ipsilon.git/ipsilon/login, branch preconf

Drop usage of self._debug and use self.debug instead

2015-05-05T18:32:24+00:00

This method was deprecated but still used in a lot of places.

https://fedorahosted.org/ipsilon/ticket/120

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Change references to authkrb plugin to authgssapi

2015-04-28T21:30:07+00:00

With the switch to mod_auth_gssapi we aren't limited to only
negotiated Kerberos so name the plugin to reflect this.

https://fedorahosted.org/ipsilon/ticket/114

Signed-off-by: Rob Crittenden

Rename authkrb plugin to authgssapi

2015-04-28T21:30:03+00:00

https://fedorahosted.org/ipsilon/ticket/114

Signed-off-by: Rob Crittenden

Add OpenID test suite

2015-04-28T18:53:06+00:00

This tests core OpenID and the Attribute Exchange,
Simple Registration and Teams extensions.

Using a small wsgi tool because mod_auth_openid does
not support all extensions.

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Make availble a list of alternative aut methods

2015-04-27T21:40:42+00:00

In the form case there is no way to automatically fallback to
other auth methods or even repeat transparent methods.
Add a simple list of alternative auth methods under the description
box so that the user can easily switch back and forth between them
if desired.

Fixes: https://fedorahosted.org/ipsilon/ticket/96

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Populate krb_principal_name from GSS_NAME env var

2015-04-27T15:51:24+00:00

mod_auth_gssapi provides by default the local name in
REMOTE_USER and the full principal in GSS_NAME. Grab a
copy of that principal for krb_principal_name.

https://fedorahosted.org/ipsilon/ticket/115

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Use mod_auth_gssapi instead of mod_auth_kerb

2015-04-17T20:05:11+00:00

Change configuration on new installs only.

Enable GssapiLocalName so we have access to the local name in
REMOTE_USER and the full principle in GSS_NAME.

Enable GssapiSSLonly even though SSLRequireSSL is also set.
The belt and suspenders principla.

https://fedorahosted.org/ipsilon/ticket/89

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Make the authtest login plugin provide more info

2015-04-10T14:41:22+00:00

Provide more variables to test for in allow attribute and mapping
testing.

Adds givenname (Test User), surname (the username) and
email (username@example.com).

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Rename and move PluginConfig to ConfigHelper

2015-04-10T14:38:15+00:00

The configuration class was originally intended to be tied. At this
point it is quite generic and useful outside of plugins. Rename
it to something more generic and move it into the config module.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

IdP-initiated logout for current user

2015-04-02T02:53:55+00:00

Perform Single Logout for the current user when a logout is initiated
in the IdP.

A fake initial session is created. In the current logout code the
initial logout requestor holds the final redirect URL. In this case
it redirects back to the root IdP page.

https://fedorahosted.org/ipsilon/ticket/87

Signed-off-by: Rob Crittenden 
Reviewed-by: Nathan Kinder