freeipa.git/ipaclient, branch cakeysfix

ipa-client-install: remove extra space in pkinit_anchors definition

2017-05-02T11:46:55+00:00

ipa-client-install modifies /etc/krb5.conf and defines the following line:
    pkinit_anchors = FILE: /etc/ipa/ca.crt

The extra space between FILE: and /etc/ipa/ca.crt break pkinit.

https://pagure.io/freeipa/issue/6916

Reviewed-By: Alexander Bokovoy

vault: piped input for ipa vault-add fails

2017-04-28T11:19:51+00:00

An exception is raised when using echo "Secret123\n" | ipa vault-add myvault

This happens because the code is using (string).decode(sys.stdin.encoding)
and sys.stdin.encoding is None when the input is read from a pipe.
The fix is using the prompt_password method defined by Backend.textui,
which gracefully handles this issue.

https://pagure.io/freeipa/issue/6907

Reviewed-By: Christian Heimes 
Reviewed-By: Abhijeet Kasurde 
Reviewed-By: Stanislav Laznicka

Correct PyPI package dependencies

2017-04-26T10:31:11+00:00

* Remove unused install requires from ipapython
* Add missing requirements to ipaserver
* Correct dependencies for yubico otptoken
* Add explicit dependency on cffi for csrgen
* Python 2 uses python-ldap, Python 3 pyldap

https://pagure.io/freeipa/issue/6875

Signed-off-by: Christian Heimes 
Reviewed-By: Martin Basti

Use entry_points for ipa CLI

2017-04-11T11:29:50+00:00

Fix problem with hard-coded shebang in ipa command line tool by using
a proper setuptools entry point for the console script. ipaclient is now
an executable Python package, too.

```
$ python -m ipaclient ping
```

is equivalent to

```
$ ipa ping
```

Related: https://pagure.io/freeipa/issue/6653
Closes: https://pagure.io/freeipa/issue/6850
Signed-off-by: Christian Heimes 
Reviewed-By: Tomas Krizek

csrgen: Beginnings of NSS database support

2017-04-03T07:46:30+00:00

https://pagure.io/freeipa/issue/4899

Reviewed-By: Jan Cholasta

csrgen: Modify cert_get_requestdata to return a CertificationRequestInfo

2017-04-03T07:46:30+00:00

Also modify cert_request to use this new format. Note, only PEM private
keys are supported for now. NSS databases are not.

https://pagure.io/freeipa/issue/4899

Reviewed-By: Jan Cholasta

csrgen: Change to pure openssl config format (no script)

2017-04-03T07:46:30+00:00

https://pagure.io/freeipa/issue/4899

Reviewed-By: Jan Cholasta

csrgen: Remove helper abstraction

2017-04-03T07:46:30+00:00

All requests now use the OpenSSL formatter. However, we keep Formatter
a separate class so that it can be changed out for tests.

https://pagure.io/freeipa/issue/4899

Reviewed-By: Jan Cholasta

Simplify KRA transport cert cache

2017-03-28T08:10:03+00:00

In-memory cache causes problem in forking servers. A file based cache is
good enough. It's easier to understand and avoids performance regression
and synchronization issues when cert becomes out-of-date.

https://pagure.io/freeipa/issue/6787
Signed-off-by: Christian Heimes 
Reviewed-By: Jan Cholasta

Support certificate login after installation and upgrade

2017-03-14T14:13:43+00:00

Add necessary steps which set SSSD and set SELinux boolean during
installation or upgrade. Also create new endpoint in apache for
login using certificates.

https://pagure.io/freeipa/issue/6225

Reviewed-By: Florence Blanc-Renaud 
Reviewed-By: Petr Vobornik 
Reviewed-By: David Kupka