freeipa.git/ipaplatform/base, branch pwdpolicy

ipaplatform: Add Debian platform module.

2017-01-19T15:45:42+00:00

v2:
- use redhat_services.redhat_system_units.copy
- don't use wildcard imports
- add some empty lines to make pep8 happy

v3:
- make parse_ipa_version static

v4:
- make more methods static

v5:
- fix pylint issues
- use syntax that doesn't break with python3

v6:
- remove IPA_GETKEYTAB from paths, it's the same across distros

Reviewed-By: Stanislav Laznicka 
Reviewed-By: Christian Heimes

client, platform: Use paths.SSH* instead of get_config_dir().

2017-01-05T16:50:03+00:00

Reviewed-By: Martin Basti

Configure Anonymous PKINIT on server install

2016-12-12T12:39:44+00:00

Allow anonymous pkinit to be used so that unenrolled hosts can perform FAST
authentication (necessary for 2FA for example) using an anonymous krbtgt
obtained via Pkinit.

https://fedorahosted.org/freeipa/ticket/5678

Signed-off-by: Simo Sorce 
Reviewed-By: Alexander Bokovoy 
Reviewed-By: Martin Babinsky

Remove BIN_FALSE and BIN_TRUE

2016-12-02T08:02:07+00:00

https://fedorahosted.org/freeipa/ticket/6474

Signed-off-by: Christian Heimes 
Reviewed-By: Stanislav Laznicka

ipaclient: remove hard dependency on ipaplatform

2016-11-29T13:50:51+00:00

Hard-code the user cache directory path in ipaclient.remote_plugins.schema.

https://fedorahosted.org/freeipa/ticket/6474

Reviewed-By: Stanislav Laznicka

ipapython: remove hard dependency on ipaplatform

2016-11-29T13:50:51+00:00

Use hard-coded paths to certutil, pk12util and openssl in certdb if
ipaplatform is not available.

Hard-coded the path to setpasswd in ipautil.run() doc string.

Remove ipaplatform dependency from ipapython's setup.py and add ipapython
dependency to ipaplatform's setup.py.

https://fedorahosted.org/freeipa/ticket/6474

Reviewed-By: Stanislav Laznicka

ipautil: move is_fips_enabled() to ipaplatform.tasks

2016-11-29T13:50:51+00:00

The FIPS setting is platform-specific.

https://fedorahosted.org/freeipa/ticket/6474

Reviewed-By: Stanislav Laznicka

ipautil: remove SHARE_DIR and PLUGIN_SHARE_DIR

2016-11-29T13:50:51+00:00

SHARE_DIR and PLUGIN_SHARE_DIR depend on ipaplatform.

Replace all uses of SHARE_DIR with paths.USR_SHARE_IPA_DIR and remove
both SHARE_DIR and PLUGIN_SHARE_DIR.

https://fedorahosted.org/freeipa/ticket/6474

Reviewed-By: Stanislav Laznicka

certdb: use a temporary file to pass password to pk12util

2016-11-29T13:50:51+00:00

Currently the PKCS#12 file password is passed via stdin and pk12util reads
it from /dev/stdin, which is platform-specific.

Use a temporary file instead.

https://fedorahosted.org/freeipa/ticket/6474

Reviewed-By: Stanislav Laznicka

paths: remove DEV_NULL

2016-11-29T13:50:51+00:00

The platform-specific path to /dev/null is provided by the Python standard
library in os.devnull.

Replace all uses of paths.DEV_NULL with os.devnull and remove DEV_NULL.

https://fedorahosted.org/freeipa/ticket/6474

Reviewed-By: Stanislav Laznicka