freeipa.git/makeaci, branch master_keytab

Use the print function

2015-09-01T09:42:01+00:00

In Python 3, `print` is no longer a statement. Call it as a function
everywhere, and include the future import to remove the statement
in Python 2 code as well.

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta

plugable: Load plugins only from modules imported by API

2015-07-01T13:05:30+00:00

Previously all plugin modules imported from anywhere were added to the API.

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky

ipalib: Load ipaserver plugins when api.env.in_server is True

2015-07-01T13:05:30+00:00

https://fedorahosted.org/freeipa/ticket/3090
https://fedorahosted.org/freeipa/ticket/5073

Reviewed-By: Martin Babinsky

makeaci: Use LDAPClient instead of IPASimpleLDAPObject

2015-04-16T06:58:31+00:00

Reviewed-By: Petr Viktorin

makeaci: Use the DN where the ACI is stored, not the permission's DN

2014-07-07T12:42:52+00:00

Reviewed-By: Martin Basti

Make sure member* attrs are always granted together in read permissions

2014-06-11T11:21:30+00:00

Memberofindirect processing of an entry doesn't work if the user doesn't
have rights to any one of these attributes:
- member
- memberuser
- memberhost

Add all of these to any read permission that specifies any of them.

Add a check to makeaci that will enforce this for any future permissions.

Reviewed-By: Martin Kosek

Add ACI.txt

2014-06-11T11:21:29+00:00

The ACI.txt file is a list all managed permissions in ACI form.
Similarly to API.txt, it ensures that changes are not made lightly,
since modifications must be reflected in ACI.txt and committed to Git.

Add a script, makeaci, which parallels makeapi: it recreates or
validates ACI.txt.

Call makeaci --validate before the build, just after API.txt is validated.

Reviewed-By: Martin Kosek