freeipa.git/ipalib, branch kdc-fixes

Fix incorrect type comparison in trust-fetch-domains

2015-08-06T08:16:30+00:00

Value needs to be unpacked from the list and converted before comparison.

https://fedorahosted.org/freeipa/ticket/5182

Reviewed-By: Alexander Bokovoy

Fix otptoken-remove-managedby command summary

2015-08-05T10:27:48+00:00

Reviewed-By: Tomas Babej

Port from python-kerberos to python-gssapi

2015-08-05T06:08:00+00:00

kerberos library doesn't support Python 3 and probably never will.
python-gssapi library is Python 3 compatible.

https://fedorahosted.org/freeipa/ticket/5147

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta 
Reviewed-By: Robbie Harwood 
Reviewed-By: Simo Sorce

store certificates issued for user entries as userCertificate;binary

2015-08-04T11:57:33+00:00

This patch forces the user management CLI command to store certificates as
userCertificate;binary attribute. The code to retrieve of user information was
modified to enable outputting of userCertificate;binary attribute to the
command line.

The modification also fixes https://fedorahosted.org/freeipa/ticket/5173

Reviewed-By: Jan Cholasta

user-show: add --out option to save certificates to file

2015-07-31T14:11:17+00:00

Add the --out option to user-show, bringing it into line with
host-show and service-show with the ability to save the user's
certificate(s) to a file.

https://fedorahosted.org/freeipa/ticket/5171

Reviewed-By: Martin Basti

certprofile-import: do not require profileId in profile data

2015-07-31T14:00:57+00:00

certprofile-import no longer requires profileId in profile data. Instead
the profile ID from the command line is taken and added to the profile
data internally.

If profileId is set in the profile, then it still has to match the CLI
option.

https://fedorahosted.org/freeipa/ticket/5090

Reviewed-By: Martin Basti

Validate vault's file parameters

2015-07-31T13:33:49+00:00

A user can pass file names for password, public and private key files to
the vault plugin. The plugin attempts to read from these files. If any
file can't be, an internal error was raised. The patch wraps all reads
and turns any IOError and UnicodeError into a ValidationError.

https://fedorahosted.org/freeipa/ticket/5155

Reviewed-By: Martin Basti

Modernize number literals

2015-07-31T13:22:19+00:00

Use Python-3 compatible syntax, without breaking compatibility with py 2.7

- Octals literals start with 0o to prevent confusion
- The "L" at the end of large int literals is not required as they use
  long on Python 2 automatically.
- Using 'int' instead of 'long' for small numbers is OK in all cases except
  strict type checking checking, e.g. type(0).

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Jan Cholasta

ULC: Fix stageused-add --from-delete command

2015-07-29T15:06:54+00:00

Nonexistent method was used to move deleted user to staged area.
Minor fixes added:
 * handle not found error
 * return new DN

https://fedorahosted.org/freeipa/ticket/5145

Reviewed-By: David Kupka

ACI plugin: correctly parse bind rules enclosed in parentheses

2015-07-29T14:40:32+00:00

Since bind rule such as `(userdn = "ldap:///anyone")` is also a valid
statement, the ipalib ACI parser was updated to handle this case.

https://fedorahosted.org/freeipa/ticket/5037

Reviewed-By: Martin Basti