Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
- Original Message - > On 12/14/2011 10:58 AM, Simo Sorce wrote: > > - Original Message - > > We can also generate the SID algorithmically from the > > uidNumber/gidNumber > Do you mean the SID of the trusted domain user? > >>> No I meant the SID of users and groups.

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Dmitri Pal
On 12/14/2011 10:58 AM, Simo Sorce wrote: > - Original Message - > We can also generate the SID algorithmically from the > uidNumber/gidNumber Do you mean the SID of the trusted domain user? >>> No I meant the SID of users and groups. >> ok, I would very much favor this approac

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
- Original Message - > > > > We can also generate the SID algorithmically from the > > > > uidNumber/gidNumber > > > > > > Do you mean the SID of the trusted domain user? > > > > No I meant the SID of users and groups. > > ok, I would very much favor this approach it will make things muc

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Sumit Bose
On Wed, Dec 14, 2011 at 08:31:57AM -0500, Simo Sorce wrote: > On Wed, 2011-12-14 at 14:12 +0100, Sumit Bose wrote: > > On Wed, Dec 14, 2011 at 07:45:53AM -0500, Simo Sorce wrote: > > > On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: > > > > On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander B

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
On Wed, 2011-12-14 at 14:12 +0100, Sumit Bose wrote: > On Wed, Dec 14, 2011 at 07:45:53AM -0500, Simo Sorce wrote: > > On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: > > > On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: > > > > On Tue, 13 Dec 2011, Simo Sorce wrote: > > > >

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Sumit Bose
On Wed, Dec 14, 2011 at 07:45:53AM -0500, Simo Sorce wrote: > On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: > > On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: > > > On Tue, 13 Dec 2011, Simo Sorce wrote: > > > > On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote:

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: > On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: > > On Tue, 13 Dec 2011, Simo Sorce wrote: > > > On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: > > > > On Mon, 12 Dec 2011, Sumit Bose wrote: > > > > > > --passwor

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Alexander Bokovoy
On Wed, 14 Dec 2011, Sumit Bose wrote: > On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: > > On Tue, 13 Dec 2011, Simo Sorce wrote: > > > On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: > > > > On Mon, 12 Dec 2011, Sumit Bose wrote: > > > > > > --password [type-spec

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Sumit Bose
On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: > On Tue, 13 Dec 2011, Simo Sorce wrote: > > On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: > > > On Mon, 12 Dec 2011, Sumit Bose wrote: > > > > > --password [type-specific parameters] > > > > > > > > > > Creates a tr

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-13 Thread Alexander Bokovoy
On Tue, 13 Dec 2011, Simo Sorce wrote: > On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: > > On Mon, 12 Dec 2011, Sumit Bose wrote: > > > > --password [type-specific parameters] > > > > > > > > Creates a trust between FreeIPA realm and another realm of selected > > > > type. Only 'ad

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-13 Thread Simo Sorce
On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: > On Mon, 12 Dec 2011, Sumit Bose wrote: > > > --password [type-specific parameters] > > > > > > Creates a trust between FreeIPA realm and another realm of selected > > > type. Only 'ads' type is currently supported. > > > > > > For 'a

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-12 Thread Alexander Bokovoy
On Mon, 12 Dec 2011, Sumit Bose wrote: > > --password [type-specific parameters] > > > > Creates a trust between FreeIPA realm and another realm of selected > > type. Only 'ads' type is currently supported. > > > > For 'ads' type running `ipa trust-add' would be equivalent to > > following seq

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-12 Thread Alexander Bokovoy
On Mon, 12 Dec 2011, Rob Crittenden wrote: > Alexander Bokovoy wrote: > >Hi, > > > >I'm working on ticket #1821 to introduce FreeIPA 3.0 AD trusts > >management CLI and GUI. It is quite apparent that most of management > >commands will be similar to all future trust types (AD, IPA, etc), > >thus, i

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-12 Thread Alexander Bokovoy
On Mon, 12 Dec 2011, Simo Sorce wrote: > > Creates a trust between FreeIPA realm and another realm of selected > > type. Only 'ads' type is currently supported. > > > > For 'ads' type running `ipa trust-add' would be equivalent to > > following sequence: > > * ipa-adtrust-install > > * net rpc

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-12 Thread Sumit Bose
On Mon, Dec 12, 2011 at 07:49:04PM +0200, Alexander Bokovoy wrote: > Hi, > > I'm working on ticket #1821 to introduce FreeIPA 3.0 AD trusts > management CLI and GUI. It is quite apparent that most of management > commands will be similar to all future trust types (AD, IPA, etc), > thus, it make

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-12 Thread Rob Crittenden
Alexander Bokovoy wrote: Hi, I'm working on ticket #1821 to introduce FreeIPA 3.0 AD trusts management CLI and GUI. It is quite apparent that most of management commands will be similar to all future trust types (AD, IPA, etc), thus, it makes sense to develop a generalized `ipa trust' family of

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-12 Thread Simo Sorce
On Mon, 2011-12-12 at 19:49 +0200, Alexander Bokovoy wrote: > Hi, > > I'm working on ticket #1821 to introduce FreeIPA 3.0 AD trusts > management CLI and GUI. It is quite apparent that most of management > commands will be similar to all future trust types (AD, IPA, etc), > thus, it makes sense

[Freeipa-devel] WIP: ipa trust command

2011-12-12 Thread Alexander Bokovoy
Hi, I'm working on ticket #1821 to introduce FreeIPA 3.0 AD trusts management CLI and GUI. It is quite apparent that most of management commands will be similar to all future trust types (AD, IPA, etc), thus, it makes sense to develop a generalized `ipa trust' family of commands that would app