[jira] [Commented] (DIRKRB-224) Enhance kadmin to support delete principal

2015-04-21 Thread Lin Chen (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-224?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14504425#comment-14504425 ] Lin Chen commented on DIRKRB-224: - Hi Jiajia, The work looks great! A minor thing:

[jira] [Commented] (DIRKRB-224) Enhance kadmin to support delete principal

2015-04-21 Thread Jiajia Li (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-224?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14504433#comment-14504433 ] Jiajia Li commented on DIRKRB-224: -- Thanks for your review, it's right, the {{return}} is

[jira] [Updated] (DIRKRB-224) Enhance kadmin to support delete principal

2015-04-21 Thread Jiajia Li (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-224?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jiajia Li updated DIRKRB-224: - Attachment: DIRKRB-224-V2.patch Update the patch according to Lin's comment. Enhance kadmin to support

Re: [ApacheDS] Release to go...

2015-04-21 Thread Stefan Seelmann
On 04/21/2015 10:21 AM, Emmanuel Lécharny wrote: Hi guys, FYI, I'm working on checking the JIRA for ApacheDS 2.0-M20, before starting to cut a long expected release. As soon as I have the installers checked, I'll cut a release. Just the question if this will include all dependent projects

Re: [ApacheDS] Release to go...

2015-04-21 Thread Emmanuel Lécharny
Le 21/04/15 20:09, Stefan Seelmann a écrit : On 04/21/2015 10:21 AM, Emmanuel Lécharny wrote: Hi guys, FYI, I'm working on checking the JIRA for ApacheDS 2.0-M20, before starting to cut a long expected release. As soon as I have the installers checked, I'll cut a release. Just the question

Re: [Fortress] Setting up OpenLDAP for fortress-core tests

2015-04-21 Thread Stefan Seelmann
On 04/21/2015 03:40 PM, Shawn McKinney wrote: On Apr 20, 2015, at 5:16 PM, Stefan Seelmann m...@stefan-seelmann.de wrote: I pushed the docker image to [1] and created the Jenkins job [2]. Works fine except the one failing test. Kind Regards, Stefan [1]

[jira] [Commented] (DIRAPI-227) Bind user dn and password sent in clear after receiving PROTOCOL_ERROR during ldaps connection

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRAPI-227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14505403#comment-14505403 ] Emmanuel Lecharny commented on DIRAPI-227: -- Question : seems like a

Re: [ApacheDS] release Package tests needed !

2015-04-21 Thread Pierre Smits
I will try on my Mac. Best regards, Pierre Smits *ORRTIZ.COM http://www.orrtiz.com* Services Solutions for Cloud- Based Manufacturing, Professional Services and Retail Trade http://www.orrtiz.com On Tue, Apr 21, 2015 at 6:43 PM, Emmanuel Lécharny elecha...@gmail.com wrote: Hi guys, I

[jira] [Created] (DIRKRB-232) Add an end to end test for KdcServer

2015-04-21 Thread Kai Zheng (JIRA)
Kai Zheng created DIRKRB-232: Summary: Add an end to end test for KdcServer Key: DIRKRB-232 URL: https://issues.apache.org/jira/browse/DIRKRB-232 Project: Directory Kerberos Issue Type: New

[jira] [Resolved] (DIRSERVER-1345) Oracle partition implementation

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-1345?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Emmanuel Lecharny resolved DIRSERVER-1345. -- Resolution: Won't Fix No support for this addition, so it won't be added.

Re: Kerby GSS tests?

2015-04-21 Thread Colm O hEigeartaigh
Actually I spoke too soon, I do know how to reproduce the pre-authentication error. Simply uncomment the line kerbyServer.setInnerKdcImpl(new NettyKdcServerImpl()); in the test. If I put a printStackTrace in the NettyKdcServerImpl, I see: Error occured while processing request:Generic error

RE: Kerby GSS tests?

2015-04-21 Thread Zheng, Kai
From your logs looks like you’re not using Kerby client API to contact with Kerby KDC. So I guess your client didn’t send preauth data, but Kerby KDC required it by default, then it refused. Please note it’s still on-going to implement kdc server correctly handling krb errors and the 4 passes.

