[Freeipa-devel] Re: authconfig replacement design

Just to let everyone know: [11:32] ping. Could you please submit latest authselect to F27 as well? [11:32] yes, I plan to do it today [11:33] ok. thank you Alexander On Mon, Mar 5, 2018 at 9:57 AM, Florence Blanc-Renaud wrote: > Hi, > > re-adding the ML to the thread. > > On

[Freeipa-devel] Re: authconfig replacement design

Hi, re-adding the ML to the thread. On 19/02/2018 10:35, Alexander Koksharov wrote: @Flo, thank you for a comment. I believe that all these commands do use same code in ipaplatform/redhat/tasks.py So, I have to make these tasks execution to be dependant on a tools available. In fact the

[Freeipa-devel] Re: authconfig replacement design

I have updated design page https://www.freeipa.org/page/V4/Authselect_migration#Overview Here is pull request for that change https://github.com/freeipa/freeipa/pull/1603 non-sssd installation will display and error, stating that this option is not supported any longer, and offers to run

[Freeipa-devel] Re: authconfig replacement design

On 02/26/2018 05:08 PM, Martin Kosek wrote: >> Because I do not know any platform/distribution which has freeipa-client >> and does not have sssd. > I see, thanks for info. > > Reading this, I would be quite fine with removing all the --no-sssd > functionality from client installer and leaving

[Freeipa-devel] Re: authconfig replacement design

On 02/26/2018 01:16 PM, Lukas Slebodnik wrote: > On (23/02/18 13:08), Martin Kosek via FreeIPA-devel wrote: >> On 02/21/2018 03:39 PM, Rob Crittenden via FreeIPA-devel wrote: > - install client >   a) if we replace rpm dependancy on authconfig with aushselect we can > go only this way:

[Freeipa-devel] Re: authconfig replacement design

On (23/02/18 13:08), Martin Kosek via FreeIPA-devel wrote: >On 02/21/2018 03:39 PM, Rob Crittenden via FreeIPA-devel wrote: - install client   a) if we replace rpm dependancy on authconfig with aushselect we can go only this way: new installations done with authselect. if --no-sssd

[Freeipa-devel] Re: authconfig replacement design

On 02/23/2018 01:53 PM, Martin Kosek wrote: On 02/23/2018 01:45 PM, Pavel Březina wrote: On 02/23/2018 01:29 PM, Martin Kosek wrote: On 02/23/2018 01:25 PM, Alexander Bokovoy wrote: On pe, 23 helmi 2018, Pavel Březina via FreeIPA-devel wrote: On 02/23/2018 12:57 PM, Martin Kosek wrote: On

[Freeipa-devel] Re: authconfig replacement design

On 02/23/2018 01:45 PM, Pavel Březina wrote: > On 02/23/2018 01:29 PM, Martin Kosek wrote: >> On 02/23/2018 01:25 PM, Alexander Bokovoy wrote: >>> On pe, 23 helmi 2018, Pavel Březina via FreeIPA-devel wrote: On 02/23/2018 12:57 PM, Martin Kosek wrote: > On 02/21/2018 10:25 AM, Pavel

[Freeipa-devel] Re: authconfig replacement design

On 02/23/2018 01:29 PM, Martin Kosek wrote: On 02/23/2018 01:25 PM, Alexander Bokovoy wrote: On pe, 23 helmi 2018, Pavel Březina via FreeIPA-devel wrote: On 02/23/2018 12:57 PM, Martin Kosek wrote: On 02/21/2018 10:25 AM, Pavel Březina via FreeIPA-devel wrote: ​ ​ couple of scenarious here:

[Freeipa-devel] Re: authconfig replacement design

On 02/23/2018 01:25 PM, Alexander Bokovoy wrote: > On pe, 23 helmi 2018, Pavel Březina via FreeIPA-devel wrote: >> On 02/23/2018 12:57 PM, Martin Kosek wrote: >>> On 02/21/2018 10:25 AM, Pavel Březina via FreeIPA-devel wrote: > > ​ ​ > couple of scenarious here: > - install server

[Freeipa-devel] Re: authconfig replacement design

On pe, 23 helmi 2018, Pavel Březina via FreeIPA-devel wrote: On 02/23/2018 12:57 PM, Martin Kosek wrote: On 02/21/2018 10:25 AM, Pavel Březina via FreeIPA-devel wrote: ​ ​ couple of scenarious here: - install server install it and configure with authselect. there is no --no-sssd option for

[Freeipa-devel] Re: authconfig replacement design

On 02/23/2018 12:57 PM, Martin Kosek wrote: On 02/21/2018 10:25 AM, Pavel Březina via FreeIPA-devel wrote: ​ ​ couple of scenarious here: - install server install it and configure with authselect. there is no --no-sssd option for the server installation - upgrade server bakup authselect

[Freeipa-devel] Re: authconfig replacement design

On 02/21/2018 03:39 PM, Rob Crittenden via FreeIPA-devel wrote: >>> - install client >>>   a) if we replace rpm dependancy on authconfig with aushselect we can >>> go only this way: new installations done with authselect. if --no-sssd >>> option is provided, then fail. >> --no-sssd option is

[Freeipa-devel] Re: authconfig replacement design

On 02/21/2018 10:25 AM, Pavel Březina via FreeIPA-devel wrote: >> >> ​ ​ >> couple of scenarious here: >> - install server >>   install it and configure with authselect. there is no --no-sssd option >> for the server installation >> - upgrade server >>   bakup authselect configuration. apply

[Freeipa-devel] Re: authconfig replacement design

Standa Laznicka via FreeIPA-devel wrote: > On 02/21/2018 10:17 AM, Alexander Koksharov via FreeIPA-devel wrote: >> let me put >> ​ ​ >> a >> ​ ​ >> couple of scenarious here: >> - install server >>   install it and configure with authselect. there is no --no-sssd >> option for the server

[Freeipa-devel] Re: authconfig replacement design

On 02/21/2018 10:17 AM, Alexander Koksharov via FreeIPA-devel wrote: > let me put > ​ ​ > a > ​ ​ > couple of scenarious here: > - install server >   install it and configure with authselect. there is no --no-sssd > option for the server installation > - upgrade server >   bakup authselect

[Freeipa-devel] Re: authconfig replacement design

I would like to hear more from IPA people. It is not a problem to replace authconfig related code with something else. My questions are more about what we will get after the change and whether this will be what we actually want. Alexander On Wed, Feb 21, 2018 at 10:25 AM, Pavel Březina

[Freeipa-devel] Re: authconfig replacement design

On 02/21/2018 10:17 AM, Alexander Koksharov wrote: let me put ​ ​ a ​ ​ couple of scenarious here: - install server install it and configure with authselect. there is no --no-sssd option for the server installation - upgrade server bakup authselect configuration. apply authselect sssd

[Freeipa-devel] Re: authconfig replacement design

On 02/14/2018 09:15 AM, Alexander Koksharov via FreeIPA-devel wrote: Hello, Please take a look on a design page here: https://www.freeipa.org/page/V4/Authselect_migration I would like to You will also need to write krb5.conf and ldap.conf. You can see the following man page or compat tool

[Freeipa-devel] Re: authconfig replacement design

On 02/16/2018 07:34 PM, Florence Blanc-Renaud via FreeIPA-devel wrote: On 02/14/2018 09:15 AM, Alexander Koksharov via FreeIPA-devel wrote: Hello, Please take a look on a design page here: https://www.freeipa.org/page/V4/Authselect_migration I would like to ​ ​ hear you critics and

[Freeipa-devel] Re: authconfig replacement design

On 02/15/2018 05:15 PM, Jakub Hrozek via FreeIPA-devel wrote: On Thu, Feb 15, 2018 at 11:10:16AM -0500, Rob Crittenden via FreeIPA-devel wrote: Petr Vobornik via FreeIPA-devel wrote: On Thu, Feb 15, 2018 at 4:47 PM, Jakub Hrozek via FreeIPA-devel wrote:

[Freeipa-devel] Re: authconfig replacement design

On 02/14/2018 09:15 AM, Alexander Koksharov via FreeIPA-devel wrote: Hello, Please take a look on a design page here: https://www.freeipa.org/page/V4/Authselect_migration I would like to ​ ​ hear you critics and suggessions. Thank you -- Alexander

[Freeipa-devel] Re: authconfig replacement design

On Fri, Feb 16, 2018 at 12:27 PM, Alexander Bokovoy wrote: > On pe, 16 helmi 2018, Petr Vobornik wrote: >> >> On Fri, Feb 16, 2018 at 11:25 AM, Alexander Bokovoy via FreeIPA-devel >> wrote: >>> >>> On pe, 16 helmi 2018, Alexander

