Re: [Freeipa-devel] [PATCH] #3859: Better mechanism to retrieve keytabs

2013-09-23 Thread Petr Spacek
On 20.9.2013 21:35, Simo Sorce wrote: This patch set is an initial implementation of ticket #3859 It seem to be working fine in my initial testing but I have not yet tested all cases. However I wonted to throw it on the list to get some initial feedback about the choices I made wrt access

Re: [Freeipa-devel] [PATCHES] 0177-0179 Add missing dict methods to CIDict

2013-09-23 Thread Jan Cholasta
On 18.9.2013 14:00, Petr Viktorin wrote: On 09/17/2013 05:13 PM, Jan Cholasta wrote: On 20.2.2013 17:37, Petr Viktorin wrote: On 02/19/2013 01:51 PM, Jan Cholasta wrote: Hi, On 5.2.2013 18:02, Petr Viktorin wrote: CIDict, our case-insensitive dictionary, inherits from dict but did not

Re: [Freeipa-devel] [RFE] Support for automember rebuild membership

2013-09-23 Thread Martin Kosek
On 09/19/2013 03:43 PM, Ana Krivokapic wrote: On 09/19/2013 03:26 PM, Jan Cholasta wrote: Hi, On 12.9.2013 19:59, Ana Krivokapic wrote: Hello, The design document for $SUBJECT can be found at: http://www.freeipa.org/page/V3/Automember_rebuild_membership Related tickets:

Re: [Freeipa-devel] [RFC] Improve FreeIPA usability in cloud environments

2013-09-23 Thread Jan Pazdziora
On Fri, Sep 13, 2013 at 09:08:10AM -0400, Simo Sorce wrote: The natural request is to add support for DNS views/split horizon DNS into FreeIPA, so different names and IP addresses can be served to clients inside and outside of the cloud. Is it enough? What else should we change

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-23 Thread Martin Kosek
On 09/20/2013 01:59 PM, Jan Cholasta wrote: On 20.9.2013 12:55, Alexander Bokovoy wrote: 1) The object is named subdomain, but the commands are named trust_domain_*. Please use the object name as the base for command names. I would suggest renaming the object to trustdomain, as the framework

Re: [Freeipa-devel] [RFE] Support for automember rebuild membership

2013-09-23 Thread Jan Cholasta
On 23.9.2013 09:18, Martin Kosek wrote: On 09/19/2013 03:43 PM, Ana Krivokapic wrote: On 09/19/2013 03:26 PM, Jan Cholasta wrote: Hi, On 12.9.2013 19:59, Ana Krivokapic wrote: Hello, The design document for $SUBJECT can be found at:

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-23 Thread Alexander Bokovoy
On Mon, 23 Sep 2013, Martin Kosek wrote: However, we don't have trust type available so it needs to discovered every time. This doesn't play well with the framework, it is simply not expecting dynamic containers. This doesn't sound like a big obstacle to me. Right now the trust_type lookup is

Re: [Freeipa-devel] [PATCHES] 0177-0179 Add missing dict methods to CIDict

2013-09-23 Thread Petr Viktorin
On 09/23/2013 09:18 AM, Jan Cholasta wrote: On 18.9.2013 14:00, Petr Viktorin wrote: On 09/17/2013 05:13 PM, Jan Cholasta wrote: On 20.2.2013 17:37, Petr Viktorin wrote: On 02/19/2013 01:51 PM, Jan Cholasta wrote: Hi, On 5.2.2013 18:02, Petr Viktorin wrote: CIDict, our case-insensitive

Re: [Freeipa-devel] [PATCH] #3859: Better mechanism to retrieve keytabs

2013-09-23 Thread Simo Sorce
On Mon, 2013-09-23 at 09:00 +0200, Petr Spacek wrote: On 20.9.2013 21:35, Simo Sorce wrote: This patch set is an initial implementation of ticket #3859 It seem to be working fine in my initial testing but I have not yet tested all cases. However I wonted to throw it on the list to get

Re: [Freeipa-devel] [PATCH 0015] Add support for managing user auth types

2013-09-23 Thread Petr Viktorin
On 09/18/2013 09:51 PM, Nathaniel McCallum wrote: On Mon, 2013-09-09 at 15:35 +0200, Petr Viktorin wrote: On 09/05/2013 06:04 AM, Nathaniel McCallum wrote: patch attached Thanks, some comments below. Git complains about trailing whitespace in the patch, please strip it. Fixed.

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-23 Thread Alexander Bokovoy
On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Martin Kosek wrote: However, we don't have trust type available so it needs to discovered every time. This doesn't play well with the framework, it is simply not expecting dynamic containers. This doesn't sound like a big

Re: [Freeipa-devel] [RFE] Support for automember rebuild membership

2013-09-23 Thread Ana Krivokapic
On 09/23/2013 09:57 AM, Jan Cholasta wrote: On 23.9.2013 09:18, Martin Kosek wrote: On 09/19/2013 03:43 PM, Ana Krivokapic wrote: On 09/19/2013 03:26 PM, Jan Cholasta wrote: Hi, On 12.9.2013 19:59, Ana Krivokapic wrote: Hello, The design document for $SUBJECT can be found at:

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-23 Thread Alexander Bokovoy
On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Martin Kosek wrote: However, we don't have trust type available so it needs to discovered every time. This doesn't play well with the framework, it is simply not expecting dynamic

Re: [Freeipa-devel] [PATCHES] 0068-0070 Automember rebuild membership

2013-09-23 Thread Ana Krivokapic
On 09/19/2013 03:29 PM, Ana Krivokapic wrote: Hello, This patch set adds automember rebuild membership functionality to IPA CLI. Design: http://www.freeipa.org/page/V3/Automember_rebuild_membership Ticket: https://fedorahosted.org/freeipa/ticket/3752

[Freeipa-devel] [PATCH] follow up to #3859

2013-09-23 Thread Simo Sorce
Additional patch to add -r option to ipa-getkeytab man page. Simo. -- Simo Sorce * Red Hat, Inc * New York From 58ed9fd7023f2fb2ad0d293dbfdc228c83b2fa41 Mon Sep 17 00:00:00 2001 From: Simo Sorce s...@redhat.com Date: Mon, 23 Sep 2013 15:48:58 -0400 Subject: [PATCH] man: Add -r option to