ipsilon.git/ipsilon, branch master

Fix sticter lint checks

2015-04-17T20:05:40+00:00

Signed-off-by: Simo Sorce

Use mod_auth_gssapi instead of mod_auth_kerb

2015-04-17T20:05:11+00:00

Change configuration on new installs only.

Enable GssapiLocalName so we have access to the local name in
REMOTE_USER and the full principle in GSS_NAME.

Enable GssapiSSLonly even though SSLRequireSSL is also set.
The belt and suspenders principla.

https://fedorahosted.org/ipsilon/ticket/89

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Move ipsilon WSGI script from /usr/sbin to /usr/libexec

2015-04-15T17:57:42+00:00

This command is not intended to be executed by end-users.

https://fedorahosted.org/ipsilon/ticket/76

Signed-off-by: Rob Crittenden 
Reviewed-by: Nathan Kinder

Close database sesssions

2015-04-15T14:35:04+00:00

This will close any opened database sessions at the end
of the request.

https://fedorahosted.org/ipsilon/ticket/110

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Rob Crittenden

Better error handling for login mgrs in server install/uninstall

2015-04-13T16:30:37+00:00

The purpose is to catch it when either no modules are enabled or if
you try to set the login module order and one of them is not
available/installed, then fail gracefully.

There were some baked-in assumptions that all login providers
are installed. Add some error handling around trying to determine
what is available, and rather than trying to force pam to be enabled
just exit with a handy message.

Don't rely on lm_order during uninstall. Use the list of enabled
Login managers instead.

Bail out of argument checking if uninstall is requested.

https://fedorahosted.org/ipsilon/ticket/105

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Add test for per-SP allowed and mapping attributes

2015-04-10T14:41:22+00:00

This buidls up a specific global mapping and allowed attributes then
creates an SP-specific configuration which differs enough to confirm
that it is in fact overriding the default. It finishes by removing the
per-SP configuration and ensuring that it falls back to the IdP-default.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Make the authtest login plugin provide more info

2015-04-10T14:41:22+00:00

Provide more variables to test for in allow attribute and mapping
testing.

Adds givenname (Test User), surname (the username) and
email (username@example.com).

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

The last allowed/mapping rule can be removed in SPs

2015-04-10T14:41:09+00:00

If you created rule(s) in an SP for either allowed attributes or
attribute mapping there was no way to remove the last rule meaning
it could never go back to use the global defaults.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Add per-SP attribute mapping and allowed attributes

2015-04-10T14:38:20+00:00

The per-SP values are considered overrides and the global values
are default.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Rename and move PluginConfig to ConfigHelper

2015-04-10T14:38:15+00:00

The configuration class was originally intended to be tied. At this
point it is quite generic and useful outside of plugins. Rename
it to something more generic and move it into the config module.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce