Re: [Freeipa-devel] [PATCH] 93 Add custom mapping object for LDAP entry data

2013-01-22 Thread Petr Viktorin
On 01/22/2013 08:31 AM, Jan Cholasta wrote: On 21.1.2013 17:46, Petr Viktorin wrote: On 01/21/2013 04:48 PM, John Dennis wrote: On 01/16/2013 10:45 AM, Jan Cholasta wrote: Hi, this patch adds initial support for custom LDAP entry objects, as described in

Re: [Freeipa-devel] [PATCH] 93 Add custom mapping object for LDAP entry data

2013-01-22 Thread Petr Viktorin
Please ignore the last mail, I've clicked Send instead of Delete. -- PetrĀ³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [PATCH] 254 Fix BuildRequires: rhino replaced with java-1.7.0-openjdk

2013-01-22 Thread Petr Vobornik
Rhino is needed for Web UI build. Rhino needs java, but from package perspective java-1.7.0-openjdk requires rhino. So the correct BuildRequires is java-1.7.0-openjdk. -- Petr Vobornik From 8e524e6bd61c8d07c5028f2cc0f395deff1d6fed Mon Sep 17 00:00:00 2001 From: Petr Vobornik Date: Tue, 22 Jan 2

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-22 Thread Petr Spacek
On 22.1.2013 01:59, Simo Sorce wrote: Hello FreeIPA developers and other followers, Roaming/Remote clients Roaming clients or Remote clients have one big problem, although they may have a default preferred location they move across networks and the definition of 'location' and 'closest' server

[Freeipa-devel] [PATCHES] 94-96 Remove Entry and Entity classes

2013-01-22 Thread Jan Cholasta
Hi, these patches remove the Entry and Entity classes and move instantiation of LDAPEntry objects to LDAPConnection.make_entry factory method. Apply on top of Petr Viktorin's LDAP code refactoring (part 1 & 2) patches. Honza -- Jan Cholasta >From 437ed20f7a1f483f3dd20e4d80731571acddaf06 Mon

Re: [Freeipa-devel] [PATCH 0026] Prevent integer overflow when setting krbPasswordExpiration

2013-01-22 Thread Tomas Babej
On 01/17/2013 05:18 PM, Simo Sorce wrote: On Thu, 2013-01-17 at 15:29 +0100, Tomas Babej wrote: On 01/17/2013 01:56 AM, Dmitri Pal wrote: On 01/16/2013 12:32 PM, Tomas Babej wrote: On 01/16/2013 06:01 PM, Simo Sorce wrote: On Wed, 2013-01-16 at 17:57 +0100, Tomas Babej wrote: On 01/16/2013

Re: [Freeipa-devel] [PATCHES] 127-136 LDAP code refactoring (Part 2)

2013-01-22 Thread Jan Cholasta
Hi, On 21.1.2013 18:38, Petr Viktorin wrote: Here is a second batch of patches. I'm keeping them small so they're easier to digest (and rebase, should that be necessary). If you prefer big patches, just squash them. Obviously, they apply on top of the previous batch. Here we introduce a base cl

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-22 Thread Simo Sorce
On Tue, 2013-01-22 at 15:23 +0100, Petr Spacek wrote: > Creating per-server _locations sub-tree is very easy with current code: > Simply > copy&paste new bind-dyndb-ldap section to /etc/named.conf and point base DN > to > some server-specific part of LDAP tree: > > dynamic-db "ipa-local" { >

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-22 Thread Adam Tkac
On Mon, Jan 21, 2013 at 07:59:02PM -0500, Simo Sorce wrote: > Hello FreeIPA developers and other followers, > > we've have thought for quite a while about how to best implement > location based discovery for our clients so that we can easily redirect > group of clients to specific servers in order

Re: [Freeipa-devel] [PATCHES] 127-136 LDAP code refactoring (Part 2)

2013-01-22 Thread Petr Viktorin
On 01/22/2013 03:59 PM, Jan Cholasta wrote: Hi, On 21.1.2013 18:38, Petr Viktorin wrote: Here is a second batch of patches. I'm keeping them small so they're easier to digest (and rebase, should that be necessary). If you prefer big patches, just squash them. Obviously, they apply on top of the

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-22 Thread Simo Sorce
On Tue, 2013-01-22 at 16:18 +0100, Adam Tkac wrote: > Before we start talking about using DNS for this purpose, have you > considered > to use IP anycast for this? You can simply create multiple servers > with same IP > address on different places over the world. After that you announce > this IP >

