freeipa.git/ipapython/dnssec/bindmgr.py, branch webui_isolate

ipapython: move dnssec, p11helper and secrets to ipaserver

2016-11-29T13:50:51+00:00

The dnssec and secrets subpackages and the p11helper module depend on
ipaplatform.

Move them to ipaserver as they are used only on the server.

https://fedorahosted.org/freeipa/ticket/6474

Reviewed-By: Stanislav Laznicka

DNSSEC: ipa-dnskeysyncd: Skip zones with old DNSSEC metadata in LDAP

2016-01-07T13:13:23+00:00

This filtering is useful in cases where LDAP contains DNS zones which
have old metadata objects and DNSSEC disabled. Such zones must be
ignored to prevent errors while calling dnssec-keyfromlabel or rndc.

https://fedorahosted.org/freeipa/ticket/5348

Reviewed-By: Martin Basti

DNSSEC: Make sure that current key state in LDAP matches key state in BIND

2016-01-07T13:13:23+00:00

We have to explicitly specify "none" value to prevent dnssec-keyfromlabel
utility from using current time for keys without "publish" and "activate"
timestamps.

Previously this lead to situation where key was in (intermediate) state
"generated" in OpenDNSSEC but BIND started to use this key for signing.

https://fedorahosted.org/freeipa/ticket/5348

Reviewed-By: Martin Basti

Remove unused imports

2015-12-23T06:59:22+00:00

This patch removes unused imports, alse pylint has been configured to
check unused imports.

Reviewed-By: Jan Cholasta

Refactor ipautil.run

2015-12-14T09:54:23+00:00

The ipautil.run function now returns an object with returncode and
output are accessible as attributes.

The stdout and stderr of all commands are logged (unless skip_output is given).

The stdout/stderr contents must be explicitly requested with a keyword
argument, otherwise they are None.
This is because in Python 3, the output needs to be decoded, and that can
fail if it's not decodable (human-readable) text.

The raw (bytes) output is always available from the result object,
as is "leniently" decoded output suitable for logging.

All calls are changed to reflect this.

A use of Popen in cainstance is changed to ipautil.run.

Reviewed-By: Jan Cholasta

Use absolute imports

2015-08-12T16:17:23+00:00

In Python 3, implicit relative imports will not be supported.
Use fully-qualified imports everywhere.

Reviewed-By: Tomas Babej

ipapython: Fix incorrect python shebangs

2015-01-26T12:03:24+00:00

Make sure shebangs explicitly reference python2.

Reviewed-By: Martin Basti

Fix zone name to directory name conversion in BINDMgr.

2014-10-29T14:02:08+00:00

https://fedorahosted.org/freeipa/ticket/4657

Reviewed-By: Martin Basti

DNSSEC: add ipa dnssec daemons

2014-10-21T10:23:03+00:00

Tickets:
https://fedorahosted.org/freeipa/ticket/3801
https://fedorahosted.org/freeipa/ticket/4417

Design:
https://fedorahosted.org/bind-dyndb-ldap/wiki/BIND9/Design/DNSSEC

Reviewed-By: Jan Cholasta 
Reviewed-By: David Kupka