freeipa.git/ipaserver, branch pwdpolicy

cert: fix search limit handling in cert-find

2017-01-24T12:53:07+00:00

If search limits are not specified in cert-find, use the configured limits.
This applies to the certificate search in the CA as well.

Detect and report if size limit was exceeded in the certificate search in
the CA.

Do not apply limits to the internal ca-find call.

https://fedorahosted.org/freeipa/ticket/6564

Reviewed-By: Tomas Krizek

dogtag: search past the first 100 certificates

2017-01-24T12:53:07+00:00

Dogtag requires a size limit to be specified when searching for
certificates. When no limit is specified in the dogtag plugin, a limit of
100 entries is assumed. As a result, an unlimited certificate search
returns data only for a maximum of 100 certificates.

Raise the "unlimited" limit to the maximum value Dogtag accepts.

https://fedorahosted.org/freeipa/ticket/6564

Reviewed-By: Tomas Krizek

py3: decode bytes for json.loads()

2017-01-24T12:25:47+00:00

In py 3.5 json.loads requires to have string as input, all bytes must be
decoded.

Note: python 3.6 supports bytes for json.loads()

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta

dogtag.py: fix exception logging of JSON data

2017-01-24T12:25:47+00:00

'read_ca' and 'create_ca' have no logging when exception happened and it
masks real reason why it failed.

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta

py3: convert_attribute_members: don't use bytes as parameter for DN

2017-01-24T12:25:47+00:00

due perfomance improvement in e4930b3235e5d61d227a7e43d30a8feb7f35664d
we have to decode value before it can be used in DN() constructor.

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta

py3: __add_acl: use standard ipaldap methods

2017-01-24T12:25:47+00:00

Using raw pyldap interface we have to keep vaules as bytes. Is easier to
migrate to ipaldap and use strings without decoding and encoding.

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta

py3: add_entry_to_group: attribute name must be string not bytes

2017-01-24T12:25:47+00:00

With bytes as attribute name pyldap raises type error

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta

py3: cainstance: replace mkstemp with NamedTemporaryFile

2017-01-24T12:25:47+00:00

With Python3 files must be opened in textual mode to write text, and
best practise is to use fileobject instead fo os.write() and manual
encodig

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta

py3: write CA/KRA config into file opened in text mode

2017-01-24T12:25:47+00:00

config parser writes data as text so CA/KRA should be opened in textual
mode otherwise type errors are raised from installer

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta

py3: CA/KRA: config parser requires string

2017-01-24T12:25:47+00:00

basedn is DN object it has to be converted to string before it can be
used with config parser

https://fedorahosted.org/freeipa/ticket/4985

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta