summaryrefslogtreecommitdiffstats
path: root/contrib
Commit message (Collapse)AuthorAgeFilesLines
* Use mod_auth_gssapi instead of mod_auth_kerbRob Crittenden2015-04-171-5/+5
| | | | | | | | | | | | | | | Change configuration on new installs only. Enable GssapiLocalName so we have access to the local name in REMOTE_USER and the full principle in GSS_NAME. Enable GssapiSSLonly even though SSLRequireSSL is also set. The belt and suspenders principla. https://fedorahosted.org/ipsilon/ticket/89 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Move ipsilon WSGI script from /usr/sbin to /usr/libexecRob Crittenden2015-04-151-2/+3
| | | | | | | | | This command is not intended to be executed by end-users. https://fedorahosted.org/ipsilon/ticket/76 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-by: Nathan Kinder <nkinder@redhat.com>
* Release v0.6.0Patrick Uiterwijk2015-04-151-1/+4
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Rob Crittenden <rcritten@redhat.com>
* Rework package setupPatrick Uiterwijk2015-04-101-34/+77
| | | | | | | | | This way you can install saml2 client without ipsilon-base. Also, -base is the server itself, ipsilon will give you the installer with it. Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Rob Crittenden <rcritten@redhat.com>
* Rename nss info plugin to match format of info+nameRob Crittenden2015-04-091-1/+1
| | | | | | | | | This also eliminates a namespace collision with python-nss https://fedorahosted.org/ipsilon/ticket/104 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Release v0.5.0Patrick Uiterwijk2015-03-301-1/+4
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Rob Crittenden <rcritten@redhat.com>
* Build dated RPMs by defaultPatrick Uiterwijk2015-03-161-1/+1
| | | | | | | | This stores the build date and git commit in the version. This way, it's a lot easier to determine when it was last built. Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Rob Crittenden <rcritten@redhat.com>
* Install and package the new REST componentsRob Crittenden2015-03-031-0/+1
| | | | | Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Bump version numbers for release v0.4.0Patrick Uiterwijk2015-02-271-2/+5
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Rob Crittenden <rcritten@redhat.com>
* Split tools between components that require themPatrick Uiterwijk2015-02-241-1/+5
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Signed-off-by: Simo Sorce <simo@redhat.com>
* __init__ needs to be in the main packagePatrick Uiterwijk2015-02-241-2/+1
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Bump spec filePatrick Uiterwijk2015-02-241-1/+5
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Do not require ipsilon-toolsPatrick Uiterwijk2015-02-241-1/+0
| | | | | | | If you want to install without the installer, it's not required Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Split the installer into -toolsPatrick Uiterwijk2015-02-241-4/+4
| | | | | | | The installer is not needed if you deploy with config management Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Split off authformPatrick Uiterwijk2015-02-241-2/+15
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Fix RPM field seperatorPatrick Uiterwijk2015-02-201-1/+1
| | | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Rob Crittenden <rcritten@redhat.com>
* Add info plugin that utilizes Apache mod_lookup_identity pluginRob Crittenden2015-02-131-1/+19
| | | | | | | | | | mod_look_identity looks up identity information from sssd over dbus, making additional identity attributes available. https://fedorahosted.org/ipsilon/ticket/31 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Update spec file after Fedora reviewPatrick Uiterwijk2015-01-281-34/+119
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Bump RPM spec version to 0.3.0Simo Sorce2014-12-121-1/+1
| | | | | Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Add support for Persona Identity ProviderPatrick Uiterwijk2014-11-141-0/+16
| | | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Improve spec fileSimo Sorce2014-11-121-11/+103
| | | | | | | | | Add missing dependencies. Split into smaller packages so that admins can choose what to install and what dependencies to drag in. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Add sqlalchemy dependency to contrib rpmSimo Sorce2014-10-091-0/+1
| | | | | Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Add Info Provider plugin frameworkSimo Sorce2014-09-241-0/+1
| | | | | Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Add External form auth pluginSimo Sorce2014-08-271-0/+1
| | | | | | | This plugin uses mod_intercept_form_submit to perform authentication. Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Add tests to source distribution tooSimo Sorce2014-06-171-0/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Clean up only after package removal, not during upgrades.Jan Pazdziora2014-06-061-2/+5
| | | | | Signed-off-by: Jan Pazdziora <jpazdziora@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Make sure semanage and restorecon are installed when we want to use them.Jan Pazdziora2014-06-061-0/+2
| | | | | | | | | Addressing Installing : ipsilon-0.2.4-3.fc20.x86_64 1/1 /var/tmp/rpm-tmp.pDkQSL: line 1: semanage: command not found Signed-off-by: Jan Pazdziora <jpazdziora@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* If there are some errors while semanaging, we want to see them.Jan Pazdziora2014-06-061-4/+4
| | | | | Signed-off-by: Jan Pazdziora <jpazdziora@redhat.com> Reviewed-by: Simo Sorce <simo@redhat.com>
* Bump up release to 0.2.5Simo Sorce2014-06-041-2/+2
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Fix sample spec file to use a versioned doc dirSimo Sorce2014-05-201-2/+4
| | | | | | This makes the same spec file work on latest Fedora and RHEL7 too. Signed-off-by: Simo Sorce <simo@redhat.com>
* Bump up release to 0.2.4Simo Sorce2014-05-201-1/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Distribute README file tooSimo Sorce2014-05-201-1/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Bump up release to 0.2.3Simo Sorce2014-05-101-1/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Version bump, go to 0.2.2Simo Sorce2014-05-051-1/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Add IPA helper for server installSimo Sorce2014-05-011-0/+1
| | | | | | | | | | | The IPa helper chcks a krb keytab is available for the local HTTPD service at the standard ipa location, and if not available, tries to register the sevice and retrieve one from the IPA server. At the end of the process forces the activation of the krb plugin as well as the fallback to pam for authentication. Signed-off-by: Simo Sorce <simo@redhat.com>
* Make SELinux happySimo Sorce2014-05-011-0/+9
| | | | | | | | | | Add proper context to shared state directories so that httpd can write there. Relax SElinux boolans to allow use of pam modules This allows running Ipsilon in fully enforcing mode when pam auth using the python-pam modules is used. Signed-off-by: Simo Sorce <simo@redhat.com>
* Bump up spec file vesion tooSimo Sorce2014-04-281-1/+1
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Do not hardcode sessions directory in spec fileSimo Sorce2014-04-211-2/+0
| | | | | | | This directory is now generated dynamicaly based on the instance name at ipsilon-server-install time. Signed-off-by: Simo Sorce <simo@redhat.com>
* Update contrib spec file for version 0.2Simo Sorce2014-04-181-8/+3
| | | | | | Drop changelog, it's unnecessary, commit logs are available in git Signed-off-by: Simo Sorce <simo@redhat.com>
* Install client tools in a separate rpm packageSimo Sorce2014-04-111-2/+38
| | | | Signed-off-by: Simo Sorce <simo@redhat.com>
* Rename scripts and mark them as suchSimo Sorce2014-04-111-6/+2
| | | | | | | | | | | | Mark actual top level scripts as such instead of disguising them as modules. Also remove __init__.py from ipsilon/install as this is not a module just the place where install scripts are kept, for now. Note: Scripts are installed in the bin directory but the contrib spec file moves them to sbin. Signed-off-by: Simo Sorce <simo@redhat.com>
* Add install script and other spec file changesSimo Sorce2014-03-201-2/+11
| | | | | | | | Add install script Change server name to drop .py suffix Add necessary requires Signed-off-by: Simo Sorce <simo@redhat.com>
* Add sample spec fileSimo Sorce2014-03-131-0/+60
Signed-off-by: Simo Sorce <simo@redhat.com>