[Freeipa-devel] Re: authconfig replacement design

On pe, 16 helmi 2018, Petr Vobornik wrote: On Fri, Feb 16, 2018 at 11:25 AM, Alexander Bokovoy via FreeIPA-devel wrote: On pe, 16 helmi 2018, Alexander Koksharov via FreeIPA-devel wrote: Would it be good to implement the change like this: if authconfig

[Freeipa-devel] Re: authconfig replacement design

On Fri, Feb 16, 2018 at 11:25 AM, Alexander Bokovoy via FreeIPA-devel wrote: > On pe, 16 helmi 2018, Alexander Koksharov via FreeIPA-devel wrote: >> >> Would it be good to implement the change like this: >> >> if authconfig is available then >> use current

[Freeipa-devel] Re: authconfig replacement design

On pe, 16 helmi 2018, Alexander Koksharov via FreeIPA-devel wrote: Would it be good to implement the change like this: if authconfig is available then use current flow else if authselect is available and not no-sssd then use authselect to activate sssd profile else raise Error done

[Freeipa-devel] Re: authconfig replacement design

Would it be good to implement the change like this: if authconfig is available then use current flow else if authselect is available and not no-sssd then use authselect to activate sssd profile else raise Error done done Alexander On Thu, Feb 15, 2018 at 8:49 PM, Petr

[Freeipa-devel] Re: authconfig replacement design

On Thu, Feb 15, 2018 at 6:22 PM, Alexander Bokovoy wrote: > On Thu, 15 Feb 2018, Petr Vobornik wrote: >> >> On Thu, Feb 15, 2018 at 5:52 PM, Alexander Bokovoy >> wrote: >>> >>> On Thu, 15 Feb 2018, Petr Vobornik wrote: On Thu, Feb 15, 2018

[Freeipa-devel] Re: authconfig replacement design

On Thu, 15 Feb 2018, Petr Vobornik wrote: On Thu, Feb 15, 2018 at 5:52 PM, Alexander Bokovoy wrote: On Thu, 15 Feb 2018, Petr Vobornik wrote: On Thu, Feb 15, 2018 at 5:23 PM, Jakub Hrozek via FreeIPA-devel wrote: On Thu, Feb 15,

[Freeipa-devel] Re: authconfig replacement design

On Thu, Feb 15, 2018 at 5:52 PM, Alexander Bokovoy wrote: > On Thu, 15 Feb 2018, Petr Vobornik wrote: >> >> On Thu, Feb 15, 2018 at 5:23 PM, Jakub Hrozek via FreeIPA-devel >> wrote: >>> >>> On Thu, Feb 15, 2018 at 06:17:50PM +0200,

[Freeipa-devel] Re: authconfig replacement design

On Thu, 15 Feb 2018, Petr Vobornik wrote: On Thu, Feb 15, 2018 at 5:23 PM, Jakub Hrozek via FreeIPA-devel wrote: On Thu, Feb 15, 2018 at 06:17:50PM +0200, Alexander Bokovoy wrote: On Thu, 15 Feb 2018, Jakub Hrozek via FreeIPA-devel wrote: > On Thu, Feb

[Freeipa-devel] Re: authconfig replacement design

On Thu, Feb 15, 2018 at 5:23 PM, Jakub Hrozek via FreeIPA-devel wrote: > On Thu, Feb 15, 2018 at 06:17:50PM +0200, Alexander Bokovoy wrote: >> On Thu, 15 Feb 2018, Jakub Hrozek via FreeIPA-devel wrote: >> > On Thu, Feb 15, 2018 at 04:49:23PM +0200, Alexander

[Freeipa-devel] Re: authconfig replacement design

On Thu, 15 Feb 2018, Jakub Hrozek wrote: On Thu, Feb 15, 2018 at 06:17:50PM +0200, Alexander Bokovoy wrote: On Thu, 15 Feb 2018, Jakub Hrozek via FreeIPA-devel wrote: > On Thu, Feb 15, 2018 at 04:49:23PM +0200, Alexander Bokovoy via FreeIPA-devel wrote: > > On Thu, 15 Feb 2018, Alexander

