[Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Tomas Babej
Hi, Provides a pluggable framework for generating configuration scriptlets and instructions for various machine setups. Creates a new ipa-client-advise command, available to root user on the IPA server. Also provides an example configuration plugin.

Re: [Freeipa-devel] [PATCH] 0033 Fail when adding a trust with a different range

2013-06-19 Thread Tomas Babej
On 06/13/2013 12:17 PM, Ana Krivokapic wrote: On 06/12/2013 12:14 PM, Martin Kosek wrote: On 06/12/2013 11:40 AM, Tomas Babej wrote: On 06/12/2013 10:23 AM, Alexander Bokovoy wrote: On Mon, 10 Jun 2013, Ana Krivokapic wrote: And once here(added by your patch): +if not

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Alexander Bokovoy
On Wed, 19 Jun 2013, Tomas Babej wrote: Hi, Provides a pluggable framework for generating configuration scriptlets and instructions for various machine setups. Creates a new ipa-client-advise command, available to root user on the IPA server. Also provides an example configuration plugin.

Re: [Freeipa-devel] [PATCH 0070] Remove hardcoded values from idrange plugin tests

2013-06-19 Thread Tomas Babej
On 06/11/2013 01:15 PM, Tomas Babej wrote: On 06/11/2013 12:59 PM, Alexander Bokovoy wrote: On Tue, 11 Jun 2013, Tomas Babej wrote: On 06/10/2013 01:13 PM, Tomas Babej wrote: Hi, Hardcoded values for range parameters such as base RID or range size could be the reason the tests produced

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Jan Cholasta
Hi, On 19.6.2013 09:48, Tomas Babej wrote: Hi, Provides a pluggable framework for generating configuration scriptlets and instructions for various machine setups. Creates a new ipa-client-advise command, available to root user on the IPA server. Also provides an example configuration plugin.

Re: [Freeipa-devel] [PATCH] 412 Remove entitlement support

2013-06-19 Thread Petr Vobornik
On 06/19/2013 10:13 AM, Martin Kosek wrote: Entitlements code was not tested nor supported upstream since version 3.0. Remove the associated code. https://fedorahosted.org/freeipa/ticket/3739 As agreed on Triage meeting, I plan to push this patch to ipa-3-2 and master branches. Martin

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Petr Spacek
On 19.6.2013 09:48, Tomas Babej wrote: Hi, Provides a pluggable framework for generating configuration scriptlets and instructions for various machine setups. Creates a new ipa-client-advise command, available to root user on the IPA server. Also provides an example configuration plugin.

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Tomas Babej
On 06/19/2013 01:31 PM, Petr Spacek wrote: On 19.6.2013 09:48, Tomas Babej wrote: Hi, Provides a pluggable framework for generating configuration scriptlets and instructions for various machine setups. Creates a new ipa-client-advise command, available to root user on the IPA server. Also

Re: [Freeipa-devel] [PATCH 0070] Remove hardcoded values from idrange plugin tests

2013-06-19 Thread Alexander Bokovoy
On Wed, 19 Jun 2013, Tomas Babej wrote: On 06/11/2013 01:15 PM, Tomas Babej wrote: On 06/11/2013 12:59 PM, Alexander Bokovoy wrote: On Tue, 11 Jun 2013, Tomas Babej wrote: On 06/10/2013 01:13 PM, Tomas Babej wrote: Hi, Hardcoded values for range parameters such as base RID or range size

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Dmitri Pal
On 06/19/2013 08:02 AM, Tomas Babej wrote: On 06/19/2013 01:31 PM, Petr Spacek wrote: On 19.6.2013 09:48, Tomas Babej wrote: Hi, Provides a pluggable framework for generating configuration scriptlets and instructions for various machine setups. Creates a new ipa-client-advise command,

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Jan Cholasta
On 19.6.2013 14:47, Dmitri Pal wrote: On 06/19/2013 08:02 AM, Tomas Babej wrote: Do you have something particular in mind? Tomas ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0070] Remove hardcoded values from idrange plugin tests

2013-06-19 Thread Tomas Babej
On 06/19/2013 02:36 PM, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Tomas Babej wrote: On 06/11/2013 01:15 PM, Tomas Babej wrote: On 06/11/2013 12:59 PM, Alexander Bokovoy wrote: On Tue, 11 Jun 2013, Tomas Babej wrote: On 06/10/2013 01:13 PM, Tomas Babej wrote: Hi, Hardcoded values for

Re: [Freeipa-devel] [PATCH 0070] Remove hardcoded values from idrange plugin tests

2013-06-19 Thread Alexander Bokovoy
On Wed, 19 Jun 2013, Tomas Babej wrote: On Wed 19 Jun 2013 02:36:16 PM CEST, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Tomas Babej wrote: On 06/11/2013 01:15 PM, Tomas Babej wrote: On 06/11/2013 12:59 PM, Alexander Bokovoy wrote: On Tue, 11 Jun 2013, Tomas Babej wrote: On 06/10/2013

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Alexander Bokovoy
On Wed, 19 Jun 2013, Jan Cholasta wrote: On 19.6.2013 14:47, Dmitri Pal wrote: On 06/19/2013 08:02 AM, Tomas Babej wrote: Do you have something particular in mind? Tomas ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH 0070] Remove hardcoded values from idrange plugin tests

2013-06-19 Thread Martin Kosek
On 06/19/2013 03:12 PM, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Tomas Babej wrote: On Wed 19 Jun 2013 02:36:16 PM CEST, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Tomas Babej wrote: On 06/11/2013 01:15 PM, Tomas Babej wrote: On 06/11/2013 12:59 PM, Alexander Bokovoy wrote: On Tue,

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Tomas Babej
On 06/19/2013 03:03 PM, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Jan Cholasta wrote: On 19.6.2013 14:47, Dmitri Pal wrote: On 06/19/2013 08:02 AM, Tomas Babej wrote: Do you have something particular in mind? Tomas ___ Freeipa-devel mailing

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Martin Kosek
On 06/19/2013 03:03 PM, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Jan Cholasta wrote: On 19.6.2013 14:47, Dmitri Pal wrote: On 06/19/2013 08:02 AM, Tomas Babej wrote: Do you have something particular in mind? Tomas ___ Freeipa-devel mailing

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Jan Cholasta
On 19.6.2013 16:09, Tomas Babej wrote: On 06/19/2013 03:03 PM, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Jan Cholasta wrote: On 19.6.2013 14:47, Dmitri Pal wrote: On 06/19/2013 08:02 AM, Tomas Babej wrote: Do you have something particular in mind? Tomas

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Simo Sorce
- Original Message - On 06/19/2013 03:03 PM, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Jan Cholasta wrote: On 19.6.2013 14:47, Dmitri Pal wrote: On 06/19/2013 08:02 AM, Tomas Babej wrote: Do you have something particular in mind? Tomas

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Dmitri Pal
On 06/19/2013 10:46 AM, Simo Sorce wrote: - Original Message - On 06/19/2013 03:03 PM, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Jan Cholasta wrote: On 19.6.2013 14:47, Dmitri Pal wrote: On 06/19/2013 08:02 AM, Tomas Babej wrote: Do you have something particular in mind? Tomas

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Tomas Babej
On 06/19/2013 06:13 PM, Dmitri Pal wrote: On 06/19/2013 10:46 AM, Simo Sorce wrote: - Original Message - On 06/19/2013 03:03 PM, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Jan Cholasta wrote: On 19.6.2013 14:47, Dmitri Pal wrote: On 06/19/2013 08:02 AM, Tomas Babej wrote: Do you

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Dmitri Pal
On 06/19/2013 12:18 PM, Tomas Babej wrote: On 06/19/2013 06:13 PM, Dmitri Pal wrote: On 06/19/2013 10:46 AM, Simo Sorce wrote: - Original Message - On 06/19/2013 03:03 PM, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Jan Cholasta wrote: On 19.6.2013 14:47, Dmitri Pal wrote: On

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Tomas Babej
On 06/19/2013 06:19 PM, Dmitri Pal wrote: On 06/19/2013 12:18 PM, Tomas Babej wrote: On 06/19/2013 06:13 PM, Dmitri Pal wrote: On 06/19/2013 10:46 AM, Simo Sorce wrote: - Original Message - On 06/19/2013 03:03 PM, Alexander Bokovoy wrote: On Wed, 19 Jun 2013, Jan Cholasta wrote: On

