freeipa.git/ipaserver, branch ccachesess

WebUI: Add cermapmatch module

2017-03-08T15:22:01+00:00

Add module which can show users which are mapped to the provided certificate.
Additionaly, the certificate is parsed and parsed information are
also displayed.

https://pagure.io/freeipa/issue/6601

Reviewed-By: Petr Vobornik

Allow login to WebUI using Kerberos aliases/enterprise principals

2017-03-08T14:56:11+00:00

The logic of the extraction/validation of principal from the request and
subsequent authentication was simplified and most of the guesswork will
be done by KDC during kinit. This also allows principals from trusted
domains to login via rpcserver.

https://fedorahosted.org/freeipa/ticket/6343

Reviewed-By: Alexander Bokovoy 
Reviewed-By: Simo Sorce 
Reviewed-By: David Kupka

dns: fix `dnsrecord_add` interactive mode

2017-03-08T14:52:41+00:00

`dnsrecord_add` interactive mode might prompt for value of non-existent
arguments `a_part_create_reverse` and `aaaa_part_create_reverse`. This
happens because `dnsrecord_add` extra flags are incorrectly defined as
parts of the respective DNS records.

Remove extra flags from DNS record parts to fix the interactive mode on old
clients talking to new servers. Skip non-existent arguments in the
interactive mode to fix new clients talking to old servers.

https://fedorahosted.org/freeipa/ticket/6457

Reviewed-By: Martin Basti

KRA: add --setup-kra to ipa-server-install

2017-03-08T14:50:30+00:00

This patch allows to install KRA on first IPA server in one step using
ipa-server-install

This option improves containers installation where ipa-server can be
installed with KRA using one call without need to call docker exec.

Please note the the original `kra.install()` calls in
ipaserver/install/server/install.py were empty operations as it did
nothing, so it is safe to move them out from CA block

https://pagure.io/freeipa/issue/6731

Reviewed-By: Jan Cholasta 
Reviewed-By: Tomas Krizek

IdM Server: list all Employees with matching Smart Card

2017-03-08T14:08:41+00:00

Implement a new IPA command allowing to retrieve the list of users matching
the provided certificate.
The command is using SSSD Dbus interface, thus including users from IPA
domain and from trusted domains. This requires sssd-dbus package to be
installed on IPA server.

https://fedorahosted.org/freeipa/ticket/6646

Reviewed-By: David Kupka 
Reviewed-By: Jan Cholasta

Add support for custom table pagination size

2017-03-08T13:54:56+00:00

New customization button opens dialog with field for setting the number of lines
in tables. After saving the new value there is new topic which starts refreshing
current table facet (if shown) and set all other facets expired. Therefore all
tables are immediately regenerated.

https://fedorahosted.org/freeipa/ticket/5742

Reviewed-By: Petr Vobornik

WebUI: Add certmap module

2017-03-08T09:14:21+00:00

Add facets for certmaprule and certmapconfigure entities.

https://fedorahosted.org/freeipa/ticket/6601

Reviewed-By: Florence Blanc-Renaud 
Reviewed-By: Petr Vobornik

WebUI: Change structure of Identity submenu

2017-03-07T19:04:01+00:00

Previously there were 'User Groups', 'Host Groups' and 'Netgroups'
separately, now these three items are grouped into one named 'Groups'
which has sidebar with three items mentioned above.

This change allows us to move ID views into Identity submenu.

https://pagure.io/freeipa/issue/6717

Reviewed-By: Simo Sorce 
Reviewed-By: Petr Vobornik

Add SHA256 fingerprints for certs

2017-03-07T18:52:43+00:00

https://fedorahosted.org/freeipa/ticket/6701

Reviewed-By: Pavel Vomacka 
Reviewed-By: Stanislav Laznicka

rabase.get_certificate: make serial number arg mandatory

2017-03-07T12:24:16+00:00

In rabase.get_certificate it does not make sense for the
serial_number argument to be optional.  Make it a mandatory
positional argument.

Part of: https://pagure.io/freeipa/issue/3473
Part of: https://pagure.io/freeipa/issue/5011

Reviewed-By: Tomas Krizek