freeipa.git/ipapython, branch master

ipa-ldap-updater: make possible to use LDAPI with autobind in case of hardened LDAP configuration

2014-07-04T06:13:23+00:00

When nsslapd-minssf is greater than 0, running as root
  ipa-ldap-updater [-l]
will fail even if we force use of autobind for root over LDAPI.

The reason for this is that schema updater doesn't get ldapi flag passed and
attempts to connect to LDAP port instead and for hardened configurations
using simple bind over LDAP is not enough.

Additionally, report properly previously unhandled LDAP exceptions.
https://fedorahosted.org/freeipa/ticket/3468

Reviewed-By: Petr Spacek

Clear NSS session cache when socket is closed

2014-07-02T14:31:50+00:00

Even when NSS connection is closed, there may be still cached
certificates in the NSS lib. This may cause subsequent NSS
initialization to crash. This problem especially reproduces in the
unit tests.

Reviewed-By: Petr Viktorin

ipaldap: Override conversion of nsds5replicalast{update,init}{start,end}

2014-07-02T14:12:05+00:00

The replication related attributes with generalized time syntax have
special behaviour implemented in 389, as follows:

In case they are explicitly requested for and not set, 0 is returned.

However, 0 is not a valid value for LDAP Generalized time. Thus
we need to add these attributes to the _SYNTAX_OVERRIDE dictionary,
overriding their conversion to datetime and converting them to
string instead, which perserves the old behaviour expected by the
replication codebase.

https://fedorahosted.org/freeipa/ticket/4350

Reviewed-By: Martin Kosek

Fix handle python-dns UnicodeError

2014-06-20T11:28:53+00:00

Reviewed-By: Jan Cholasta

Clarify LDAPClient docstrings about get_entry, get_entries and find_entries

2014-06-20T10:38:58+00:00

Reviewed-By: Martin Basti

ipaplatform: Change makefiles to accomodate for new platform package

2014-06-16T17:48:20+00:00

https://fedorahosted.org/freeipa/ticket/4052

Reviewed-By: Petr Viktorin

ipaplatform: Remove remnants of the ipapython/platform

2014-06-16T17:48:20+00:00

https://fedorahosted.org/freeipa/ticket/4052

Reviewed-By: Petr Viktorin

ipaplatform: Move all filesystem paths to ipaplatform.paths module

2014-06-16T17:48:20+00:00

https://fedorahosted.org/freeipa/ticket/4052

Reviewed-By: Petr Viktorin

ipaplatform: Remove redundant imports of ipaservices

2014-06-16T17:48:20+00:00

Also fixes few incorrect imports.

https://fedorahosted.org/freeipa/ticket/4052

Reviewed-By: Petr Viktorin

ipaplatform: Change platform dependant code in freeipa to use ipaplatform tasks

2014-06-16T17:48:19+00:00

https://fedorahosted.org/freeipa/ticket/4052

Reviewed-By: Petr Viktorin