[jira] [Resolved] (DIRSERVER-2055) Apacheds M19 not starting

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2055?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Emmanuel Lecharny resolved DIRSERVER-2055. -- Resolution: Not A Problem The users have a weird shell used. Apacheds M19

[jira] [Comment Edited] (DIRSERVER-2055) Apacheds M19 not starting

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14504607#comment-14504607 ] Emmanuel Lecharny edited comment on DIRSERVER-2055 at 4/21/15 8:37 AM:

[jira] [Commented] (DIRAPI-227) Bind user dn and password sent in clear after receiving PROTOCOL_ERROR during ldaps connection

2015-04-21 Thread Scott Tustison (JIRA)
[ https://issues.apache.org/jira/browse/DIRAPI-227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14504892#comment-14504892 ] Scott Tustison commented on DIRAPI-227: --- You can find all of the code here:

Re: Kerby GSS tests?

2015-04-21 Thread Colm O hEigeartaigh
Hi Kiran, The enctypes should always be sorted from the most to least strong/preferred on the server side Is there any existing code in Apache Directory along these lines? Colm. On Tue, Apr 21, 2015 at 12:52 PM, Kiran Ayyagari kayyag...@apache.org wrote: On Tue, Apr 21, 2015 at 7:47 PM,

RE: Kerby GSS tests?

2015-04-21 Thread Zheng, Kai
Hi Colm, I thought it’s good to have the following fix for now, as it processes the enctypes list from client from first to end. I just fired a follow-on issue to double check this. https://issues.apache.org/jira/browse/DIRKRB-236 +for (EncryptionType encType :

[jira] [Created] (FC-92) Remove debug flag from context.xml

2015-04-21 Thread Shawn McKinney (JIRA)
Shawn McKinney created FC-92: Summary: Remove debug flag from context.xml Key: FC-92 URL: https://issues.apache.org/jira/browse/FC-92 Project: FORTRESS Issue Type: Bug Affects Versions:

Re: Kerby GSS tests?

2015-04-21 Thread Colm O hEigeartaigh
Ok good idea, I've merged the fix. Colm. On Tue, Apr 21, 2015 at 2:07 PM, Zheng, Kai kai.zh...@intel.com wrote: Hi Colm, I thought it’s good to have the following fix for now, as it processes the enctypes list from client from first to end. I just fired a follow-on issue to double check

[jira] [Created] (DIRKRB-236) Ensure encryption types list is correctly sent by client and processed by kdc

2015-04-21 Thread Kai Zheng (JIRA)
Kai Zheng created DIRKRB-236: Summary: Ensure encryption types list is correctly sent by client and processed by kdc Key: DIRKRB-236 URL: https://issues.apache.org/jira/browse/DIRKRB-236 Project:

[jira] [Updated] (DIRKRB-232) Add an end to end test for KdcServer

2015-04-21 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-232?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated DIRKRB-232: - Issue Type: Sub-task (was: New Feature) Parent: DIRKRB-102 Add an end to end test for KdcServer

[jira] [Resolved] (DIRSERVER-575) Convert all non-forwarding (out of band) nextInterceptor calls to use the proxy with bypass instructions

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-575?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Emmanuel Lecharny resolved DIRSERVER-575. - Resolution: Fixed The mechanism has been fixed a long time ago Convert all

[jira] [Resolved] (DIRSERVER-1117) DHCP Section in server.xml

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-1117?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Emmanuel Lecharny resolved DIRSERVER-1117. -- Resolution: Won't Fix I don't think we want to support DHCP atm. DHCP

[jira] [Commented] (DIRSERVER-2011) Switch to JSVC instead of Tanuki wrapper

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2011?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14504555#comment-14504555 ] Emmanuel Lecharny commented on DIRSERVER-2011: -- Probably a better option

[jira] [Resolved] (DIRSERVER-439) Add support for User Preferences

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-439?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Emmanuel Lecharny resolved DIRSERVER-439. - Resolution: Won't Fix We don't support it anymore Add support for User