[Freeipa-devel] Re: authconfig replacement design

On Thu, Feb 15, 2018 at 06:17:50PM +0200, Alexander Bokovoy wrote: > On Thu, 15 Feb 2018, Jakub Hrozek via FreeIPA-devel wrote: > > On Thu, Feb 15, 2018 at 04:49:23PM +0200, Alexander Bokovoy via > > FreeIPA-devel wrote: > > > On Thu, 15 Feb 2018, Alexander Koksharov wrote: > > > > Hello, > > > >

[Freeipa-devel] Re: authconfig replacement design

On Thu, 15 Feb 2018, Jakub Hrozek via FreeIPA-devel wrote: On Thu, Feb 15, 2018 at 04:49:23PM +0200, Alexander Bokovoy via FreeIPA-devel wrote: On Thu, 15 Feb 2018, Alexander Koksharov wrote: > Hello, > > I would like to confirm whether we do want to completelly drop --no-sssd > option. >

[Freeipa-devel] Re: authconfig replacement design

On Thu, Feb 15, 2018 at 11:10:16AM -0500, Rob Crittenden via FreeIPA-devel wrote: > Petr Vobornik via FreeIPA-devel wrote: > > On Thu, Feb 15, 2018 at 4:47 PM, Jakub Hrozek via FreeIPA-devel > > wrote: > >> On Thu, Feb 15, 2018 at 08:57:55AM -0500, Rob

[Freeipa-devel] Re: authconfig replacement design

Petr Vobornik via FreeIPA-devel wrote: > On Thu, Feb 15, 2018 at 4:47 PM, Jakub Hrozek via FreeIPA-devel > wrote: >> On Thu, Feb 15, 2018 at 08:57:55AM -0500, Rob Crittenden via FreeIPA-devel >> wrote: >>> Alexander Koksharov via FreeIPA-devel wrote:

[Freeipa-devel] Re: authconfig replacement design

On Thu, Feb 15, 2018 at 4:47 PM, Jakub Hrozek via FreeIPA-devel wrote: > On Thu, Feb 15, 2018 at 08:57:55AM -0500, Rob Crittenden via FreeIPA-devel > wrote: >> Alexander Koksharov via FreeIPA-devel wrote: >> > Hello, >> > >> > Please take a look on a design

[Freeipa-devel] Re: authconfig replacement design

On Thu, Feb 15, 2018 at 08:57:55AM -0500, Rob Crittenden via FreeIPA-devel wrote: > Alexander Koksharov via FreeIPA-devel wrote: > > Hello, > > > > Please take a look on a design page here: > > https://www.freeipa.org/page/V4/Authselect_migration > > I would like to > > ​ ​ > > hear you critics

[Freeipa-devel] Re: authconfig replacement design

On Thu, Feb 15, 2018 at 04:49:23PM +0200, Alexander Bokovoy via FreeIPA-devel wrote: > On Thu, 15 Feb 2018, Alexander Koksharov wrote: > > Hello, > > > > I would like to confirm whether we do want to completelly drop --no-sssd > > option. > > "no-sssd" configuration is not supported by

[Freeipa-devel] Re: authconfig replacement design

On Thu, 15 Feb 2018, Alexander Koksharov wrote: Hello, I would like to confirm whether we do want to completelly drop --no-sssd option. "no-sssd" configuration is not supported by authselect - there is not such profile available. If we drop dependency on authconfig there will be a need to do

[Freeipa-devel] Re: authconfig replacement design

Alexander Koksharov via FreeIPA-devel wrote: > Hello, > > Please take a look on a design page here: > https://www.freeipa.org/page/V4/Authselect_migration > I would like to > ​ ​ > hear you critics and suggessions. On a non-technical note there are a number of spelling and grammatical errors.

[Freeipa-devel] Re: authconfig replacement design

On Wed, Feb 14, 2018 at 10:00 AM, Alexander Bokovoy via FreeIPA-devel wrote: > On ke, 14 helmi 2018, Alexander Koksharov via FreeIPA-devel wrote: >> >> Hello, >> >> Please take a look on a design page here: >>

[Freeipa-devel] Re: authconfig replacement design

On ke, 14 helmi 2018, Alexander Koksharov via FreeIPA-devel wrote: Hello, Please take a look on a design page here: https://www.freeipa.org/page/V4/Authselect_migration I would like to ​ ​ hear you critics and suggessions. Thanks! One note I have is about authconfig arguments. We gather them