Re: [Freeipa-devel] [PATCH 0026] Prevent integer overflow when setting krbPasswordExpiration

2013-01-22 Thread Simo Sorce
On Tue, 2013-01-22 at 15:50 +0100, Tomas Babej wrote: > Here I bring the updated version of the patch. Please note, that I > *added* a flag attribute to ipadb_ldap_attr_to_krb5_timestamp > function, that controls whether the timestamp will be checked for > overflow or not. The reasoning behind this

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-22 Thread Adam Tkac
On Tue, Jan 22, 2013 at 10:25:21AM -0500, Simo Sorce wrote: > On Tue, 2013-01-22 at 16:18 +0100, Adam Tkac wrote: > > Before we start talking about using DNS for this purpose, have you > > considered > > to use IP anycast for this? You can simply create multiple servers > > with same IP > > address

Re: [Freeipa-devel] [PATCH] 254 Fix BuildRequires: rhino replaced with java-1.7.0-openjdk

2013-01-22 Thread Rob Crittenden
Petr Vobornik wrote: Rhino is needed for Web UI build. Rhino needs java, but from package perspective java-1.7.0-openjdk requires rhino. So the correct BuildRequires is java-1.7.0-openjdk. ACK ___ Freeipa-devel mailing list Freeipa-devel@redhat.com h

Re: [Freeipa-devel] [PATCH] 254 Fix BuildRequires: rhino replaced with java-1.7.0-openjdk

2013-01-22 Thread Petr Vobornik
On 01/22/2013 05:02 PM, Rob Crittenden wrote: Petr Vobornik wrote: Rhino is needed for Web UI build. Rhino needs java, but from package perspective java-1.7.0-openjdk requires rhino. So the correct BuildRequires is java-1.7.0-openjdk. ACK Pushed to master. -- Petr Vobornik

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-22 Thread Simo Sorce
On Tue, 2013-01-22 at 17:02 +0100, Adam Tkac wrote: > On Tue, Jan 22, 2013 at 10:25:21AM -0500, Simo Sorce wrote: > > On Tue, 2013-01-22 at 16:18 +0100, Adam Tkac wrote: > > > Before we start talking about using DNS for this purpose, have you > > > considered > > > to use IP anycast for this? You c

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-22 Thread Petr Spacek
On 22.1.2013 16:01, Simo Sorce wrote: Replying to myself for the beginning: > On Tue, 2013-01-22 at 15:23 +0100, Petr Spacek wrote: >>> Server Implementation >>> TODO: interaction with DNSSEC >> That it *very* important part. I have fear from so many dynamic things inside. There is less dynamic

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-22 Thread Adam Tkac
On Tue, Jan 22, 2013 at 11:19:30AM -0500, Simo Sorce wrote: > On Tue, 2013-01-22 at 17:02 +0100, Adam Tkac wrote: > > On Tue, Jan 22, 2013 at 10:25:21AM -0500, Simo Sorce wrote: > > > On Tue, 2013-01-22 at 16:18 +0100, Adam Tkac wrote: > > > > Before we start talking about using DNS for this purpos

Re: [Freeipa-devel] [PATCH 0026] Prevent integer overflow when setting krbPasswordExpiration

2013-01-22 Thread Dmitri Pal
On 01/22/2013 10:57 AM, Simo Sorce wrote: > On Tue, 2013-01-22 at 15:50 +0100, Tomas Babej wrote: >> Here I bring the updated version of the patch. Please note, that I >> *added* a flag attribute to ipadb_ldap_attr_to_krb5_timestamp >> function, that controls whether the timestamp will be checked f

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-22 Thread Simo Sorce
On Tue, 2013-01-22 at 17:46 +0100, Adam Tkac wrote: > On Tue, Jan 22, 2013 at 11:19:30AM -0500, Simo Sorce wrote: > > On Tue, 2013-01-22 at 17:02 +0100, Adam Tkac wrote: > > > On Tue, Jan 22, 2013 at 10:25:21AM -0500, Simo Sorce wrote: > > > > On Tue, 2013-01-22 at 16:18 +0100, Adam Tkac wrote: > >

Re: [Freeipa-devel] A new proopsal for Location Based Discovery

2013-01-22 Thread Simo Sorce
On Tue, 2013-01-22 at 18:30 +0100, Petr Spacek wrote: > On 22.1.2013 16:01, Simo Sorce wrote: > > Replying to myself for the beginning: > > > On Tue, 2013-01-22 at 15:23 +0100, Petr Spacek wrote: > >>> Server Implementation > >>> TODO: interaction with DNSSEC > >> That it *very* important par