Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Simo Sorce
On Thu, 2015-06-25 at 23:43 +0300, Alexander Bokovoy wrote: > On Thu, 25 Jun 2015, Simo Sorce wrote: > >On Thu, 2015-06-25 at 15:19 -0400, Drew Erny wrote: > >> > >> On 06/25/2015 03:13 PM, Drew Erny wrote: > >> > > >> > > >> > On 06/25/2015 03:07 PM, Simo Sorce wrote: > >> >> On Thu, 2015-06-25 at

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Alexander Bokovoy
On Thu, 25 Jun 2015, Simo Sorce wrote: On Thu, 2015-06-25 at 15:19 -0400, Drew Erny wrote: On 06/25/2015 03:13 PM, Drew Erny wrote: > > > On 06/25/2015 03:07 PM, Simo Sorce wrote: >> On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: >>> Hi, All, >>> >>> FreeIPA's most requested feature just g

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Simo Sorce
On Thu, 2015-06-25 at 15:19 -0400, Drew Erny wrote: > > On 06/25/2015 03:13 PM, Drew Erny wrote: > > > > > > On 06/25/2015 03:07 PM, Simo Sorce wrote: > >> On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: > >>> Hi, All, > >>> > >>> FreeIPA's most requested feature just got a proposal. > >>> > >

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Drew Erny
On 06/25/2015 03:13 PM, Drew Erny wrote: On 06/25/2015 03:07 PM, Simo Sorce wrote: On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset I eagerly awa

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Drew Erny
On 06/25/2015 03:07 PM, Simo Sorce wrote: On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset I eagerly await your explanations of why this is a terrible

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Simo Sorce
On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: > Hi, All, > > FreeIPA's most requested feature just got a proposal. > > Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset > > I eagerly await your explanations of why this is a terrible idea. Well clearly it is a secu

[Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Drew Erny
Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset I eagerly await your explanations of why this is a terrible idea. Thanks, Drew Erny -- Manage your subscription for the Freeipa-devel mailing list: https:

Re: [Freeipa-devel] IPA Python API

2015-06-25 Thread Drew Erny
If I add the lines if not api.Backend.rpcclient.isconnected(): api.Backend.rpcclient.connect() before I call the api, the code works. Problem (pretty much) solved. On 06/23/2015 04:36 PM, Drew Erny wrote: Resurrecting this thread, because the problem is getting me again. If I go through

Re: [Freeipa-devel] [PATCH] Password vault

2015-06-25 Thread Endi Sukma Dewata
On 6/25/2015 12:35 AM, Jan Cholasta wrote: I think it would be better to use a new attribute type which inherits from ipaPublicKey (ipaVaultPublicKey?) rather than ipaPublicKey directly for assymetric vault public keys, so that assymetric public key and escrow public key are on the same level and

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-25 Thread Simo Sorce
On Thu, 2015-06-25 at 09:53 +0200, Petr Vobornik wrote: > On 06/25/2015 08:52 AM, Ludwig Krispenz wrote: > > > > On 06/24/2015 09:01 PM, Simo Sorce wrote: > >> On Wed, 2015-06-24 at 11:25 +0200, Ludwig Krispenz wrote: > >>> Oleg, > >>> > >>> the topology plugin relies on existing connection between

Re: [Freeipa-devel] [PATCHES 0252-0253] DNSSEC: allow to move DNSSEC key master to another IPA server

2015-06-25 Thread Petr Spacek
On 17.6.2015 13:37, Martin Basti wrote: > On 17/06/15 13:26, Petr Spacek wrote: >> On 16.6.2015 15:40, Martin Basti wrote: >>> On 05/06/15 12:54, Petr Spacek wrote: On 20.5.2015 18:00, Martin Basti wrote: > This patch allows to disable DNSSEC key master on IPA server, or replace > curr

Re: [Freeipa-devel] [PATCH] 0020..0022 pki-related upgrade fixes

2015-06-25 Thread Martin Basti
On 19/06/15 09:28, Fraser Tweedale wrote: The attached patches fix upgrade issues when pki is also updated from pre 10.2.4. pki dependency is bumped to 10.2.5 - the official builds should be done Friday (US time) but it is available from my copr[1]. If someone wants to add to official freeipa C

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-25 Thread Petr Spacek
On 25.6.2015 09:53, Petr Vobornik wrote: > On 06/25/2015 08:52 AM, Ludwig Krispenz wrote: >> >> On 06/24/2015 09:01 PM, Simo Sorce wrote: >>> On Wed, 2015-06-24 at 11:25 +0200, Ludwig Krispenz wrote: Oleg, the topology plugin relies on existing connection between servers which r

Re: [Freeipa-devel] Topology: Central node removal in star topology

2015-06-25 Thread Petr Vobornik
On 06/25/2015 08:52 AM, Ludwig Krispenz wrote: On 06/24/2015 09:01 PM, Simo Sorce wrote: On Wed, 2015-06-24 at 11:25 +0200, Ludwig Krispenz wrote: Oleg, the topology plugin relies on existing connection between servers which remain in a topolgy. If you remove a central node in your topology y

Re: [Freeipa-devel] python-kdcproxy > 0.3

2015-06-25 Thread Christian Heimes
On 2015-06-25 06:04, Martin Kosek wrote: > We need to make sure it is at least in > > https://copr.fedoraproject.org/coprs/mkosek/freeipa-4.2/builds/ > https://copr.fedoraproject.org/coprs/mkosek/freeipa-master/builds/ > > I started the COPR builds based on the F22 SRPMs. Thanks Martin! You can