[jira] [Created] (DIRKRB-233) Interoperable and compatible tests/fixes with MS AD

2015-04-21 Thread Kai Zheng (JIRA)
Kai Zheng created DIRKRB-233: Summary: Interoperable and compatible tests/fixes with MS AD Key: DIRKRB-233 URL: https://issues.apache.org/jira/browse/DIRKRB-233 Project: Directory Kerberos Issue

[jira] [Created] (DIRKRB-231) Support UDP transport for NettyKdcNetwork

2015-04-21 Thread Kai Zheng (JIRA)
Kai Zheng created DIRKRB-231: Summary: Support UDP transport for NettyKdcNetwork Key: DIRKRB-231 URL: https://issues.apache.org/jira/browse/DIRKRB-231 Project: Directory Kerberos Issue Type: New

[jira] [Resolved] (DIRSERVER-959) We nedd a global cache

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-959?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Emmanuel Lecharny resolved DIRSERVER-959. - Resolution: Fixed We now use the CacheService which is shared across all the

[jira] [Created] (DIRKRB-230) Support UDP transport for default KdcNetwork

2015-04-21 Thread Kai Zheng (JIRA)
Kai Zheng created DIRKRB-230: Summary: Support UDP transport for default KdcNetwork Key: DIRKRB-230 URL: https://issues.apache.org/jira/browse/DIRKRB-230 Project: Directory Kerberos Issue Type:

[jira] [Comment Edited] (DIRSERVER-1402) Many Comparators are missing

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-1402?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=12872270#comment-12872270 ] Emmanuel Lecharny edited comment on DIRSERVER-1402 at 4/21/15 8:32 AM:

[jira] [Resolved] (DIRSERVER-1964) Duplicate DN returned

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-1964?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Emmanuel Lecharny resolved DIRSERVER-1964. -- Resolution: Cannot Reproduce Unless it can be reproducted in 2.0.0-M19, I

[jira] [Commented] (DIRSERVER-265) In-memory backend storage support

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-265?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14504565#comment-14504565 ] Emmanuel Lecharny commented on DIRSERVER-265: - Josef, this is great work.

[jira] [Commented] (DIRSERVER-1094) ChangeLog interfaces must be able to capture enough information to restore state of operational attributes

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-1094?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14504585#comment-14504585 ] Emmanuel Lecharny commented on DIRSERVER-1094: -- I'm quite sure that the

[jira] [Created] (DIRKRB-234) Interoperable and compatible tests/fixes with MIT Kerberos

2015-04-21 Thread Kai Zheng (JIRA)
Kai Zheng created DIRKRB-234: Summary: Interoperable and compatible tests/fixes with MIT Kerberos Key: DIRKRB-234 URL: https://issues.apache.org/jira/browse/DIRKRB-234 Project: Directory Kerberos

[jira] [Resolved] (DIRKRB-224) Enhance kadmin to support delete principal

2015-04-21 Thread Lin Chen (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-224?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Lin Chen resolved DIRKRB-224. - Resolution: Fixed Reviewed and committed. Thanks Jiajia for contribution! commit

Re: Kerby GSS tests?

2015-04-21 Thread Kiran Ayyagari
On Tue, Apr 21, 2015 at 8:52 PM, Colm O hEigeartaigh cohei...@apache.org wrote: Hi Kiran, The enctypes should always be sorted from the most to least strong/preferred on the server side Is there any existing code in Apache Directory along these lines? yes, it is in KerberosUtils[1] see

[jira] [Commented] (DIRKRB-215) Implement the PRF function for DES_CBC.

2015-04-21 Thread Lin Chen (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-215?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14505026#comment-14505026 ] Lin Chen commented on DIRKRB-215: - Hi Yaning, Thanks for your work. It seems that the v2

Re: [Fortress] Setting up OpenLDAP for fortress-core tests

2015-04-21 Thread Shawn McKinney
On Apr 20, 2015, at 5:16 PM, Stefan Seelmann m...@stefan-seelmann.de wrote: I pushed the docker image to [1] and created the Jenkins job [2]. Works fine except the one failing test. Kind Regards, Stefan [1]

RE: [ApacheDS] Release to go...

