Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Sumit Bose
On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: On Tue, 13 Dec 2011, Simo Sorce wrote: On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: On Mon, 12 Dec 2011, Sumit Bose wrote: --password Value [type-specific parameters] Creates a trust between

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Jan Cholasta
Dne 14.12.2011 07:53, Martin Kosek napsal(a): On Fri, 2011-12-09 at 15:55 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-12-01 at 17:18 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Mon, 2011-11-28 at 17:35 +0100, Martin Kosek wrote: I have prepared a working prototype

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Alexander Bokovoy
On Wed, 14 Dec 2011, Sumit Bose wrote: On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: On Tue, 13 Dec 2011, Simo Sorce wrote: On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: On Mon, 12 Dec 2011, Sumit Bose wrote: --password Value [type-specific

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: On Tue, 13 Dec 2011, Simo Sorce wrote: On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: On Mon, 12 Dec 2011, Sumit Bose wrote: --password Value

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Sumit Bose
On Wed, Dec 14, 2011 at 07:45:53AM -0500, Simo Sorce wrote: On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: On Tue, 13 Dec 2011, Simo Sorce wrote: On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: On

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
On Wed, 2011-12-14 at 14:12 +0100, Sumit Bose wrote: On Wed, Dec 14, 2011 at 07:45:53AM -0500, Simo Sorce wrote: On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: On Tue, 13 Dec 2011, Simo Sorce wrote: On Mon,

Re: [Freeipa-devel] [PATCH] 918, 919 update sudo schema

2011-12-14 Thread Rob Crittenden
Jan Cholasta wrote: Dne 14.12.2011 05:20, Rob Crittenden napsal(a): The sudo schema now defines sudoOrder, sudoNotBefore and sudoNotAfter but these weren't available in the sudorule plugin. I've added support for these. sudoOrder enforces uniqueness because duplicates are undefined. I also

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Sumit Bose
On Wed, Dec 14, 2011 at 08:31:57AM -0500, Simo Sorce wrote: On Wed, 2011-12-14 at 14:12 +0100, Sumit Bose wrote: On Wed, Dec 14, 2011 at 07:45:53AM -0500, Simo Sorce wrote: On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy

Re: [Freeipa-devel] [PATCH] 918, 919 update sudo schema

2011-12-14 Thread Jan Cholasta
Dne 14.12.2011 15:23, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 14.12.2011 05:20, Rob Crittenden napsal(a): The sudo schema now defines sudoOrder, sudoNotBefore and sudoNotAfter but these weren't available in the sudorule plugin. I've added support for these. sudoOrder enforces

Re: [Freeipa-devel] [PATCH] 918, 919 update sudo schema

2011-12-14 Thread Rob Crittenden
Jan Cholasta wrote: Dne 14.12.2011 15:23, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 14.12.2011 05:20, Rob Crittenden napsal(a): The sudo schema now defines sudoOrder, sudoNotBefore and sudoNotAfter but these weren't available in the sudorule plugin. I've added support for these.

Re: [Freeipa-devel] [PATCH] 056 Added facet tabs coloring

2011-12-14 Thread Endi Sukma Dewata
On 12/13/2011 3:49 AM, Petr Vobornik wrote: 1. The original code uses different background images for active/inactive tabs. I think the mockup in the ticket is also showing different backgrounds. The new code uses the same background. Fixed, using the background from mockup - but honestly I

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
- Original Message - We can also generate the SID algorithmically from the uidNumber/gidNumber Do you mean the SID of the trusted domain user? No I meant the SID of users and groups. ok, I would very much favor this approach it will make things much easier. But iirc

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Endi Sukma Dewata
On 12/14/2011 12:53 AM, Martin Kosek wrote: I found this works ok and adding records is definitely clearer but it seems odd to add with one command and delete/find with another. I could get used to it I suppose. Hm, we could add dnsrecord-rr-del ZONE RECORD VALUE command, but this would

