Katello/katello — pull request #28 by jsomara (2012-04-24 03:21:07+00:00)
Title: Full support for LDAP including LDAP group => Katello Roles mapping. 

Individual commits below.

Loading group roles from ldap

Adding is_in_group for ldap support

cleaning up some groupadd methods/

Adding role -> ldap group relationship

Fixed type of the role_id column

Added API calls for adding and removing LDAP groups from roles

Added listing of role's ldap groups

Save LDAP roles on user login

Add ldap flag on to role

Validating user /ldap groups are the same on each request. we cant cache any authorization details. needs testing

refactor ldap lib

Management of LDAP groups in CLI

Keep hidden_user set when defined

Refactoring of ldap groups evaluation

Fixed issues with loosing the ldap flag in role on various accasion

Adding ADD LDAP groups to roles sliding tree

Adding REMOVE functionality to roles / ldap group sliding tree

Adding ldap_roles flag to breadcrumb render

Added params to installer to setup LDAP during install

--auth_method = database
--ldap_server = localhost
--ldap_encryption =
--ldap_basedn = ou=People,dc=company,dc=com
--ldap_groups_basedn = ou=Groups,dc=company,dc=com
--ldap_roles = false

Refactoring the login logic for ldap roles, moving ldap flag on role creation to roles_users

Updated help string in remove_ldap_group command

Fixed wrong method in the migration script

Fixed syntax problem in migration

Fixed verification of ldap roles

Moving verify_ldap_roles from allow_to? to the application controller. Allowed to does not do what I think it does!

Added LDAP roles verification in API controller

Fixed clearing of existing LDAP roles

Rfresh ldap roles with every API call

Support for multiple ldap roles with same group

Fixed behavior of is_in_group when no groups are set

- is_in_group returns true on empty group list
- raises error when group_base is not set

Added syncing of ldap roles before rendering the roles list

Syncing of ldap roles is triggered after ldap group manipulation

API call for syncing ldap roles for all users

Revert set_ldap_roles back to verify only (for performance reasons)

Adding specs for ldap logic in user