2015-04-21 Thread Zheng, Kai
a long expected release It's cool! A question, in how much time would it happen for the cut? I'm thinking if it's possible to deprecate/disable/remove the Kerberos part in ApacheDS before that, if it's very approaching to the possible Kerby release in 2+ months. I thought of this because it's

Re: [ApacheDS] Release to go...

2015-04-21 Thread Kiran Ayyagari
On Tue, Apr 21, 2015 at 7:59 PM, Zheng, Kai kai.zh...@intel.com wrote: a long expected release It's cool! A question, in how much time would it happen for the cut? I'm thinking if it's possible to deprecate/disable/remove the Kerberos part in ApacheDS before that, if it's very approaching to

[jira] [Updated] (DIRKRB-131) Update Directory Server using Kerby

2015-04-21 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-131?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated DIRKRB-131: - Summary: Update Directory Server using Kerby (was: Decouple Kerberos from the Directory Server) Update

[jira] [Updated] (DIRKRB-131) Update Directory Server using Kerby

2015-04-21 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-131?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated DIRKRB-131: - Description: As discussed in the mailing list, we would decouple Kerberos logics from the Directory

[jira] [Updated] (DIRKRB-132) Update the Kerberos part in Directory Studio in favor of Kerby

2015-04-21 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated DIRKRB-132: - Summary: Update the Kerberos part in Directory Studio in favor of Kerby (was: Decouple Kerberos from the

[jira] [Updated] (DIRKRB-131) Update the Kerberos part in Directory Server in favor of Kerby

2015-04-21 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-131?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated DIRKRB-131: - Summary: Update the Kerberos part in Directory Server in favor of Kerby (was: Update Directory Server

Re: Kerby GSS tests?

2015-04-21 Thread Colm O hEigeartaigh
Hi Kai, Thanks for your response. I have a test-case of sorts that shows the interop failure (although I can't reproduce the issue I reported yesterday about the preauthentication data). https://github.com/coheigea/testcases/tree/master/apache/cxf/cxf-kerberos-kerby Run it with mvn clean

[jira] [Created] (DIRKRB-235) Handling krb errors and respond correctly

2015-04-21 Thread Kai Zheng (JIRA)
Kai Zheng created DIRKRB-235: Summary: Handling krb errors and respond correctly Key: DIRKRB-235 URL: https://issues.apache.org/jira/browse/DIRKRB-235 Project: Directory Kerberos Issue Type:

Re: Publishing to Docker Hub

2015-04-21 Thread Pierre Smits
I tend to agree. We can always revert the direction. Best regards, Pierre Smits *ORRTIZ.COM http://www.orrtiz.com* Services Solutions for Cloud- Based Manufacturing, Professional Services and Retail Trade http://www.orrtiz.com On Sun, Apr 19, 2015 at 7:04 PM, Kiran Ayyagari

RE: [ApacheDS] Release to go...

2015-04-21 Thread Zheng, Kai
I got it. It makes sense and doesn’t break. Thanks Kiran for the clarifying. Regards, Kai From: Kiran Ayyagari [mailto:kayyag...@apache.org] Sent: Tuesday, April 21, 2015 8:06 PM To: Apache Directory Developers List Subject: Re: [ApacheDS] Release to go... On Tue, Apr 21, 2015 at 7:59 PM,

Re: [ApacheDS] Release to go...

2015-04-21 Thread Emmanuel Lécharny
Le 21/04/15 13:59, Zheng, Kai a écrit : a long expected release It's cool! A question, in how much time would it happen for the cut? I'm thinking if it's possible to deprecate/disable/remove the Kerberos part in ApacheDS before that, if it's very approaching to the possible Kerby release

RE: [ApacheDS] Release to go...

