freeipa.git/ipalib, branch webui-cleanup

Drop our own PKCS#10 ASN.1 decoder and use the one from python-nss

2010-07-29T14:50:10+00:00

This patch:
- bumps up the minimum version of python-nss
- will initialize NSS with nodb if a CSR is loaded and it isn't already
  init'd
- will shutdown NSS if initialized in the RPC subsystem so we use right db
- updated and added a few more tests

Relying more on NSS introduces a bit of a problem. For NSS to work you
need to have initialized a database (either a real one or no_db). But once
you've initialized one and want to use another you have to close down the
first one.  I've added some code to nsslib.py to do just that. This could
potentially have some bad side-effects at some point, it works ok now.

This patch removes the existing UI functionality, as a prep for adding the Javascript based ui.

2010-07-29T14:44:56+00:00

Fix netgroup plugin to use correct member attribute names.

2010-07-15T15:18:18+00:00

When the netgroup plugin was rebased it ended up using the member
attribute for its memberships and not memberuser/memberhost.

I also fixed this same attribute problem in the tests and tried to beef
them up a little. If nis/schema compat are enabled it will try to compare
the generated triplets with a known-good value.

Use newer API in ipalib/x509 and add missing import.

2010-07-15T15:17:58+00:00

The import was only used when running the in-tree lite-server

Clean up crypto code, take advantage of new nss-python capabilities

2010-07-15T14:51:49+00:00

This patch does the following:
- drops our in-tree x509v3 parser to use the python-nss one
- return more information on certificates
- make an API change, renaming cert-get to cert-show
- Drop a lot of duplicated code

Add API to delete a service principal key, service-disable.

2010-07-13T13:29:10+00:00

I have to do some pretty low-level LDAP work to achieve this. Since
we can't read the key using our modlist generator won't work and lots of
tricks would be needed to use the LDAPUpdate object in any case.

I pulled usercertificate out of the global params and put into each
appropriate function because it makes no sense for service-disable.

This also adds a new variable, has_keytab, to service/host_show output.
This flag tells us whether there is a krbprincipalkey.

Include contents of has_output_params in get_output_params

2010-07-13T13:27:50+00:00

Add separate var for search attributes and config attribute for search fields

2010-07-13T13:27:34+00:00

Add an optional search_attributes variable in case the attributes you
want to display by default aren't what you want to search on.

Also link in any cn=ipaconfig attributes that contain a comma-separated
list of attributes to search on.

Handle errors raised by plugins more gracefully in mod_wsgi.

2010-07-12T13:32:33+00:00

This started as an effort to display a more useful error message in the
Apache error log if retrieving the schema failed. I broadened the scope
a little to include limiting the output in the Apache error log
so errors are easier to find.

This adds a new configuration option, startup_traceback. Outside of
lite-server.py it is False by default so does not display the traceback
that lead to the StandardError being raised. This makes the mod_wsgi
error much easier to follow.

Clean up imports of hbacsvc plugin

2010-07-06T19:39:41+00:00

I used pylint to identify a bunch of unnecessary and too-broad imports