Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-06-03 Thread Jan Cholasta
Dne 3.6.2015 v 11:34 Martin Basti napsal(a): On 02/06/15 22:51, Rob Crittenden wrote: Martin Basti wrote: On 31/05/15 04:07, Rob Crittenden wrote: Petr Vobornik wrote: On 05/27/2015 08:17 PM, Martin Basti wrote: On 27/05/15 19:27, Rob Crittenden wrote: Martin Basti wrote: Thank you. I

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-06-02 Thread Rob Crittenden
Martin Basti wrote: On 31/05/15 04:07, Rob Crittenden wrote: Petr Vobornik wrote: On 05/27/2015 08:17 PM, Martin Basti wrote: On 27/05/15 19:27, Rob Crittenden wrote: Martin Basti wrote: Thank you. I haven't finished review yet, but I have few notes in case you will modify the patch.

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-06-02 Thread Martin Basti
On 31/05/15 04:07, Rob Crittenden wrote: Petr Vobornik wrote: On 05/27/2015 08:17 PM, Martin Basti wrote: On 27/05/15 19:27, Rob Crittenden wrote: Martin Basti wrote: Thank you. I haven't finished review yet, but I have few notes in case you will modify the patch. Please fix following

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-30 Thread Rob Crittenden
Petr Vobornik wrote: On 05/27/2015 08:17 PM, Martin Basti wrote: On 27/05/15 19:27, Rob Crittenden wrote: Martin Basti wrote: Thank you. I haven't finished review yet, but I have few notes in case you will modify the patch. Please fix following issues: 3) There are many PEP8 errors,

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-28 Thread Petr Vobornik
On 05/27/2015 08:17 PM, Martin Basti wrote: On 27/05/15 19:27, Rob Crittenden wrote: Martin Basti wrote: Thank you. I haven't finished review yet, but I have few notes in case you will modify the patch. Please fix following issues: 3) There are many PEP8 errors, can you fix some of

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-28 Thread Jan Cholasta
Dne 27.5.2015 v 19:38 Rob Crittenden napsal(a): Petr Vobornik wrote: On 05/27/2015 05:46 PM, Alexander Bokovoy wrote: On Wed, 27 May 2015, Rob Crittenden wrote: Petr Vobornik wrote: On 05/20/2015 06:02 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-27 Thread Martin Basti
On 27/05/15 19:27, Rob Crittenden wrote: Martin Basti wrote: On 20/05/15 18:02, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP service to obtain an ldap service ticket on behalf of the user. This

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-27 Thread Alexander Bokovoy
On Wed, 27 May 2015, Rob Crittenden wrote: Petr Vobornik wrote: On 05/20/2015 06:02 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP service to obtain an ldap service ticket on behalf of the user.

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-27 Thread Rob Crittenden
Petr Vobornik wrote: On 05/20/2015 06:02 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP service to obtain an ldap service ticket on behalf of the user. This does not include impersonation

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-27 Thread Petr Vobornik
On 05/20/2015 06:02 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP service to obtain an ldap service ticket on behalf of the user. This does not include impersonation targets, so one cannot yet

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-27 Thread Petr Vobornik
On 05/27/2015 05:46 PM, Alexander Bokovoy wrote: On Wed, 27 May 2015, Rob Crittenden wrote: Petr Vobornik wrote: On 05/20/2015 06:02 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP service to

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-27 Thread Rob Crittenden
Petr Vobornik wrote: On 05/27/2015 05:46 PM, Alexander Bokovoy wrote: On Wed, 27 May 2015, Rob Crittenden wrote: Petr Vobornik wrote: On 05/20/2015 06:02 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-27 Thread Martin Basti
On 20/05/15 18:02, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP service to obtain an ldap service ticket on behalf of the user. This does not include impersonation targets, so one cannot yet limit

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-27 Thread Rob Crittenden
Martin Basti wrote: On 20/05/15 18:02, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP service to obtain an ldap service ticket on behalf of the user. This does not include impersonation targets, so

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-27 Thread Simo Sorce
On Wed, 2015-05-27 at 18:46 +0300, Alexander Bokovoy wrote: On Wed, 27 May 2015, Rob Crittenden wrote: Petr Vobornik wrote: On 05/20/2015 06:02 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-26 Thread Martin Kosek
On 05/20/2015 06:02 PM, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP service to obtain an ldap service ticket on behalf of the user. This does not include impersonation targets, so one cannot yet

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-20 Thread Rob Crittenden
Rob Crittenden wrote: Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP service to obtain an ldap service ticket on behalf of the user. This does not include impersonation targets, so one cannot yet limit by user what tickets can be obtained.

[Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-19 Thread Rob Crittenden
Add a plugin to manage service delegations, like the one allowing the HTTP service to obtain an ldap service ticket on behalf of the user. This does not include impersonation targets, so one cannot yet limit by user what tickets can be obtained. There is also no referential integrity for the

Re: [Freeipa-devel] [PATCH] 1112 Add service constraint delegation plugin

2015-05-19 Thread Rob Crittenden
Rob Crittenden wrote: Add a plugin to manage service delegations, like the one allowing the HTTP service to obtain an ldap service ticket on behalf of the user. This does not include impersonation targets, so one cannot yet limit by user what tickets can be obtained. There is also no