freeipa.git/ipaplatform/fedora, branch ccachesess

Break ipaplatform / ipalib import cycle of hell

2016-11-24T15:30:32+00:00

Here is an attempt to break the import cycle of hell between ipaplatform
and ipalib. All services now pass an ipalib.api object to
services.service(). RedHatServices.__init__() still needs to do a local
import because it initializes its wellknown service dict with service
instances.

Signed-off-by: Christian Heimes 
Reviewed-By: Martin Basti

Don't modify redhat_system_units

2016-11-16T13:43:53+00:00

ipaplatform.fedora.services used to modify the redhat_system_units dict.
It now creates a proper shallow copy.

Signed-off-by: Christian Heimes 
Reviewed-By: Martin Babinsky

Build: replace ipaplatform magic with symlinks generated by configure

2016-10-24T11:30:12+00:00

The original approach with __path__ implemented
by 8f98fa1bd5f1da207fab6f89b75e0cdc19d00797 broke Pylint:
We decided to resort back to symlinks as it is easiest solution
which does not break pylint in weird ways.

This commit introduces configure --with-ipaplatform option.

https://fedorahosted.org/freeipa/ticket/6418

Reviewed-By: Lukas Slebodnik 
Reviewed-By: Stanislav Laznicka 
Reviewed-By: Christian Heimes

Use module variables for timedate_services

2015-12-23T06:57:55+00:00

Explicitly store timedate services in module variable is safer than
doind just unused import.

Reviewed-By: Jan Cholasta

ipaplatform: Add constants submodule

2015-07-21T15:29:33+00:00

Introduce a ipaplatform/constants.py file to store platform related
constants, which are not paths.

Reviewed-By: Martin Basti 
Reviewed-By: Petr Spacek

Split off generic Red Hat-like platform code from Fedora platform code

2014-10-09T13:37:24+00:00

https://fedorahosted.org/freeipa/ticket/4562

Reviewed-By: Martin Kosek

Refactor selinuxenabled check

2014-09-30T17:03:40+00:00

Ticket: https://fedorahosted.org/freeipa/ticket/4571
Reviewed-By: Thierry Bordaz

Remove ipa-ca.crt from systemwide CA store on client uninstall and cert update

2014-09-30T08:01:38+00:00

The file was used by previous versions of IPA to provide the IPA CA certificate
to p11-kit and has since been obsoleted by ipa.p11-kit, a file which contains
all the CA certificates and associated trust policy from the LDAP certificate
store.

Since p11-kit is hooked into /etc/httpd/alias, ipa-ca.crt must be removed to
prevent certificate import failures in installer code.

Also add ipa.p11-kit to the files owned by the freeipa-python package.

https://fedorahosted.org/freeipa/ticket/3259

Reviewed-By: Rob Crittenden

Move setting SELinux booleans to platform code

2014-09-26T10:12:59+00:00

Create a platform task for setting SELinux booleans.

Use an exception for the case when the booleans could not be set
(since this is an error if not handled).
Since ipaplatform should not depend on ipalib, create a new
errors module in ipapython for SetseboolError.

Handle uninstallation with the same task, which means
the booleans are now restored with a single call to
setsebool.

Preparation for: https://fedorahosted.org/freeipa/ticket/4157

Fixes: https://fedorahosted.org/freeipa/ticket/2934
Fixes: https://fedorahosted.org/freeipa/ticket/2519
Reviewed-By: Thierry Bordaz

Get CA certs for system-wide store from cert store in ipa-client-install.

2014-07-30T14:04:21+00:00

All of the certificates and associated key policy are now stored in
/etc/pki/ca-trust/source/ipa.p11-kit.

Part of https://fedorahosted.org/freeipa/ticket/3259
Part of https://fedorahosted.org/freeipa/ticket/3520

Reviewed-By: Rob Crittenden