2015-04-21 Thread Zheng, Kai
Oh, I see, it's a Milestone. Thanks! Regards, Kai -Original Message- From: Emmanuel Lécharny [mailto:elecha...@gmail.com] Sent: Tuesday, April 21, 2015 8:16 PM To: Apache Directory Developers List Subject: Re: [ApacheDS] Release to go... Le 21/04/15 13:59, Zheng, Kai a écrit : a long

[jira] [Assigned] (DIRKRB-232) Add an end to end test for KdcServer

2015-04-21 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-232?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng reassigned DIRKRB-232: Assignee: Kai Zheng Add an end to end test for KdcServer

[jira] [Updated] (DIRKRB-132) Decouple Kerberos from the Directory Studio

2015-04-21 Thread Kai Zheng (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-132?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated DIRKRB-132: - Description: As discussed in the mailing list, we would decouple Kerberos logics from the Directory

[jira] [Created] (DIRSERVER-2060) Bind not working after server startup

2015-04-21 Thread Stefan Seelmann (JIRA)
Stefan Seelmann created DIRSERVER-2060: -- Summary: Bind not working after server startup Key: DIRSERVER-2060 URL: https://issues.apache.org/jira/browse/DIRSERVER-2060 Project: Directory ApacheDS

Re: [ApacheDS] release Package tests needed !

2015-04-21 Thread Stefan Seelmann
I created a script that downloads the debian installer, installs it, checks installation, starts server, performs a search, restarts server, stops server, uninstalls it. We can start a Docker containers with various OS (Debian 8, Ubuntu 14.4) and Java (OpenJDK8, Oracle 7) flavours and pipe the

Re: [ApacheDS] release Package tests needed !

2015-04-21 Thread Stefan Seelmann
Another evidence: The UberjarMainTest also fails sporadically, e.g. here on Jenkins, unfortunately the exception is swallowed...

[jira] [Commented] (DIRSERVER-2011) Switch to JSVC instead of Tanuki wrapper

2015-04-21 Thread Pierre Smits (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2011?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14505691#comment-14505691 ] Pierre Smits commented on DIRSERVER-2011: - What about Apache APR? Switch to

Re: [ApacheDS] release Package tests needed !

2015-04-21 Thread Lucas Theisen
I tested the windows .exe... All is well in window land. Service was installed and it starts/stops as expected. On Apr 21, 2015 4:25 PM, Stefan Seelmann m...@stefan-seelmann.de wrote: Another evidence: The UberjarMainTest also fails sporadically, e.g. here on Jenkins, unfortunately the

Re: [ApacheDS] release Package tests needed !

2015-04-21 Thread Stefan Seelmann
On 04/21/2015 06:43 PM, Emmanuel Lécharny wrote: Hi guys, I have built the installers for all the platforms, but I was only able to test the bin installer on a Linux VM. For some weird reason, I can't get it installed on my mac (most certainly an issue with my system setting). I would

[jira] [Commented] (DIRSERVER-2011) Switch to JSVC instead of Tanuki wrapper

2015-04-21 Thread Pierre Smits (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2011?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14505681#comment-14505681 ] Pierre Smits commented on DIRSERVER-2011: - JVCS might prove more beneficial as

Re: [ApacheDS] release Package tests needed !

2015-04-21 Thread Pierre Smits
Hi Emmanuel, I got it downloaded and installed. Yet it can't be found. Best regards, Pierre Smits *ORRTIZ.COM http://www.orrtiz.com* Services Solutions for Cloud- Based Manufacturing, Professional Services and Retail Trade http://www.orrtiz.com On Tue, Apr 21, 2015 at 8:48 PM, Pierre Smits

[jira] [Commented] (DIRSERVER-2060) Bind not working after server startup

2015-04-21 Thread Stefan Seelmann (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14505949#comment-14505949 ] Stefan Seelmann commented on DIRSERVER-2060: Added e.printStackTrace() in

[Fortress] Status ?

