[Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Oleg Fayans
Hi Ludwig, I see some contradictions in the way the segment modification cli is implemented: 1. $ ipa help topologysegment-mod Usage: ipa [global-options] topologysegment-mod TOPOLOGYSUFFIX NAME [options] $ ipa topologysegment-mod realm 127-to-244 --setattr=Segment name=test ipa: ERROR:

Re: [Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Petr Vobornik
On 06/24/2015 12:19 PM, Oleg Fayans wrote: Hi Ludwig, I see some contradictions in the way the segment modification cli is implemented: 1. $ ipa help topologysegment-mod Usage: ipa [global-options] topologysegment-mod TOPOLOGYSUFFIX NAME [options] $ ipa topologysegment-mod realm 127-to-244

Re: [Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Oleg Fayans
On 06/24/2015 02:25 PM, Ludwig Krispenz wrote: On 06/24/2015 01:59 PM, Oleg Fayans wrote: Hi Petr, Thanks for clarification! It seems though, that all possible attributes are already mapped to the topologysegment-mod options: [13:42:45]ofayans@vm-244:~]$ ipa show-mappings

Re: [Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Oleg Fayans
Hi Petr, Thanks for clarification! It seems though, that all possible attributes are already mapped to the topologysegment-mod options: [13:42:45]ofayans@vm-244:~]$ ipa show-mappings topologysegment-mod Parameter : LDAP attribute = : == stripattrs :

Re: [Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Ludwig Krispenz
On 06/24/2015 01:59 PM, Oleg Fayans wrote: Hi Petr, Thanks for clarification! It seems though, that all possible attributes are already mapped to the topologysegment-mod options: [13:42:45]ofayans@vm-244:~]$ ipa show-mappings topologysegment-mod Parameter : LDAP attribute =

Re: [Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Ludwig Krispenz
On 06/24/2015 02:30 PM, Oleg Fayans wrote: On 06/24/2015 02:25 PM, Ludwig Krispenz wrote: On 06/24/2015 01:59 PM, Oleg Fayans wrote: Hi Petr, Thanks for clarification! It seems though, that all possible attributes are already mapped to the topologysegment-mod options:

Re: [Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Ludwig Krispenz
On 06/24/2015 04:19 PM, Oleg Fayans wrote: On 06/24/2015 02:35 PM, Ludwig Krispenz wrote: On 06/24/2015 02:30 PM, Oleg Fayans wrote: On 06/24/2015 02:25 PM, Ludwig Krispenz wrote: On 06/24/2015 01:59 PM, Oleg Fayans wrote: Hi Petr, Thanks for clarification! It seems though, that all

Re: [Freeipa-devel] topologysegment-mod question

2015-06-24 Thread Oleg Fayans
On 06/24/2015 02:35 PM, Ludwig Krispenz wrote: On 06/24/2015 02:30 PM, Oleg Fayans wrote: On 06/24/2015 02:25 PM, Ludwig Krispenz wrote: On 06/24/2015 01:59 PM, Oleg Fayans wrote: Hi Petr, Thanks for clarification! It seems though, that all possible attributes are already mapped to

[Freeipa-devel] topologysegment-mod question

2015-06-22 Thread Oleg Fayans
Hi Ludwig, Could you please clarify how should `ipa topologysegment-mod --enabled=off` work? My initial understanding was that it disables any changes to go through the disabled segment, but as it turns out, it does let the topology-related info through, and filters out all the rest. What I

Re: [Freeipa-devel] topologysegment-mod question

2015-06-22 Thread Ludwig Krispenz
Hi Oleg, On 06/22/2015 02:49 PM, Oleg Fayans wrote: Hi Ludwig, Could you please clarify how should `ipa topologysegment-mod --enabled=off` work? My initial understanding was that it disables any changes to go through the disabled segment, but as it turns out, it does let the topology-related