freeipa.git/ipaserver/plugins, branch kdc-fixes

certprofile: add ability to update profile config in Dogtag

2015-07-07T22:25:46+00:00

Add the `--file=FILENAME' option to `certprofile-mod' which, when
given, will update the profile configuration in Dogtag to the
contents of the file.

Fixes: https://fedorahosted.org/freeipa/ticket/5093
Reviewed-By: Martin Basti

certprofile: add option to export profile config

2015-07-07T22:25:46+00:00

Add the `--out=FILENAME' option to `certprofile-show'.  When given,
it exports the profile configuration from Dogtag and writes it to
the named file.

Fixes: https://fedorahosted.org/freeipa/ticket/5091
Reviewed-By: Martin Basti

plugable: Pass API to plugins on initialization rather than using set_api

2015-07-01T13:05:30+00:00

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky

vault: Fix ipa-kra-install

2015-06-10T16:17:34+00:00

Use state in LDAP rather than local state to check if KRA is installed.
Use correct log file names.

https://fedorahosted.org/freeipa/ticket/3872

Reviewed-By: David Kupka

Import profiles earlier during install

2015-06-05T17:12:46+00:00

Currently, IPA certificate profile import happens at end of install.
Certificates issuance during the install process does work but uses
an un-customised caIPAserviceCert profile, resulting in incorrect
subject DNs and missing extensions.  Furthermore, the
caIPAserviceCert profile shipped with Dogtag will eventually be
removed.

Move the import of included certificate profiles to the end of the
cainstance deployment phase, prior to the issuance of DS and HTTP
certificates.

Part of: https://fedorahosted.org/freeipa/ticket/4002

Reviewed-By: Martin Basti

Add profile_id parameter to 'request_certificate'

2015-06-04T08:27:33+00:00

Add the profile_id parameter to the 'request_certificate' function
and update call sites.

Also remove multiple occurrences of the default profile ID
'caIPAserviceCert'.

Part of: https://fedorahosted.org/freeipa/ticket/57

Reviewed-By: Martin Basti

Import included profiles during install or upgrade

2015-06-04T08:27:33+00:00

Add a default service profile template as part of FreeIPA and format
and import it as part of installation or upgrade process.

Also remove the code that modifies the old (file-based)
`caIPAserviceCert' profile.

Fixes https://fedorahosted.org/freeipa/ticket/4002

Reviewed-By: Martin Basti

Add certprofile plugin

2015-06-04T08:27:33+00:00

Add the 'certprofile' plugin which defines the commands for managing
certificate profiles and associated permissions.

Also update Dogtag network code in 'ipapython.dogtag' to support
headers and arbitrary request bodies, to facilitate use of the
Dogtag profiles REST API.

Part of: https://fedorahosted.org/freeipa/ticket/57

Reviewed-By: Martin Basti

allow to call ldap2.destroy_connection multiple times

2015-05-07T16:13:57+00:00

A regression fix.

Reviewed-By: Nathaniel McCallum

speed up indirect member processing

2015-04-27T05:55:04+00:00

the old implementation tried to get all entries which are member of group.
That means also user. User can't have any members therefore this costly
processing was unnecessary.

New implementation reduces the search only to entries which have members.

Also page size was removed to avoid paging by small pages(default size: 100)
which is very slow for many members.

https://fedorahosted.org/freeipa/ticket/4947

Reviewed-By: Jan Cholasta