Commit Graph

284 Commits

Author SHA1 Message Date
Aurélien Bompard
0c845843c4 Update ipsilon-fedora on the Ipsilon servers
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-04-30 10:37:31 +02:00
Patrick Uiterwijk
8979bb9a05 Import pre-prod bugzilla SAML data
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2021-04-01 07:35:24 +02:00
Kevin Fenzi
0a53920236 ipsilon: up number of processes to handle more load
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-31 13:52:20 -07:00
Aurélien Bompard
196d20086c Some Ipsilon fixes for the new openid api extension
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-03-26 12:11:07 +01:00
Aurélien Bompard
94b32cee08 Use our custom info plugin
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-03-25 18:56:08 +01:00
Aurélien Bompard
fc759fd447 Add the ipsilon script to generate the metadata
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-03-25 11:15:29 +01:00
Aurélien Bompard
2c04966b51 Adjust the location of the service keytab in ipsilon
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-03-24 17:58:12 +01:00
Aurélien Bompard
4c5e2d605b Fix the sssd config file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-03-24 17:31:55 +01:00
Aurélien Bompard
be8535cf05 Fix ipsilon config
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-03-24 17:03:58 +01:00
Aurélien Bompard
7b2c578983 Ipsilon in prod is now on a VM like in staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-03-24 13:49:33 +01:00
Aurélien Bompard
b8e6754f97 Use a VM for Ipsilon in prod too
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-03-23 16:55:38 +00:00
Aurélien Bompard
2269f0ece1 Prepare Noggin & FASJSON for prod
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-03-22 17:53:42 +00:00
Aurélien Bompard
9e7b8efc2e Get fasPronoun in sssd
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-02-05 16:47:01 +01:00
Aurélien Bompard
95ca01284a Use a template for ipsilon's sssd.conf instead of replacing lines
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-01-20 10:32:33 +01:00
Patrick Uiterwijk
a07e65afdc Fix saml2 file locations in Ipsilon
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-12-01 10:16:08 +01:00
Aurélien Bompard
fadcf80cfd Get the website in ipsilon
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-21 17:41:51 +02:00
Aurélien Bompard
a2f74a447e Ipsilon: fix attribute mapping for GPG & SSH
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-21 11:59:43 +02:00
Aurélien Bompard
dadb90e633 Missing part of bd1cc1d
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-16 09:36:03 +02:00
Aurélien Bompard
e0918f5c96 Ipsilon: set the attribute mapping for openid too
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-15 19:05:08 +02:00
Aurélien Bompard
157f1d2d52 Ipsilon: improve the HBAC rule
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-15 18:46:51 +02:00
Aurélien Bompard
35f2aeb15d Actually those tasks must be run on the IPA server
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-15 18:04:21 +02:00
Aurélien Bompard
2cc20bb1af Ipsilon: create a HBAC rule
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-15 17:51:21 +02:00
Aurélien Bompard
bd1cc1d5f7 Allow redirect on usernames that have an underscore
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-15 17:25:23 +02:00
Aurélien Bompard
b75b580a49 Ipsilon: re-enable the alias for the well-known dir
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-15 15:07:49 +02:00
Aurélien Bompard
78ad8c102a Ipsilon: fix access to the well-known dir
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-15 14:55:10 +02:00
Aurélien Bompard
1ca3aff8f1 Ipsilon: configure SSSd
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-08 12:29:37 +02:00
Aurélien Bompard
f4684a1f07 Ipsilon: fix config files
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-08 10:11:36 +02:00
Aurélien Bompard
3a1885bcc9 Ipsilon in staging: deploy config files
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-08 09:48:31 +02:00
Aurélien Bompard
1a1f7d79e4 Ipsilon: fix files location
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-07 14:53:45 +02:00
Aurélien Bompard
62823f5fee Ipsilon: the custom admin db path must exist, let's set it later
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-07 13:47:39 +02:00
Aurélien Bompard
e73a1bd501 Fix ipsilon config and install script in staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-07 12:19:00 +02:00
Aurélien Bompard
7e7399fb50 Syntax.
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-07 10:07:49 +02:00
Aurélien Bompard
ba82363e78 Add a role for ipa clients and use it in Ipsilon
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-07 10:05:19 +02:00
Aurélien Bompard
3ae9b4bd65 We need this plugin obviously
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-07 09:08:52 +02:00
Aurélien Bompard
47d4923de9 Undefined variable
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-06 17:06:44 +02:00
Aurélien Bompard
373d9385e1 Missing dep
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-06 16:50:13 +02:00
Aurélien Bompard
ae35433095 Missing dep
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-06 10:54:25 +02:00
Aurélien Bompard
d1edc6db3d Prepare ipsilon for a VM deployment in staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-10-05 17:24:56 +02:00
Kevin Fenzi
56489ef2c3 ipsilon: comment out for now all the old rhel7 python2 tasks
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-09-24 15:08:54 -07:00
Kevin Fenzi
7d9c26fe51 ipsilon: no libsemanage-python in f32
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-09-24 14:57:14 -07:00
Aurélien Bompard
9b4832feee Ipsilon: Fix the attribute mapping
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-09-17 17:03:55 +02:00
Aurélien Bompard
2baa486616 Fix case in configuration
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-09-17 11:44:32 +02:00
Aurélien Bompard
482c0f799c Don't get user info from LDAP, use FASJSON
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-09-16 15:44:15 +02:00
Aurélien Bompard
b2df514b95 Ipsilon: rename the service keytab file for coherence
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-09-16 15:28:21 +02:00
Aurélien Bompard
ea064cbdc6 Ipsilon: don't use ldaps
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-09-16 14:57:16 +02:00
Aurélien Bompard
3ba34383b3 Ipsilon: configure the LDAP auth plugin
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-09-16 14:41:33 +02:00
Aurélien Bompard
07f4977aac Ipsilon: remove FAS auth
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-09-16 13:20:45 +02:00
Aurélien Bompard
70f71744fb Ipsilon: prepare config changes for staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-09-11 15:22:15 +02:00
Aurélien Bompard
31b058a884 Ipsilon: set the keytab paths in krb5.conf
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-09-11 12:17:00 +02:00
Aurélien Bompard
5a01ac3566 Ipsilon: deploy the Fedora-specific files from a git repo
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-09-11 12:17:00 +02:00