userCertificate in integration tests.

[Per-Erik Persson]

Looking thru the testcode and older entries in the mailinglist there seems
to be no easy way to push a certificate for a testuser via the LDAP
connection with Python.

Using the openldap client is the only option I can think of.
Are there any better ideas out there?

[Sumit Bose]

On Wed, Jan 20, 2021 at 11:41:49PM +0100, Per-Erik Persson wrote:
> Looking thru the testcode and older entries in the mailinglist there seems
> to be no easy way to push a certificate for a testuser via the LDAP
> connection with Python.

Hi,

not sure if this is what you are looking for but there is python-ldap
and e.g. http://www.grotan.com/ldap/python-ldap-samples.html#modify has
an example how to modify and existing LDAP object.

HTH

bye,
Sumit
> Using the openldap client is the only option I can think of.
> Are there any better ideas out there?
> sssd-devel mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail].o...

[Per-Erik Persson]

The problem seems to be that python-ldap refuses to push binary data.
I can call the openldapclient and push the dercertificate via ldif.
But I would not call that a viable solution.

Den tors 21 jan. 2021 08:03Sumit Bose  skrev:
> On Wed, Jan 20, 2021 at 11:41:49PM +0100, Per-Erik Persson wrote:
> > Looking thru the testcode and older entries in the mailinglist there
>
> seems
> > to be no easy way to push a certificate for a testuser via the LDAP
> > connection with Python.
>
> Hi,
>
> not sure if this is what you are looking for but there is python-ldap
> and e.g. http://www.grotan.com/ldap/python-ldap-samples.html#modify has
> an example how to modify and existing LDAP object.
>
> HTH
>
> bye,
> Sumit
> > Using the openldap client is the only option I can think of.
> > Are there any better ideas out there?
> > sssd-devel mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct:
>
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
>
> https://lists.fedorahosted.org/archives/list/[e-mail].o...
> _______________________________________________
> sssd-devel mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail].o...

[Sumit Bose]

On Thu, Jan 21, 2021 at 07:56:11PM +0100, Per-Erik Persson wrote:
> The problem seems to be that python-ldap refuses to push binary data.
> I can call the openldapclient and push the dercertificate via ldif.
> But I would not call that a viable solution.

Hi,

are you using 'userCertificate;binary' as attribute name? In general I
would expect that you can use python-ldap since FreeIPA is using it as
well to add binary certificate data to LDAP.

bye,
Sumit
> Den tors 21 jan. 2021 08:03Sumit Bose  skrev:
> > On Wed, Jan 20, 2021 at 11:41:49PM +0100, Per-Erik Persson wrote:
> > > Looking thru the testcode and older entries in the mailinglist there
> >
> > seems
> > > to be no easy way to push a certificate for a testuser via the LDAP
> > > connection with Python.
> >
> > Hi,
> >
> > not sure if this is what you are looking for but there is python-ldap
> > and e.g. http://www.grotan.com/ldap/python-ldap-samples.html#modify has
> > an example how to modify and existing LDAP object.
> >
> > HTH
> >
> > bye,
> > Sumit
> > > Using the openldap client is the only option I can think of.
> > > Are there any better ideas out there?
> > > sssd-devel mailing list -- [e-mail]
> > > To unsubscribe send an email to [e-mail]
> > > Fedora Code of Conduct:
> >
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives:
> >
> > https://lists.fedorahosted.org/archives/list/[e-mail].o...
> > _______________________________________________
> > sssd-devel mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedorahosted.org/archives/list/[e-mail].o...
> sssd-devel mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail].o...