summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Properly support rename operationSimo Sorce2014-04-041-0/+9
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Admin functions to delete Service ProvidersSimo Sorce2014-04-043-0/+24
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add infrastructure to delete plugin data by idSimo Sorce2014-04-042-0/+20
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Admin functions to add new Service ProvidersSimo Sorce2014-04-043-0/+111
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Admin classes to change SP propertiesSimo Sorce2014-04-043-16/+172
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Providers can save properties back to the databaseSimo Sorce2014-04-041-4/+43
| | | | | | | This way a provider class can be used in admin pages as well and remain consistent. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add Service and Identity Provider abstractionSimo Sorce2014-04-043-19/+71
| | | | | | | | | | | | This commit adds: - helper functions to create new providers - separate IdentityProvider class to represent the IDP. Database changes: The saml2 plugin database now contain the metadata file contents and does not rely anymore on on-disk data. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add racefree way to add a new unique data pointSimo Sorce2014-04-042-0/+33
| | | | | | | | | | | | | | Our schema gathers together data related to a service by using an ID column. This column cannot be unique or a primary key as the ID is repeated for each key/value pair in the datum group. Use a unique identifier to make sure we can let dqlite generate a new ID internally and then find out wat it is as race-free as possible. We keep this method in the data module so it can be changed later without affecting application logic. Signed-off-by: Simo Sorce <simo@redhat.com>
* No need to have a separate certificate fileSimo Sorce2014-04-041-2/+1
| | | | | | Certificates are already contained in the metadata.xml file Signed-off-by: Simo Sorce <simo@redhat.com>
* Saml2 initial admin pageSimo Sorce2014-03-284-0/+76
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add generic support for IdP plugin admin pagesSimo Sorce2014-03-283-1/+8
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Basic Identity providers plugin configurationSimo Sorce2014-03-283-0/+100
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Refactor provider plugins enablementSimo Sorce2014-03-281-6/+37
| | | | | | | This allow to enable/disable Identity Providers directly from the configuration interface. Signed-off-by: Simo Sorce <simo@redhat.com>
* Refactor login plugin enablement codeSimo Sorce2014-03-283-16/+103
| | | | | | | This allows us to finally implement the plugin enable/disable configuration buttons and enable/disable plugins on the fly. Signed-off-by: Simo Sorce <simo@redhat.com>
* Automatically build configuration page menuSimo Sorce2014-03-283-27/+38
| | | | | | Do not hardcode it, rather build it out of the pages tree. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add common way to add a subtree to a pageSimo Sorce2014-03-281-0/+6
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Move login plugin configuration to its own moduleSimo Sorce2014-03-268-130/+168
| | | | | | | move also the template, in preparation for handling other configuration data in the main page. Signed-off-by: Simo Sorce <simo@redhat.com>
* Move admin_protect to a more generic moduleSimo Sorce2014-03-242-12/+12
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Implement plugin ordering configurationSimo Sorce2014-03-243-2/+105
| | | | | | Allows to change the login plugins order from the admin configuration page. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add a default admin user at install timeSimo Sorce2014-03-211-0/+10
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add way to save user preferencesSimo Sorce2014-03-211-0/+33
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add install script and other spec file changesSimo Sorce2014-03-201-2/+11
| | | | | | | | Add install script Change server name to drop .py suffix Add necessary requires Signed-off-by: Simo Sorce <simo@redhat.com>
* Add PAM configuration codeSimo Sorce2014-03-201-3/+24
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add Krb configuration codeSimo Sorce2014-03-202-3/+69
|
* Add way to add data to the global login configSimo Sorce2014-03-202-0/+40
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add saml2 configuration codeSimo Sorce2014-03-201-0/+81
| | | | | | | | | Creates the storage directory if not availble Generates new IDP certificate Generate metadata file Fixups permissions Signed-off-by: Simo Sorce <simo@redhat.com>
* Add functions to wipe and save plugin config dataSimo Sorce2014-03-202-0/+46
| | | | | | | This way all is needed is to instantiate a proper PluginObject from any provider and just call its functions Signed-off-by: Simo Sorce <simo@redhat.com>
* Saml2 Metadata generator classSimo Sorce2014-03-201-0/+159
| | | | | | | | | | This class generates metadata files for IDP and SP services and is meant to be used at install/configure time. It uses the certs module to generate certificates. With tests! Signed-off-by: Simo Sorce <simo@redhat.com>
* Simple certificate generator classSimo Sorce2014-03-201-0/+57
| | | | | | | | For now just generates self-signed certificates. In future this calss should connect to a CA, or other service like certmnger's getcert to retrieve a certificate from a CA. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add user configuration optionSimo Sorce2014-03-201-0/+8
| | | | | | | This allow to specifify what system user should be used to configure the ipsilon server to run as. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add hostname configuration optionSimo Sorce2014-03-201-0/+9
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Silence cherrypy logging to the screenSimo Sorce2014-03-201-0/+5
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Install default configuration filesSimo Sorce2014-03-203-1/+42
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add logging and install/uninstall targetsSimo Sorce2014-03-201-3/+90
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add server-install plugin configuration supportSimo Sorce2014-03-206-2/+106
| | | | | | | Automatically find plugins installed in the system and exposes their installation and configuration functions through the installer. Signed-off-by: Simo Sorce <simo@redhat.com>
* First install script commitSimo Sorce2014-03-203-1/+36
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix minor syntax issues in saml2 providerSimo Sorce2014-03-192-2/+2
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Remove unused import and fix syntaxSimo Sorce2014-03-191-2/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add sample spec fileSimo Sorce2014-03-131-0/+60
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix default and example pathsSimo Sorce2014-03-134-12/+10
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix install of data files.Simo Sorce2014-03-131-4/+16
| | | | | | | Move doc and examples under appropriate directory. Crate data directry for templates and ui static files. Signed-off-by: Simo Sorce <simo@redhat.com>
* Better handling of configuration fileSimo Sorce2014-03-131-1/+11
| | | | | | | allow to pass it on the command line or to look for it in well known locations. Signed-off-by: Simo Sorce <simo@redhat.com>
* Improve exceptions for saml2 providersSimo Sorce2014-03-023-20/+26
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add ability to strip domain/realm per providerSimo Sorce2014-03-022-2/+9
| | | | | | | | | This allows to return (hopefully) the same name whether the user authenticated via ESSO or form based authentication. Crude for now, may be augmented with some regex configuration in the future. Signed-off-by: Simo Sorce <simo@redhat.com>
* Unsplit checking functionsSimo Sorce2014-03-021-12/+6
| | | | | | Easier to deal with stuff if they are a single validation function. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add a way to return the email address of the userSimo Sorce2014-03-023-0/+20
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add way to return Kerberos nameid if availableSimo Sorce2014-03-022-3/+8
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add way to save user data after loginSimo Sorce2014-03-021-1/+7
| | | | | | | The login manager that successfully authenticated the user can now pass data to be stored in the user facility of the session. Signed-off-by: Simo Sorce <simo@redhat.com>
* Create a user facility in the sessionSimo Sorce2014-03-021-9/+13
| | | | | | | This way all identification data about the user can be managed in a single place and be erased/replaced at login time. Signed-off-by: Simo Sorce <simo@redhat.com>
* Check the NameID policy during authenticationSimo Sorce2014-03-022-7/+33
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
generated by cgit (git 2.34.1) at 2025-09-26 06:38:49 +0000