2015-04-21 Thread Emmanuel Lécharny
Hi Shawn, now that Apache CON US is over, you probably have a bit less stressed and loaded... Can you tell us what's the current status of the project, especially regarding the tests and the packaging ? We have a release done for core, we still have some release to provide for the 3 other

[jira] [Reopened] (FC-33) AuditMgr.getUserAuthZ cannot pull back faileOnly

2015-04-21 Thread Shawn McKinney (JIRA)
[ https://issues.apache.org/jira/browse/FC-33?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Shawn McKinney reopened FC-33: -- regression detected inside docker container tests AuditMgr.getUserAuthZ cannot pull back faileOnly

Re: Apache Directory and SCIM

2015-04-21 Thread Steve Moyer
Kiran, I certainly didn't want or expect you to be disappointed! It is however a bit disingenuous to say that *WE* forked eSCIMo and kept it private since you and I discussed the fact that your ideas for eSCIMo moved towards an untyped mapping system while we moved towards a fully-typed model of

[jira] [Commented] (DIRKRB-228) Enhance kadmin to support get principal

2015-04-21 Thread Jiajia Li (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-228?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14506327#comment-14506327 ] Jiajia Li commented on DIRKRB-228: -- Hi, [~YaningXu], can you take this jira? Enhance

[jira] [Commented] (DIRKRB-227) Enhance kadmin to support change password for principal

2015-04-21 Thread Jiajia Li (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14506324#comment-14506324 ] Jiajia Li commented on DIRKRB-227: -- Hi, [~yiliqi], can you take this jira? Enhance

[jira] [Commented] (DIRKRB-226) Enhance kadmin to supoort rename principal

2015-04-21 Thread Jiajia Li (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-226?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14506323#comment-14506323 ] Jiajia Li commented on DIRKRB-226: -- Hi, [~zhouw], can you take this jira? Enhance

[jira] [Commented] (DIRKRB-229) Enhance kadmin to support list principals

2015-04-21 Thread Jiajia Li (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-229?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14506328#comment-14506328 ] Jiajia Li commented on DIRKRB-229: -- Hi, [~YaningXu], can you take this jira? Enhance

[jira] [Commented] (DIRKRB-226) Enhance kadmin to supoort rename principal

2015-04-21 Thread Wei Zhou (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-226?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14506330#comment-14506330 ] Wei Zhou commented on DIRKRB-226: - Ok, thanks! Enhance kadmin to supoort rename

[jira] [Resolved] (DIR-317) Typo and consistent list punctuation on mailing list page of site

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIR-317?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Emmanuel Lecharny resolved DIR-317. --- Resolution: Fixed Patch applied, thanks Steve. Btw, please provide a patch created from the top

Re: [Fortress] Status ?

2015-04-21 Thread Shawn McKinney
On Apr 21, 2015, at 8:31 PM, Emmanuel Lécharny elecha...@gmail.com wrote: now that Apache CON US is over, you probably have a bit less stressed and loaded... Indeed On Apr 21, 2015, at 8:31 PM, Emmanuel Lécharny elecha...@gmail.com wrote: Can you tell us what's the current status

Re: Apache Directory and SCIM

2015-04-21 Thread Steve Moyer
All, Given Emmanuel's disappointment conveyed in the original thread (on the Fortress mailing list), please consider the proposal withdrawn. We'll make sure that any of the original eSCIMo code (should any remain in the project) retains the Apache license and a link to this project along with

[jira] [Updated] (DIRKRB-226) Enhance kadmin to supoort rename principal

2015-04-21 Thread Jiajia Li (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-226?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jiajia Li updated DIRKRB-226: - Assignee: Wei Zhou Enhance kadmin to supoort rename principal

[jira] [Updated] (DIRKRB-227) Enhance kadmin to support change password for principal

2015-04-21 Thread Jiajia Li (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jiajia Li updated DIRKRB-227: - Assignee: Liqi Yi Enhance kadmin to support change password for principal

[jira] [Updated] (DIRKRB-228) Enhance kadmin to support get principal

2015-04-21 Thread Jiajia Li (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-228?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jiajia Li updated DIRKRB-228: - Assignee: Xu Yaning Enhance kadmin to support get principal ---

[jira] [Commented] (FC-33) AuditMgr.getUserAuthZ cannot pull back faileOnly

2015-04-21 Thread Shawn McKinney (JIRA)
[ https://issues.apache.org/jira/browse/FC-33?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14506216#comment-14506216 ] Shawn McKinney commented on FC-33: -- running core junit tests error against opennldap running

RE: Kerby GSS tests?

