylint AST checker plugin which implements a check for imports
forbidden in IPA. Which imports are forbidden is configurable in pylintrc.

Provide default forbidden import configuration and disable the check for
existing forbidden imports in our code base.

Reviewed-By: Martin Basti

Drop in-memory copy of schema zip file

2017-03-01T11:50:43+00:00

The schema cache used a BytesIO buffer to read/write schema cache before
it got flushed to disk. Since the schema cache is now loaded in one go,
the temporary buffer is no longer needed.

File locking has been replaced with a temporary file and atomic rename.

Signed-off-by: Christian Heimes 
Reviewed-By: David Kupka

Speed up client schema cache

2017-03-01T11:50:43+00:00

It's inefficient to open a zip file over and over again. By loading all
members of the schema cache file at once, the ipa CLI script starts
about 25 to 30% faster for simple cases like help and ping.

Before:

$ time for i in {1..20}; do ./ipa ping >/dev/null; done

real    0m13.608s
user    0m10.316s
sys     0m1.121s

After:

$ time for i in {1..20}; do ./ipa ping >/dev/null; done

real    0m9.330s
user    0m7.635s
sys     0m1.146s

https://fedorahosted.org/freeipa/ticket/6690

Signed-off-by: Christian Heimes 
Reviewed-By: David Kupka

compat: fix `Any` params in `batch` and `dnsrecord`

2017-02-23T17:53:50+00:00

The `methods` argument of `batch` and `dnsrecords` attribute of `dnsrecord`
were incorrectly defined as `Str` instead of `Any`.

https://fedorahosted.org/freeipa/ticket/6647

Reviewed-By: Martin Basti

ipaclient: schema cache: Handle malformed server info data gracefully

2017-01-09T08:13:36+00:00

As a part of CLI schema cache some data about each previously contacted server
are stored in simple JSON file. The file may get corrupted and became
undecodable for various reasons (parallel access, file system error,
tampering). Since the data are not necessary we should just warn an continue.

https://fedorahosted.org/freeipa/ticket/6578

Reviewed-By: Jan Cholasta

schema_cache: Make handling of string compatible with python3

2017-01-05T17:30:00+00:00

https://fedorahosted.org/freeipa/ticket/6559

Reviewed-By: Martin Basti

Silence pylint import errors of ipaserver in ipalib and ipaclient

2017-01-05T08:50:28+00:00

In client-only installations the ipaserver package is not available.
Additional guards prevent pylint to complain about missing ipaserver
package.

https://fedorahosted.org/freeipa/ticket/6468

Reviewed-By: Martin Basti

ipaclient: remove hard dependency on ipaplatform

2016-11-29T13:50:51+00:00

Hard-code the user cache directory path in ipaclient.remote_plugins.schema.

https://fedorahosted.org/freeipa/ticket/6474

Reviewed-By: Stanislav Laznicka

Replace LooseVersion

2016-11-24T14:46:40+00:00

pylint is having a hard time with distutils.version in tox's virtual
envs. virtualenv uses some tricks to provide a virtual distutils
package, pylint can't cope with.

https://github.com/PyCQA/pylint/issues/73 suggests to use pkg_resources
instead. pkg_resources' version parser has some more benefits, e.g. PEP
440 conformity. But pkg_resources.parse_version() is a heavy weight solution
with reduced functionality, e.g. no access to major version.

For API_VERSION and plugin version we can use a much simpler and faster
approach.

https://fedorahosted.org/freeipa/ticket/6468

Signed-off-by: Christian Heimes 
Reviewed-By: Martin Basti 
Reviewed-By: Martin Babinsky