diff options
| author | Michael Simacek <msimacek@redhat.com> | 2015-07-20 16:04:07 +0200 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2015-08-26 09:41:36 +0200 |
| commit | aad73fad601f576dd83b758f4448839b4e8e87df (patch) | |
| tree | c99433fc5aade363e7f9f66a7c08fcfd8e3dfc69 /ipalib/plugins/vault.py | |
| parent | aebb72e1fb144939285380a6a9261c4d4177195e (diff) | |
| download | freeipa-aad73fad601f576dd83b758f4448839b4e8e87df.tar.gz freeipa-aad73fad601f576dd83b758f4448839b4e8e87df.tar.xz freeipa-aad73fad601f576dd83b758f4448839b4e8e87df.zip | |
Port from python-krbV to python-gssapi
python-krbV library is deprecated and doesn't work with python 3. Replacing all
it's usages with python-gssapi.
- Removed Backend.krb and KRB5_CCache classes
They were wrappers around krbV classes that cannot really work without them
- Added few utility functions for querying GSSAPI credentials
in krb_utils module. They provide replacements for KRB5_CCache.
- Merged two kinit_keytab functions
- Changed ldap plugin connection defaults to match ipaldap
- Unified getting default realm
Using api.env.realm instead of krbV call
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: Robbie Harwood <rharwood@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
Diffstat (limited to 'ipalib/plugins/vault.py')
| -rw-r--r-- | ipalib/plugins/vault.py | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/ipalib/plugins/vault.py b/ipalib/plugins/vault.py index 6a07a76b5..18436e399 100644 --- a/ipalib/plugins/vault.py +++ b/ipalib/plugins/vault.py @@ -34,7 +34,6 @@ from cryptography.hazmat.primitives.serialization import load_pem_public_key,\ load_pem_private_key import nss.nss as nss -import krbV from ipalib.frontend import Command, Object, Local from ipalib import api, errors @@ -640,7 +639,7 @@ class vault_add(PKQuery, Local): else: backend = self.api.Backend.rpcclient if not backend.isconnected(): - backend.connect(ccache=krbV.default_context().default_ccache()) + backend.connect() if vault_type == u'standard': @@ -1239,7 +1238,7 @@ class vault_archive(PKQuery, Local): else: backend = self.api.Backend.rpcclient if not backend.isconnected(): - backend.connect(ccache=krbV.default_context().default_ccache()) + backend.connect() # retrieve vault info vault = self.api.Command.vault_show(*args, **options)['result'] @@ -1508,7 +1507,7 @@ class vault_retrieve(PKQuery, Local): else: backend = self.api.Backend.rpcclient if not backend.isconnected(): - backend.connect(ccache=krbV.default_context().default_ccache()) + backend.connect() # retrieve vault info vault = self.api.Command.vault_show(*args, **options)['result'] |