2015-04-21 Thread Li, Jiajia
I’d like to follow this issue. Thanks Jiajia From: Kiran Ayyagari [mailto:kayyag...@apache.org] Sent: Tuesday, April 21, 2015 9:40 PM To: Apache Directory Developers List; Colm O hEigeartaigh Subject: Re: Kerby GSS tests? On Tue, Apr 21, 2015 at 8:52 PM, Colm O hEigeartaigh

[jira] [Updated] (DIRKRB-229) Enhance kadmin to support list principals

2015-04-21 Thread Jiajia Li (JIRA)
[ https://issues.apache.org/jira/browse/DIRKRB-229?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Jiajia Li updated DIRKRB-229: - Assignee: Xu Yaning Enhance kadmin to support list principals -

Re: Apache Directory and SCIM

2015-04-21 Thread Kiran Ayyagari
Hi Steve, please do not consider my earlier reply as a hostile one, it wasn't meant to offend you at all. On Wed, Apr 22, 2015 at 9:55 AM, Steve Moyer smo...@psu.edu wrote: Kiran, I certainly didn't want or expect you to be disappointed! It is however a bit disingenuous to say that

[jira] [Commented] (DIRSERVER-2060) Bind not working after server startup

2015-04-21 Thread Stefan Seelmann (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14505945#comment-14505945 ] Stefan Seelmann commented on DIRSERVER-2060: Logfile contains following

[jira] [Commented] (DIRSERVER-2060) Bind not working after server startup

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14506035#comment-14506035 ] Emmanuel Lecharny commented on DIRSERVER-2060: -- yes. Thus the comment I

[jira] [Commented] (DIRSERVER-2060) Bind not working after server startup

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14505976#comment-14505976 ] Emmanuel Lecharny commented on DIRSERVER-2060: -- FTR, we don't use at all

[Community] SCIM framework, implementation and tools

2015-04-21 Thread Steve Moyer
Shawn, Our SCIM implementation is only tangentially related to Fortress ... we use ftProps for SCIM attributes not included in inetOrgPerson and we use ftRA for SCIM User.roles attributes (https://tools.ietf.org/html/draft-ietf-scim-core-schema-17#section-4.1.2). You're right, this e-mail

[jira] [Created] (DIR-317) Typo and consistent list punctuation on mailing list page of site

2015-04-21 Thread Steve Moyer (JIRA)
Steve Moyer created DIR-317: --- Summary: Typo and consistent list punctuation on mailing list page of site Key: DIR-317 URL: https://issues.apache.org/jira/browse/DIR-317 Project: Directory Issue

[jira] [Updated] (DIR-317) Typo and consistent list punctuation on mailing list page of site

2015-04-21 Thread Steve Moyer (JIRA)
[ https://issues.apache.org/jira/browse/DIR-317?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Steve Moyer updated DIR-317: Attachment: patch.txt Typo and consistent list punctuation on mailing list page of site

[jira] [Commented] (DIRSERVER-2060) Bind not working after server startup

2015-04-21 Thread Stefan Seelmann (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14505981#comment-14505981 ] Stefan Seelmann commented on DIRSERVER-2060: The problem is in

[jira] [Commented] (DIRSERVER-2060) Bind not working after server startup

2015-04-21 Thread Stefan Seelmann (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14505998#comment-14505998 ] Stefan Seelmann commented on DIRSERVER-2060: Wait, the call of

Re: [Community] SCIM framework, implementation and tools

2015-04-21 Thread Kiran Ayyagari
Hi Steve, On Wed, Apr 22, 2015 at 7:56 AM, Steve Moyer smo...@psu.edu wrote: Shawn, Our SCIM implementation is only tangentially related to Fortress ... we use ftProps for SCIM attributes not included in inetOrgPerson and we use ftRA for SCIM User.roles attributes

[jira] [Commented] (DIRSERVER-2060) Bind not working after server startup

2015-04-21 Thread Emmanuel Lecharny (JIRA)
[ https://issues.apache.org/jira/browse/DIRSERVER-2060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14505967#comment-14505967 ] Emmanuel Lecharny commented on DIRSERVER-2060: -- Why would be use the

Re: [ApacheDS] release Package tests needed !