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Dmitri Pal
On 12/14/2011 01:43 PM, Endi Sukma Dewata wrote: On 12/14/2011 12:53 AM, Martin Kosek wrote: I found this works ok and adding records is definitely clearer but it seems odd to add with one command and delete/find with another. I could get used to it I suppose. Hm, we could add

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Dmitri Pal
On 12/14/2011 10:58 AM, Simo Sorce wrote: - Original Message - We can also generate the SID algorithmically from the uidNumber/gidNumber Do you mean the SID of the trusted domain user? No I meant the SID of users and groups. ok, I would very much favor this approach it will make

Re: [Freeipa-devel] [PATCH] s4u2proxy support

2011-12-14 Thread Rob Crittenden
Dmitri Pal wrote: On 12/12/2011 07:15 PM, Simo Sorce wrote: On Mon, 2011-12-12 at 15:22 -0500, Rob Crittenden wrote: This patch adds support for s4u2proxy. This means that the Apache server will obtain the ldap service ticket on behalf of the user rather than the using having to send their

Re: [Freeipa-devel] [PATCH] s4u2proxy support

2011-12-14 Thread Alexander Bokovoy
On Wed, 14 Dec 2011, Rob Crittenden wrote: Dmitri Pal wrote: On 12/12/2011 07:15 PM, Simo Sorce wrote: On Mon, 2011-12-12 at 15:22 -0500, Rob Crittenden wrote: This patch adds support for s4u2proxy. This means that the Apache server will obtain the ldap service ticket on behalf of the user

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
- Original Message - On 12/14/2011 10:58 AM, Simo Sorce wrote: - Original Message - We can also generate the SID algorithmically from the uidNumber/gidNumber Do you mean the SID of the trusted domain user? No I meant the SID of users and groups. ok, I would very much

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Simo Sorce
- Original Message - On 12/14/2011 01:43 PM, Endi Sukma Dewata wrote: On 12/14/2011 12:53 AM, Martin Kosek wrote: I found this works ok and adding records is definitely clearer but it seems odd to add with one command and delete/find with another. I could get used to it I

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Dmitri Pal
On 12/14/2011 03:02 PM, Simo Sorce wrote: - Original Message - On 12/14/2011 01:43 PM, Endi Sukma Dewata wrote: On 12/14/2011 12:53 AM, Martin Kosek wrote: I found this works ok and adding records is definitely clearer but it seems odd to add with one command and delete/find with

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Martin Kosek
On Wed, 2011-12-14 at 12:43 -0600, Endi Sukma Dewata wrote: On 12/14/2011 12:53 AM, Martin Kosek wrote: I found this works ok and adding records is definitely clearer but it seems odd to add with one command and delete/find with another. I could get used to it I suppose. Hm, we could

[Freeipa-devel] [PATCH 59] Modify spec file to add ipa_memcached service Install , control ipa_memcached instance

2011-12-14 Thread John Dennis
This patch adds an ipa memcached service, it does the following: * adds SysV initscript for ipa_memcached * adds systemd service file for ipa_memcached * adds tmpfiles.d configuration file for /var/run/ipa_memcached * adds configuration file for ipa_memcached * adds memcacheinstance.py file

[Freeipa-devel] Optionistic approach for new DNS API

2011-12-14 Thread Martin Kosek
Hello all, we just had a good discussion with Rob and Endi about different approach to the new DNS API. Current DNS API proposal (patches 174-176) introduced new API based on different commands, e.g. for MX RR type: ipa dnsrecord-mx-add ZONE NAME --preference=0 --exchanger=server1.example.com.

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Martin Kosek
On Wed, 2011-12-14 at 15:31 -0500, Dmitri Pal wrote: The whole point of this work to decompose things and make them simpler. One command with dozens of options is much harder to use. I stand on my own point but we should ask community. Lets see what the community would say about the API