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Alexander Bokovoy
(please trim conversations) On Wed, 19 Jun 2013, Tomas Babej wrote: So if I want an advise about Solaris 11 client configuration would it look like this? ipa-advise config --client --distro=solaris --version=11 or ipa-advise client-config-solrais-11 The latter. Tomas My point is that

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Dmitri Pal
On 06/19/2013 12:29 PM, Tomas Babej wrote: On 06/19/2013 06:19 PM, Dmitri Pal wrote: On 06/19/2013 12:18 PM, Tomas Babej wrote: On 06/19/2013 06:13 PM, Dmitri Pal wrote: On 06/19/2013 10:46 AM, Simo Sorce wrote: - Original Message - On 06/19/2013 03:03 PM, Alexander Bokovoy wrote:

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Dmitri Pal
On 06/19/2013 12:46 PM, Alexander Bokovoy wrote: (please trim conversations) On Wed, 19 Jun 2013, Tomas Babej wrote: So if I want an advise about Solaris 11 client configuration would it look like this? ipa-advise config --client --distro=solaris --version=11 or ipa-advise

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Alexander Bokovoy
On Wed, 19 Jun 2013, Dmitri Pal wrote: On 06/19/2013 12:46 PM, Alexander Bokovoy wrote: (please trim conversations) On Wed, 19 Jun 2013, Tomas Babej wrote: So if I want an advise about Solaris 11 client configuration would it look like this? ipa-advise config --client --distro=solaris

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Tomas Babej
[big snip] Providing new version which should address mentioned issues: - advice plugins now inherit directly from Plugin, initial approach via Method class was abandoned - new Namespace api.Advice collects all the advice plugins - tool renamed to ipa-advise to express a more general use

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Tomas Babej
On 06/19/2013 08:30 PM, Rob Crittenden wrote: Tomas Babej wrote: [big snip] Providing new version which should address mentioned issues: - advice plugins now inherit directly from Plugin, initial approach via Method class was abandoned - new Namespace api.Advice collects all the advice

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Alexander Bokovoy
On Wed, 19 Jun 2013, Rob Crittenden wrote: Tomas Babej wrote: [big snip] Providing new version which should address mentioned issues: - advice plugins now inherit directly from Plugin, initial approach via Method class was abandoned - new Namespace api.Advice collects all the advice

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Alexander Bokovoy
On Wed, 19 Jun 2013, Tomas Babej wrote: [big snip] Providing new version which should address mentioned issues: - advice plugins now inherit directly from Plugin, initial approach via Method class was abandoned - new Namespace api.Advice collects all the advice plugins - tool renamed to

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Tomas Babej
[snip] Here's a little preview: [tbabej@vm-001 ~]$ sudo ipa-advise fedora-authconfig Authconfig instructions for configuring Fedora 18/19 client with IPA server without use of SSSD.

Re: [Freeipa-devel] [PATCH 0072] Provide ipa-client-advise tool

2013-06-19 Thread Alexander Bokovoy
On Wed, 19 Jun 2013, Tomas Babej wrote: [snip] Here's a little preview: [tbabej@vm-001 ~]$ sudo ipa-advise fedora-authconfig Authconfig instructions for configuring Fedora 18/19 client with IPA

[Freeipa-devel] IPA to IPA trusts

2013-06-19 Thread Dmitri Pal
Hello, I have a stupid idea. We now have ability to make IPA trust AD and AD trust IPA. IPA pretends that it is AD. I wonder how hard it would be to setup the case when there are two IPA servers that both pretending that they are AD talking to each other. This might be a temp solution for IPA to

Re: [Freeipa-devel] IPA to IPA trusts

2013-06-19 Thread Alexander Bokovoy
On Thu, 20 Jun 2013, Dmitri Pal wrote: Hello, I have a stupid idea. We now have ability to make IPA trust AD and AD trust IPA. IPA pretends that it is AD. I wonder how hard it would be to setup the case when there are two IPA servers that both pretending that they are AD talking to each other.