[Freeipa-devel] [WIP] Kerberos principal aliases pt. 2

[Martin Babinsky]

On 06/30/2016 11:17 PM, David Kupka wrote:
> On 28/06/16 20:08, Martin Babinsky wrote:
>> On 06/24/2016 09:52 AM, Martin Babinsky wrote:
>>> Hi list,
>>>
>>> I am furiously working on tickets related to the proper support and API
>>> for managing kerberos principal aliases for hosts, users, and
>>> services[1-5].
>>>
>>> To better track and comment on my progress, I have forked freeipa on git
>>> and created a branch for you to test and review. The link is here:
>>>
>>> https://github.com/martbab/freeipa/tree/krb5-principal-aliases
>>>
>>> Please be aware that I may force-push into the branch without warning
>>> when fixing issues we will discover during testing/review.
>>>
>>> [1] http://www.freeipa.org/page/V4/Kerberos_principal_aliases
>>> [2] https://fedorahosted.org/freeipa/ticket/3864
>>> [3] https://fedorahosted.org/freeipa/ticket/3961
>>> [4] https://fedorahosted.org/freeipa/ticket/1365
>>> [5] https://fedorahosted.org/freeipa/ticket/5413
>>>
>>
>> Based on Jan's suggestions I have reworked the code substantially and
>> force-pushed it into the github branch. Please review.
>>
>
> Hello!
>
> I have gone through the code and tested the functionality in basic use
> cases (server-install, upgrade, replica-install, adding/removing
> principals, getting ticket with alias, ...). Code looks good to me and
> everything* seems to work smoothly.
>
> condACK, if Pavel or Petr^1 (or anyone else who tried this) don't report
> any issue really soon.
>
> *except for https://fedorahosted.org/freeipa/ticket/6017
>
Thanks, David.

here are the reviewed patches rebased on the most current master. If no 
one objects I suggest to push them.

-- 
Martin^3 Babinsky
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0168-ipapython-module-for-Kerberos-principal-manipulation.patch
Type: text/x-patch
Size: 7482 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160701/5740a636/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0169-Test-suite-for-ipapython-kerberos.py.patch
Type: text/x-patch
Size: 4601 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160701/5740a636/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0170-ipalib-introduce-Principal-parameter.patch
Type: text/x-patch
Size: 6539 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160701/5740a636/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0171-Migrate-management-framework-plugins-to-use-Principa.patch
Type: text/x-patch
Size: 56873 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160701/5740a636/attachment-0003.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0172-Add-ACI-for-admins-to-modify-principal-attributes.patch
Type: text/x-patch
Size: 1645 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160701/5740a636/attachment-0004.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0173-replace-an-ACI-relying-on-presence-of-deprecated-obj.patch
Type: text/x-patch
Size: 1636 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160701/5740a636/attachment-0005.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0174-Allow-for-commands-that-use-positional-parameters-to.patch
Type: text/x-patch
Size: 16701 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160701/5740a636/attachment-0006.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0175-Make-framework-consider-krbcanonicalname-as-service-.patch
Type: text/x-patch
Size: 15140 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160701/5740a636/attachment-0007.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0176-Provide-API-for-management-of-host-service-and-user-.patch
Type: text/x-patch
Size: 35209 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160701/5740a636/attachment-0008.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-mbabinsk-0177-Unify-display-of-principal-names-aliases-across-enti.patch
Type: text/x-patch
Size: 23062 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20160701/5740a636/attachment-0009.bin>