Commit graph

37 commits

Author SHA1 Message Date
Tomas Kopecek
6d5dc301d3 don't use krbV under python3 2017-06-01 09:39:23 +02:00
Tomas Kopecek
68bf19c739 python-modernize -f libmodernize.fixes.fix_dict_six 2017-06-01 09:39:22 +02:00
Tomas Kopecek
1220008f8f python-modernize -f lib2to3.fixes.fix_except 2017-06-01 09:39:22 +02:00
Tomas Kopecek
73356b50e5 fix relative imports 2017-06-01 09:39:21 +02:00
Tomas Kopecek
0eaf3349c4 python-modernize -f libmodernize.fixes.fix_zip 2017-06-01 09:39:21 +02:00
Tomas Kopecek
7f946b37be python-modernize -f libmodernize.fixes.fix_xrange_six 2017-06-01 09:39:21 +02:00
Patrick Uiterwijk
7ec0e2c6b0 Make sslLogin use getUserId
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-05-04 10:02:58 -04:00
Patrick Uiterwijk
5a23afaeeb Make proxyuser consistent between ssl and krb
Currently, krb would expect a krb principal where ssl expects a username.
This makes krb use the username, but also accept the krb_principal for
backwards compatibility.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-05-04 10:02:58 -04:00
Tomas Kopecek
cc9fff9840 remove has_key (not working in python3) 2017-03-07 08:15:20 -05:00
Tomas Kopecek
1494301465 use new exception syntax 2017-03-02 10:52:30 -05:00
Tomas Kopecek
c143d0b88f print statement -> print function 2017-02-28 10:55:56 -05:00
Mike McLean
1088e5f4fb new hub CheckClientIP option 2017-02-14 11:27:55 -05:00
Patrick Uiterwijk
480cdfb540 Implement GSSAPI login
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-11-22 16:45:31 -05:00
Mohan Boddu
dd82e9cea2 Remove all bad-whitespaces
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2016-08-29 14:26:32 -04:00
Mike Bonnet
5569c058c1 print the correct authentication method in "koji moshimoshi" 2015-12-01 18:51:53 -05:00
Pavol Babincak
9e89ebb9a4 Ran reindent.py from cpython tools on all python scripts
Citing from reindent docs:

    Change Python (.py) files to use 4-space indents and no hard tab
    characters. Also trim excess spaces and tabs from ends of lines, and
    remove empty lines at the end of files.  Also ensure the last line
    ends with a newline.

Citing from PEP 8:

    Use 4 spaces per indentation level.

    Python 2 code indented with a mixture of tabs and spaces should be
    converted to using spaces exclusively.

    Don't write string literals that rely on significant trailing
    whitespace. Such trailing whitespace is visually indistinguishable
    and some editors (or more recently, reindent.py) will trim them.

Also PyLint recommends not to have trailing whitespace on any line.
2015-05-13 16:39:53 -04:00
Mike Bonnet
ab53d2deb0 update copyright 2014-10-28 23:54:21 -04:00
Mike McLean
3fa9f36bbb fix typos 2014-03-22 14:41:04 -04:00
Anthony Towns
7454bac53f If attempting kerberos login for user with no kerberos principal,
try updating record rather than creating a user that already exists.
2014-03-17 21:20:35 -04:00
Mike McLean
073c65000c use wsgi.url_scheme instead of HTTPS 2013-03-25 15:37:09 -04:00
Mike Bonnet
6236ae6d62 support SSL auth in mod_python compatibility mode 2012-05-11 21:29:06 -04:00
Mike McLean
54c0ed8438 Support wsgi in koji-hub and koji-web
- mod_python still supported, but deprecated
 - mod_wsgi is the default
 - koji-web now configured via web.conf
 - new wsgi-friendly publisher for koji-web
 - koji-web now has logging
2012-05-10 17:27:40 -04:00
Mike McLean
ab1559c5bb retry whitelist 2011-11-03 11:58:46 -04:00
Mike McLean
a51ad5031f graceful mass builder restart 2010-12-03 10:41:41 -05:00
Mike McLean
487ccdb2e3 clean up hub logging a bit 2010-03-12 15:34:02 -05:00
Mike McLean
59bde48e43 package list policy 2010-03-09 16:03:59 -05:00
Mike Bonnet
d7858380e7 remove unused locked parameter and extraneous select
Resolves: fh#157
2009-11-09 22:26:29 -05:00
Mike McLean
9333e61014 fix LoginCreatesUser check 2008-12-03 12:26:56 -05:00
Mike Bonnet
3d2a99f61e make callers of createUser() responsible for checkin permissions 2007-03-22 13:07:40 -04:00
Mike Bonnet
1ab7d2c898 allow the username component of the client's DN to be configurable 2007-03-20 10:56:52 -04:00
Mike Bonnet
27100cd914 provide some more defaults for httpd options 2007-03-20 10:34:56 -04:00
Mike Bonnet
acd7cde21c - centralize user creation in the Session class
- check user status on login as well as session creation
  - don't even create sessions for blocked users
2007-03-19 17:27:48 -04:00
Mike Bonnet
4f100047eb clean up httpd options handling in a couple places 2007-03-19 13:29:42 -04:00
Michael Bonnet
20ca1a8f84 - don't try to guess what kind of authentication we want to use in ClientSession.login() - allow clients to call login() (for user/password), krb_login() (for Kerberos), or ssl_login() (for client certificates)
- update all clients to call ssl_login() directly when appropriate
- rename references to NotAllowed -> ActionNotAllowed, because NotAllowed had already been renamed
- raise an error in CreateSSLContext instead of immediately exiting
2007-03-16 21:39:02 -04:00
Michael Bonnet
2cb2f3684d enable authentication via SSL client certificates in the web interface 2007-03-16 21:39:02 -04:00
Michael Bonnet
95db5c1f63 enable authentication from the cli via SSL client certificates 2007-03-16 21:39:01 -04:00
Jesse Keating
5d7e66a17e Initial code drop 2007-02-14 11:25:01 -05:00