freeipa.git/ipalib, branch master

Add debug logging for keep-alive

2017-03-20T18:24:28+00:00

Signed-off-by: Christian Heimes 
Reviewed-By: Tomas Krizek

Use connection keep-alive

2017-03-20T18:24:28+00:00

Do not forcefully close the connection after every request. This enables
HTTP connection keep-alive, also known as persistent TCP and TLS/SSL
connection. Keep-alive speed up consecutive HTTP requests by 15% (for
local, low-latency network connections to a fast server) to multiple
times (high latency connections or remote peers).

https://pagure.io/freeipa/issue/6641

Signed-off-by: Christian Heimes 
Reviewed-By: Tomas Krizek

Add debug log in case cookie retrieval went wrong

2017-03-20T18:16:30+00:00

https://pagure.io/freeipa/issue/6774

Reviewed-By: Martin Basti

vault: cache the transport certificate on client

2017-03-13T15:02:16+00:00

Cache the KRA transport certificate on disk (in ~/.cache/ipa) as well as
in memory.

https://fedorahosted.org/freeipa/ticket/6652

Reviewed-By: Martin Basti 
Reviewed-By: Christian Heimes

rpc: fix crash in verbose mode

2017-03-13T14:44:44+00:00

Fix a crash caused by feeding incorrect data to `json.dumps()` in
`JSONServerProxy.__request()` introduced by commit
8159c2883bf66980582d1227c364df4e592bdd7e.

https://pagure.io/freeipa/issue/6734

Reviewed-By: Stanislav Laznicka

install: re-introduce option groups

2017-03-13T09:12:40+00:00

Re-introduce option groups in ipa-client-install, ipa-server-install and
ipa-replica-install.

https://pagure.io/freeipa/issue/6392

Reviewed-By: Stanislav Laznicka

install: add missing space in realm_name description

2017-03-13T09:12:40+00:00

https://pagure.io/freeipa/issue/6392

Reviewed-By: Stanislav Laznicka

pylint_plugins: add forbidden import checker

2017-03-10T12:04:59+00:00

Add new pylint AST checker plugin which implements a check for imports
forbidden in IPA. Which imports are forbidden is configurable in pylintrc.

Provide default forbidden import configuration and disable the check for
existing forbidden imports in our code base.

Reviewed-By: Martin Basti

Store session cookie in a ccache option

2017-03-10T11:40:08+00:00

Instead of using the kernel keyring, store the session cookie within the
ccache. This way kdestroy will really wipe away all credentials.

Ticket: https://pagure.io/freeipa/issue/6661

Signed-off-by: Simo Sorce 
Reviewed-By: Martin Basti 
Reviewed-By: Christian Heimes

Don't use weak ciphers for client HTTPS connections

2017-03-09T09:27:55+00:00

https://pagure.io/freeipa/issue/6730

Reviewed-By: Martin Basti