2015-04-21 Thread Kiran Ayyagari
On Wed, Apr 22, 2015 at 6:18 AM, Stefan Seelmann m...@stefan-seelmann.de wrote: I created a script that downloads the debian installer, installs it, checks installation, starts server, performs a search, restarts server, stops server, uninstalls it. We can start a Docker containers with

Re: [ApacheDS] release Package tests needed !

2015-04-21 Thread Emmanuel Lécharny
I have created some new installers (http://people.apache.org/~elecharny/apacheds-2.0.0-M20-SNAPSHOT/) with a fix for the debian installer.

RE: Kerby GSS tests?

2015-04-21 Thread Zheng, Kai
Hi Colm, 1. Would you please update the codes to include some fixes we did today. But they may not relate to this issue, so see next; 2. Please disable preauth in KDC side or require preauth in client side. Looks like client didn’t send preauth data but KDC required it. If you don’t

Re: [ApacheDS] Release to go...

2015-04-21 Thread Pierre Smits
Thanks Emannuel, I am, and a lot of others are I surmise, waiting in eager anticipation. :) Best regards, Pierre Smits *ORRTIZ.COM http://www.orrtiz.com* Services Solutions for Cloud- Based Manufacturing, Professional Services and Retail Trade http://www.orrtiz.com On Tue, Apr 21, 2015 at

Re: Kerby GSS tests?

2015-04-21 Thread Kiran Ayyagari
On Tue, Apr 21, 2015 at 7:47 PM, Zheng, Kai kai.zh...@intel.com wrote: Hi Colm, Yes it’s a great fix! May be we could also update our related kdc test to repeat the issue and guard the fix? In our existing tests, the enctypes used in KrbClient are the same with the ones in KdcServer side,

RE: [Kerby] Two new contributors

2015-04-21 Thread Zheng, Kai
Thanks Emmanuel a lot! -Original Message- From: Emmanuel Lécharny [mailto:elecha...@gmail.com] Sent: Tuesday, April 21, 2015 3:46 PM To: Zheng, Kai Subject: Re: [Kerby] Two new contributors Users added... Le 21/04/15 07:00, Zheng, Kai a écrit : Hi Emmanuel, Sorry to trouble you

[ApacheDS] Release to go...

2015-04-21 Thread Emmanuel Lécharny
Hi guys, FYI, I'm working on checking the JIRA for ApacheDS 2.0-M20, before starting to cut a long expected release. As soon as I have the installers checked, I'll cut a release.

Re: Kerby GSS tests?

2015-04-21 Thread Colm O hEigeartaigh
Hi Kai, 2. Please disable preauth in KDC side or require preauth in client side. Looks like client didn’t send preauth data but KDC required it. Ok I got a bit further by doing this. However, from what I can find out, the GSS client code should be sending the Pre authentication data (and

RE: Kerby GSS tests?

2015-04-21 Thread Zheng, Kai
Yes, it looks like a good fix, 0 is there instead of null, for time fields in kdc request. Would you double check other time values by the way? Thanks! Regards, Kai From: Colm O hEigeartaigh [mailto:cohei...@apache.org] Sent: Tuesday, April 21, 2015 7:11 PM To: Apache Directory Developers List

Re: Kerby GSS tests?

2015-04-21 Thread Colm O hEigeartaigh
Yep I will do! Colm. On Tue, Apr 21, 2015 at 12:16 PM, Zheng, Kai kai.zh...@intel.com wrote: Yes, it looks like a good fix, 0 is there instead of null, for time fields in kdc request. Would you double check other time values by the way? Thanks! Regards, Kai *From:* Colm O

Re: Kerby GSS tests?

2015-04-21 Thread Colm O hEigeartaigh
Hi Kai, I've found another bug. We are just picking the first desired encryption type in KdcRequest.checkClient(). However, we may not actually have this key. This leads to an NPE. Example: We are requesting: aes256-cts-hmac-sha1-96 18 aes128-cts-hmac-sha1-96 17 des3-cbc-sha1 16 arcfour-hmac 23

  1   2   >