freeipa.git/ipaserver/plugins, branch custodia

vault: select a server with KRA for vault operations

2015-10-08T11:42:58+00:00

This uses the same mechanism which is used for the CA.

https://fedorahosted.org/freeipa/ticket/5302

Reviewed-By: Martin Basti

Use six.moves.urllib instead of urllib/urllib2/urlparse

2015-10-07T08:27:20+00:00

In Python 3, these modules are reorganized.

Reviewed-By: David Kupka 
Reviewed-By: Jan Cholasta 
Reviewed-By: Martin Basti

Standardize minvalue for ipasearchrecordlimit and ipasesarchsizelimit for unlimited minvalue

2015-09-22T06:00:16+00:00

https://fedorahosted.org/freeipa/ticket/4023

Reviewed-By: Jan Cholasta

Alias "unicode" to "str" under Python 3

2015-09-17T09:08:43+00:00

The six way of doing this is to replace all occurences of "unicode"
with "six.text_type". However, "unicode" is non-ambiguous and
(arguably) easier to read. Also, using it makes the patches smaller,
which should help with backporting.

Reviewed-By: Petr Viktorin

ldap: Make ldap2 connection management thread-safe again

2015-09-04T11:31:46+00:00

This fixes the connection code in LDAPClient to not store the LDAP connection
in an attribute of the object, which in combination with ldap2's per-thread
connections lead to race conditions resulting in connection failures. ldap2
code was updated accordingly.

https://fedorahosted.org/freeipa/ticket/5268

Reviewed-By: Tomas Babej

Port from python-krbV to python-gssapi

2015-08-26T07:41:36+00:00

python-krbV library is deprecated and doesn't work with python 3. Replacing all
it's usages with python-gssapi.

- Removed Backend.krb and KRB5_CCache classes
  They were wrappers around krbV classes that cannot really work without them
- Added few utility functions for querying GSSAPI credentials
  in krb_utils module. They provide replacements for KRB5_CCache.
- Merged two kinit_keytab functions
- Changed ldap plugin connection defaults to match ipaldap
- Unified getting default realm
  Using api.env.realm instead of krbV call

Reviewed-By: Jan Cholasta 
Reviewed-By: Robbie Harwood 
Reviewed-By: Simo Sorce

Replace dict.has_key with the 'in' operator

2015-08-12T16:17:23+00:00

The deprecated has_key method will be removed from dicts in Python 3.

For custom dict-like classes, has_key() is kept on Python 2,
but disabled for Python 3.

Reviewed-By: Tomas Babej

certprofile: add ability to update profile config in Dogtag

2015-07-07T22:25:46+00:00

Add the `--file=FILENAME' option to `certprofile-mod' which, when
given, will update the profile configuration in Dogtag to the
contents of the file.

Fixes: https://fedorahosted.org/freeipa/ticket/5093
Reviewed-By: Martin Basti

certprofile: add option to export profile config

2015-07-07T22:25:46+00:00

Add the `--out=FILENAME' option to `certprofile-show'.  When given,
it exports the profile configuration from Dogtag and writes it to
the named file.

Fixes: https://fedorahosted.org/freeipa/ticket/5091
Reviewed-By: Martin Basti

plugable: Pass API to plugins on initialization rather than using set_api

2015-07-01T13:05:30+00:00

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky