4 years agohopefully nicer and more helpful messages when verify_parent fails
Thierry Parmentelat [Tue, 14 Apr 2015 15:02:28 +0000]
hopefully nicer and more helpful messages when verify_parent fails
exception should be shorter and easier to read, while full details still go in the logs

4 years agoissue a warning when get_slivers is used against an existing but empty slice
Thierry Parmentelat [Tue, 14 Apr 2015 15:01:45 +0000]
issue a warning when get_slivers is used against an existing but empty slice
e.g. with this code one gets an exception when trying to renew an existing slice that has no node
the warning would help spotting this

4 years agodisambiguate get_subject and pretty_subject
Thierry Parmentelat [Tue, 14 Apr 2015 11:00:07 +0000]
disambiguate get_subject and pretty_subject

4 years agolower noise due to alchemy session -> debug instead of info - ctd
Thierry Parmentelat [Tue, 14 Apr 2015 10:59:33 +0000]
lower noise due to alchemy session -> debug instead of info - ctd

4 years agomore compact, and hopefully nicer versions of pretty_cred and pretty_cert
Thierry Parmentelat [Tue, 14 Apr 2015 10:47:06 +0000]
more compact, and hopefully nicer versions of pretty_cred and pretty_cert

4 years agolower noise due to alchemy session -> debug instead of info
Thierry Parmentelat [Tue, 14 Apr 2015 10:32:13 +0000]
lower noise due to alchemy session -> debug instead of info

4 years agorename the 'cert' attribute of Certificate into 'x509'
Thierry Parmentelat [Tue, 14 Apr 2015 10:01:57 +0000]
rename the 'cert' attribute of Certificate into 'x509'

4 years agodo not use broken lxc-enter-namespace
Thierry Parmentelat [Tue, 14 Apr 2015 09:43:07 +0000]
do not use broken lxc-enter-namespace

4 years agorenamed get_printable_subject into pretty_cert
Thierry Parmentelat [Tue, 14 Apr 2015 09:33:04 +0000]
renamed get_printable_subject into pretty_cert

4 years agotweaked verify_parent for more legible
Thierry Parmentelat [Tue, 14 Apr 2015 09:29:20 +0000]
tweaked verify_parent for more legible
add error in log with details on the comparison when raising "Delegated credential {} not signed by parent {}'s caller"

4 years agorename get_summary_tostring into pretty_cred
Thierry Parmentelat [Tue, 14 Apr 2015 09:27:51 +0000]
rename get_summary_tostring into pretty_cred

4 years agoclean up packaging wrt cortexlab that has now gone
Thierry Parmentelat [Tue, 14 Apr 2015 07:09:02 +0000]
clean up packaging wrt cortexlab that has now gone

4 years agoMerge branch 'iotlab_driver' into geni-v3
fsaintma [Mon, 13 Apr 2015 14:05:57 +0000]
Merge branch 'iotlab_driver' into geni-v3

4 years agoMerge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3
fsaintma [Mon, 13 Apr 2015 14:05:01 +0000]
Merge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3

4 years agoadd unused driver method
fsaintma [Mon, 13 Apr 2015 13:52:43 +0000]
add unused driver method

4 years agodelete cortexlab driver (obsolete) + write again Iot-LAB SFA driver with Iot-LAB...
fsaintma [Mon, 13 Apr 2015 11:09:33 +0000]
delete cortexlab driver (obsolete) + write again Iot-LAB SFA driver with Iot-LAB REST API shell

4 years agocosmetic changes about pushing to pypi
Thierry Parmentelat [Thu, 9 Apr 2015 11:37:31 +0000]
cosmetic changes about pushing to pypi

4 years agoSetting tag sfa-3.1-14 sfa-3.1-14
Thierry Parmentelat [Thu, 9 Apr 2015 09:27:42 +0000]
Setting tag sfa-3.1-14
for SSL & python-2.7.9: ignore server verification
assume 2.7: remove compat code - always use HTTPSConnection (not HTTPS anymore)
fix: Reset GIDs works even if user has no pub_key
tweak for ubuntu (that does not have systemctl)
iotlab driver:  fix ldap account creation at each lease
miscell cosmetic & layout

4 years agoMerge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3
fsaintma [Tue, 17 Mar 2015 13:59:32 +0000]
Merge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3

4 years agofix iot-lab driver bug ldap connection invalid
fsaintma [Tue, 17 Mar 2015 13:59:22 +0000]
fix iot-lab driver bug ldap connection invalid

4 years agoremove spurrious print
Thierry Parmentelat [Tue, 17 Mar 2015 13:43:19 +0000]
remove spurrious print

4 years agoclean up code for python < 2.7
Thierry Parmentelat [Tue, 17 Mar 2015 13:42:21 +0000]
clean up code for python < 2.7

4 years agoMerge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3
Thierry Parmentelat [Tue, 17 Mar 2015 13:38:48 +0000]
Merge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3

4 years agoturn off server verification for python-2.7.9
Thierry Parmentelat [Tue, 17 Mar 2015 13:38:18 +0000]
turn off server verification for python-2.7.9

4 years agoMerge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3
Loic Baron [Wed, 4 Mar 2015 12:51:58 +0000]
Merge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3

4 years agoFix: Reset GIDs works even if user has no pub_key
Loic Baron [Wed, 4 Mar 2015 12:47:47 +0000]
Fix: Reset GIDs works even if user has no pub_key

4 years agofix typo that caused a syntax error
Thierry Parmentelat [Mon, 2 Mar 2015 20:05:05 +0000]
fix typo that caused a syntax error

4 years agoclean up unneeded imports
Thierry Parmentelat [Mon, 2 Mar 2015 16:34:27 +0000]
clean up unneeded imports

4 years agocosmetic
Thierry Parmentelat [Mon, 2 Mar 2015 16:34:09 +0000]
cosmetic

4 years agosfi to log the url is uses to bootstrap client stuff
Thierry Parmentelat [Mon, 2 Mar 2015 16:33:35 +0000]
sfi to log the url is uses to bootstrap client stuff

4 years agoforce not using systemctl if not present - suggested by Ciro for ubuntu
Thierry Parmentelat [Mon, 2 Mar 2015 16:32:50 +0000]
force not using systemctl if not present - suggested by Ciro for ubuntu

4 years agofor fedora21
Thierry Parmentelat [Tue, 20 Jan 2015 08:57:36 +0000]
for fedora21
tweak the way the result of xmlsec1 verify is deemed fine or not
formerly we scanned stdout and looked for OK on the first line
now we rely on the exit code of xmlsec1, and read its output only for informating about the error

4 years agonarrower text again
Thierry Parmentelat [Tue, 20 Jan 2015 08:54:54 +0000]
narrower text again

4 years agoadd debug trace when invoking xmlsec1
Thierry Parmentelat [Tue, 20 Jan 2015 08:03:11 +0000]
add debug trace when invoking xmlsec1
+ miscell reformatting for narrower text

4 years agofix ldap bug account creation at each lease
fsaintma [Thu, 8 Jan 2015 16:13:29 +0000]
fix ldap bug account creation at each lease

4 years agoSetting tag sfa-3.1-13 sfa-3.1-13
Thierry Parmentelat [Mon, 1 Dec 2014 15:15:08 +0000]
Setting tag sfa-3.1-13
bugfix - was adding extraneous backslashes in email address when attempting to AddPerson

5 years agofix for Brecht; when forging the email we were adding a hrn that had backslashes...
Thierry Parmentelat [Tue, 18 Nov 2014 22:31:11 +0000]
fix for Brecht; when forging the email we were adding a hrn that had backslashes; get rid of those

5 years agocheck for python-2.7 so that pip installs get a proper message when not under 2.7
Thierry Parmentelat [Thu, 25 Sep 2014 17:21:57 +0000]
check for python-2.7 so that pip installs get a proper message when not under 2.7

5 years agoSetting tag sfa-3.1-12 sfa-3.1-12
Thierry Parmentelat [Mon, 15 Sep 2014 18:56:02 +0000]
Setting tag sfa-3.1-12
getting closer with the pip/pypi packaging

5 years agoprotect for cases where index.html and/or LICENSE.txt are not found (like on the...
Thierry Parmentelat [Mon, 15 Sep 2014 18:54:07 +0000]
protect for cases where index.html and/or LICENSE.txt are not found (like on the pip-install side apparently)

5 years agoremove setup.cfg and put everythin in setup.py
Thierry Parmentelat [Mon, 15 Sep 2014 15:10:30 +0000]
remove setup.cfg and put everythin in setup.py
also the field names need to be description and long_description - and not summary and description that I had read before; this I believe is for a more recent version of setup.py (or older, go figure)

5 years agoSetting tag sfa-3.1-11 sfa-3.1-11
Thierry Parmentelat [Mon, 15 Sep 2014 14:16:33 +0000]
Setting tag sfa-3.1-11
various tweaks for the openlab demo
first stab at uploading onto a pypi (for pip install sfa)

5 years agoa first step towards publishing on pypi (so that one can install this using pip insta...
Thierry Parmentelat [Mon, 15 Sep 2014 14:14:12 +0000]
a first step towards publishing on pypi (so that one can install this using pip install sfa)

5 years agoprovide a more decent default to SCMURL for version.py when not run from within a...
Thierry Parmentelat [Mon, 15 Sep 2014 07:46:01 +0000]
provide a more decent default to SCMURL for version.py when not run from within a build box
hopefully useful for when pushing onto pypi - if we can get that to work

5 years agouse markdown for the README - updated that one with more deatils and links
Thierry Parmentelat [Mon, 15 Sep 2014 07:45:11 +0000]
use markdown for the README - updated that one with more deatils and links

5 years agoMerge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3
Thierry Parmentelat [Wed, 10 Sep 2014 15:40:15 +0000]
Merge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3

# Please enter a commit message to explain why this merge is necessary,
# especially if it merges an updated upstream into a topic branch.
#
# Lines starting with '#' will be ignored, and an empty message aborts
# the commit.

5 years agoupdated licence
Thierry Parmentelat [Wed, 10 Sep 2014 14:53:18 +0000]
updated licence

5 years agoRSpecs optional parameter expires to manage reservation of resources in WiLab.t
Loic Baron [Thu, 4 Sep 2014 17:08:14 +0000]
RSpecs optional parameter expires to manage reservation of resources in WiLab.t

5 years agoSFA RSpec ttl param set expires tag to 60 min as default
Loic Baron [Thu, 4 Sep 2014 12:14:16 +0000]
SFA RSpec ttl param set expires tag to 60 min as default

5 years agoMyPLC fix: slice expires set with UpdateSlice, not possbile with AddSlice
Loic Baron [Thu, 4 Sep 2014 12:13:27 +0000]
MyPLC fix: slice expires set with UpdateSlice, not possbile with AddSlice

5 years agoReset GIDs in SFA DB - allows to use email in SubjectAltName of the GIDs
Loic Baron [Tue, 2 Sep 2014 16:06:27 +0000]
Reset GIDs in SFA DB - allows to use email in SubjectAltName of the GIDs

5 years agoGID using email in SubjectAltName
Loic Baron [Tue, 2 Sep 2014 13:29:01 +0000]
GID using email in SubjectAltName

5 years agoAddPerson ignores 'enabled':True, need to issue an UpdatePerson specifically
Thierry Parmentelat [Fri, 22 Aug 2014 16:14:06 +0000]
AddPerson ignores 'enabled':True, need to issue an UpdatePerson specifically

5 years agoSetting tag sfa-3.1-10 sfa-3.1-10
Thierry Parmentelat [Wed, 20 Aug 2014 14:19:29 +0000]
Setting tag sfa-3.1-10
rewrote an optimized version of verify_persons in the PL driver:
Allocate and Provision should now perform much faster
in the bargain, changed the way dummy persons are created by SFA:
the sfa email is used when free, otherwise a fake email is made up from hrn
e.g. hrn=onelab.inria.thierry_parmentelat -> email=thierry_parmentelat@onelab.inria.stub
verify_chain debug flow does not up any more by default
various fixes in the iotlab driver

5 years agoMerge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3
Jordan Augé [Wed, 20 Aug 2014 13:25:07 +0000]
Merge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3

5 years agoiotlab driver fixed for OneLab in Production
Jordan Augé [Wed, 20 Aug 2014 13:24:30 +0000]
iotlab driver fixed for OneLab in Production

5 years agoallow allocate to receive an empty rspec, which is the only way a user can release...
Thierry Parmentelat [Wed, 20 Aug 2014 11:00:58 +0000]
allow allocate to receive an empty rspec, which is the only way a user can release her resources

5 years agodebug statements about verify_chain are very verbose, so they are now disabled by...
Thierry Parmentelat [Wed, 20 Aug 2014 10:25:11 +0000]
debug statements about verify_chain are very verbose, so they are now disabled by default

5 years agoHopefully this version of plslices.py should be usable
Thierry Parmentelat [Wed, 20 Aug 2014 10:24:21 +0000]
Hopefully this version of plslices.py should be usable
Slightly changed the strategy for creating dummy person instances
It is first attempted with the email provided by the caller, but that might fail because of email duplication
In this case we use an email that is derived from the hrn, like e.g.
hrn=onelab.inria.thierry_parmentelat -> email=thierry_parmentelat@onelab.inria.stub

5 years agofurther refinements to plslices
Thierry Parmentelat [Tue, 19 Aug 2014 22:33:00 +0000]
further refinements to plslices
avoid retrieving all sites
set all attributes at creation time instead of creating and then updating multiple times

5 years agoavoiding an API call if possible
Thierry Parmentelat [Tue, 19 Aug 2014 18:07:27 +0000]
avoiding an API call if possible

5 years agovarious bug fixes on the new release of verify_persons
Thierry Parmentelat [Tue, 19 Aug 2014 18:07:09 +0000]
various bug fixes on the new release of verify_persons

5 years agorewrote verify_persons
Thierry Parmentelat [Tue, 19 Aug 2014 13:21:52 +0000]
rewrote verify_persons
this takes advantage of (and requires) plcapi-5.3.5, so we don't need to query the whole set of Persons and Slices and all
result is much more efficient than the previous release
also it is expected to fix the issue with onelab users coming with the same email as their ple counterpart

5 years agocleanup
Thierry Parmentelat [Mon, 18 Aug 2014 15:57:50 +0000]
cleanup

5 years agoofelia rspecs: default parameter for filter is None
Loic Baron [Thu, 31 Jul 2014 09:41:39 +0000]
ofelia rspecs: default parameter for filter is None

5 years agoiotlab driver: wip fixing Timur's bug when a user already has an account in LDAP...
Loic Baron [Wed, 30 Jul 2014 16:16:05 +0000]
iotlab driver: wip fixing Timur's bug when a user already has an account in LDAP, the system doesn't know how to choose between 2 accounts, we maybe should add a user_hrn or user_urn in iotlab LDAP

5 years agoMerge branch 'iotlab_fixes' into geni-v3
Loic Baron [Wed, 30 Jul 2014 14:40:15 +0000]
Merge branch 'iotlab_fixes' into geni-v3

Conflicts:
sfa/iotlab/OARrestapi.py
sfa/iotlab/iotlabaggregate.py
sfa/iotlab/iotlabdriver.py
sfa/iotlab/iotlabshell.py
sfa/iotlab/iotlabslices.py

5 years agoiotlab driver: OAR rest API sends back error messages, Applying Jordan's changes
Loic Baron [Wed, 30 Jul 2014 14:03:10 +0000]
iotlab driver: OAR rest API sends back error messages, Applying Jordan's changes

5 years agoiotlab driver: Applying Jordan's changes in iotlabslices.py
Loic Baron [Wed, 30 Jul 2014 14:01:24 +0000]
iotlab driver: Applying Jordan's changes in iotlabslices.py

5 years agoiotlab driver: Removed the 4 minutes, which were added by default to the leases in...
Loic Baron [Wed, 30 Jul 2014 13:52:33 +0000]
iotlab driver: Removed the 4 minutes, which were added by default to the leases in order to have aligned timeslots in MySlice

5 years agoiotlab driver: applying Jordan's fixes to the driver
Loic Baron [Wed, 30 Jul 2014 13:47:32 +0000]
iotlab driver: applying Jordan's fixes to the driver

5 years agoiotlab driver: Merge allowing to validate delegated credentials, Fix of Allocate...
Loic Baron [Wed, 30 Jul 2014 12:05:03 +0000]
iotlab driver: Merge allowing to validate delegated credentials, Fix of Allocate and Provision

5 years agoMerge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3
Loic Baron [Wed, 30 Jul 2014 08:15:32 +0000]
Merge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3

Conflicts:
sfa/iotlab/iotlabaggregate.py
sfa/iotlab/iotlabslices.py

5 years agoTrying to fix iotlab driver, need to be tested
Loic Baron [Wed, 30 Jul 2014 05:17:49 +0000]
Trying to fix iotlab driver, need to be tested

5 years agoMerge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3
Loic Baron [Wed, 23 Jul 2014 13:01:29 +0000]
Merge branch 'geni-v3' of ssh://git.onelab.eu/git/sfa into geni-v3

Conflicts:
sfa/rspecs/rspec.py

5 years agoRSpec: added a ttl parameter, this duration will set the expires tag in request rspec...
Loic Baron [Wed, 23 Jul 2014 12:53:58 +0000]
RSpec: added a ttl parameter, this duration will set the expires tag in request rspec, default=60 minutes

5 years agoSetting tag sfa-3.1-9 sfa-3.1-9
Thierry Parmentelat [Mon, 21 Jul 2014 20:46:40 +0000]
Setting tag sfa-3.1-9
Register can change the user keys using 'reg-keys' as well as 'keys'
also accept a single string rather than a list of keys
remove 'geni_api' from the registry GetVersion (which is not based on geni anymore)
bump the 'sfa' tag in the same registry GetVersion to 3
remove all mutable used as default arguments

5 years agoaccept a 'reg-keys' argument as a simple string insted of a list of strings in Register
Thierry Parmentelat [Fri, 18 Jul 2014 14:52:38 +0000]
accept a 'reg-keys' argument as a simple string insted of a list of strings in Register

5 years agoprevious change was not correct
Thierry Parmentelat [Fri, 18 Jul 2014 14:31:01 +0000]
previous change was not correct

5 years agodealing with reg-keys vs just keys
Thierry Parmentelat [Fri, 18 Jul 2014 13:51:31 +0000]
dealing with reg-keys vs just keys
because of the high number of occurrences of 'keys' in the code, I do a quick and dirty thing but it could probably use more care

5 years agoremove 'geni_api' from the registry GetVersion (which is not based on geni anymore)
Thierry Parmentelat [Fri, 18 Jul 2014 10:48:49 +0000]
remove 'geni_api' from the registry GetVersion (which is not based on geni anymore)
and bump the 'sfa' tag in the same registry GetVersion to 3

5 years agohuge cleanup for removing mutables used as default
Thierry Parmentelat [Thu, 17 Jul 2014 11:14:15 +0000]
huge cleanup for removing mutables used as default
http://stackoverflow.com/questions/1132941/least-astonishment-in-python-the-mutable-default-argument

5 years agoSetting tag sfa-3.1-8 sfa-3.1-8
Thierry Parmentelat [Thu, 5 Jun 2014 07:03:32 +0000]
Setting tag sfa-3.1-8
bugfix, sfi remove was broken

5 years agobugfix - sfi remove was broken
Thierry Parmentelat [Thu, 5 Jun 2014 07:01:03 +0000]
bugfix - sfi remove was broken

5 years agoSetting tag sfa-3.1-7 sfa-3.1-7
Thierry Parmentelat [Wed, 4 Jun 2014 09:53:38 +0000]
Setting tag sfa-3.1-7
sfi return code should be more meaningful - not yet for all commands though
DEFAULT_CREDENTIAL_LIFETIME now 28 days (was 31)
dropped support for legacy credentials
bugfix: short-lived credentials triggered a bug with UTC translated into localtime
further minor cleanup of timestamp formats

5 years agocleanup
Thierry Parmentelat [Wed, 4 Jun 2014 08:22:41 +0000]
cleanup

5 years agorestore default credential validity period to 28 days
Thierry Parmentelat [Wed, 4 Jun 2014 07:46:45 +0000]
restore default credential validity period to 28 days
had been inadvertantly committed as 2 hours for a while when debugging the short-lived credential issue
used to be 31 days prior to that

5 years agocosmetic, rename variable expected to be a datetime as 'dt' as opposed to 'input...
Thierry Parmentelat [Wed, 4 Jun 2014 07:44:23 +0000]
cosmetic, rename variable expected to be a datetime as 'dt' as opposed to 'input' that can be a string or number or datetime

5 years agobugfix for the issue reported by Brecht when using short-lived credentials
Thierry Parmentelat [Wed, 4 Jun 2014 07:42:55 +0000]
bugfix for the issue reported by Brecht when using short-lived credentials
there was one conversion that mixed UTC and localtime in datetime_to_epoch

5 years agomore cleanup on timestamps - issue with short-lived credentials still present though
Thierry Parmentelat [Tue, 3 Jun 2014 15:06:24 +0000]
more cleanup on timestamps - issue with short-lived credentials still present though

5 years agodebug msgs
Thierry Parmentelat [Tue, 3 Jun 2014 15:05:47 +0000]
debug msgs

5 years agoa little more robust against odd conditions
Thierry Parmentelat [Tue, 3 Jun 2014 15:03:43 +0000]
a little more robust against odd conditions

5 years agosfi retcod should now be a bit more meaningful - maybe not for all commands though
Thierry Parmentelat [Tue, 3 Jun 2014 14:54:05 +0000]
sfi retcod should now be a bit more meaningful - maybe not for all commands though
not quite sure how a returnvalue should be analyzed - see method 'success' here

5 years agomore accurate comment
Thierry Parmentelat [Mon, 2 Jun 2014 14:56:41 +0000]
more accurate comment

5 years agothis goes with previous commit
Thierry Parmentelat [Mon, 2 Jun 2014 14:56:23 +0000]
this goes with previous commit

5 years agodrop support for legacy credentials
Thierry Parmentelat [Mon, 2 Jun 2014 14:55:41 +0000]
drop support for legacy credentials

5 years agoSetting tag sfa-3.1-6 sfa-3.1-6
Thierry Parmentelat [Mon, 2 Jun 2014 08:09:39 +0000]
Setting tag sfa-3.1-6
iotlab driver: Allocate uses OAR
iotlab driver: using actual_caller_hrn

5 years agoiotlab driver: using actual_caller_hrn form options on Allocate call, allow the testb...
Loic Baron [Fri, 30 May 2014 15:55:38 +0000]
iotlab driver: using actual_caller_hrn form options on Allocate call, allow the testbed to know which of the users of the slice launched the call, works even with delegated creds

5 years agoMerge branch 'geni-v3' of http://git.onelab.eu/sfa into geni-v3
Loic Baron [Fri, 30 May 2014 15:00:15 +0000]
Merge branch 'geni-v3' of git.onelab.eu/sfa into geni-v3

5 years agoiotlab driver: updated the Allocate function to work with the iotlab testbed using OAR
Loic Baron [Fri, 30 May 2014 14:58:57 +0000]
iotlab driver: updated the Allocate function to work with the iotlab testbed using OAR