Re: [Freeipa-devel] Ubuntu interests in FreeIPA

2009-07-22 Thread Dmitri Pal
Mathias Gug wrote: On Wed, Jul 22, 2009 at 04:44:49PM -0400, Dmitri Pal wrote: Looking at freeipa-1.2.1/ipa-server/ipa-slapi-plugins/, there are 4 plugins: * dna: Distributed Numeric Assignment plug-in I don't know of an openldap plugin providing the same functionality. However one

[Freeipa-devel] [PATCH] Missing ELAPI patch

2009-07-23 Thread Dmitri Pal
This is a missing patch. It just corrects some basic naming and adds offset property to the template. The patches: INI-Simple-fix-to-properly-process-multi-value-confi.patch ELAPI-Next-round-of-functionality-logging-part-of.patch should be applied on top of it. -- Thank you, Dmitri Pal

Re: [Freeipa-devel] [PATCH] initial commit of log watcher (lwatch)

2009-07-24 Thread Dmitri Pal
of the three things. ELAPI should eventually become our logging api, it can be used for debugging too so it will cover these two. But tracing should be very low level and very simple conditionally compiled printout statements that would allow tracing the ELAPI itself. -- Thank you, Dmitri Pal

Re: [Freeipa-devel] Proposed modification to C coding standard

2009-07-24 Thread Dmitri Pal
in the standard :) +1 -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https

Re: [Freeipa-devel] contribution policy update, what's next

2009-09-01 Thread Dmitri Pal
be linked to the Directory Server without any exception. Simo. I think what Rich said means that DS plugins can be licensed as we think appropriate without any special exception for DS itself. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] contribution policy update, what's next

2009-09-01 Thread Dmitri Pal
Simo Sorce wrote: On Tue, 2009-09-01 at 08:14 -0400, Dmitri Pal wrote: I think what Rich said means that DS plugins can be licensed as we think appropriate without any special exception for DS itself. No, I a don't think so, but I'll let Rich comment on that. In any case

Re: [Freeipa-devel] wehjit - a Python web-widget library

2009-09-04 Thread Dmitri Pal
@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel Congratulations Jason! Log hours for many days... -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] [PATCH] jderose 017 Giant WebUI patch part 1

2009-09-08 Thread Dmitri Pal
? ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve

[Freeipa-devel] IPA license

2009-09-15 Thread Dmitri Pal
Hello, We are considering to release freeIPA v2 under a less restrictive license than we used in IPA v1. It was GPLv2 only in v1.x and we think about GPLv2 and later or GPLv3 and later. Please respond to this mail if there are any suggestions, comments or concerns. -- Thank you, Dmitri Pal

Re: [Freeipa-devel] Re: [Freeipa-users] IPA license

2009-09-15 Thread Dmitri Pal
Andrea Modesto Rossi wrote: On Mar, 15 Settembre 2009 9:55 pm, Dmitri Pal wrote: We are considering to release freeIPA v2 under a less restrictive license than we used in IPA v1. It was GPLv2 only in v1.x and we think about GPLv2 and later or GPLv3 and later. Please respond to this mail

Re: [Freeipa-devel] validating return values in XML-RPC

2009-10-07 Thread Dmitri Pal
does not address the issue of return value validation, but it does remove the single most common error we have with return values at the moment. DO IT! :-) -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs

Re: [Freeipa-devel] access control for cert generation

2009-10-21 Thread Dmitri Pal
Rob Crittenden wrote: Dmitri Pal wrote: Rob Crittenden wrote: I touched on this a little in IRC, figured I'd move it to the list for a fuller conversation. I'm in the process of adding access controls to machines requesting certificates for themselves. Let me first show what happens when

Re: [Freeipa-devel] validating return values in XML-RPC

2009-10-23 Thread Dmitri Pal
/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https

[Freeipa-devel] Announcing FreeIPA v2 Server Alpha 1 Release

2009-10-28 Thread Dmitri Pal
/Downloads/ [2] http://www.freeipa.org/page/IPAv2_development_status#Documentation [3] http://freeipa.org/docs/1.2/Client_Setup_Guide/en-US/html/ [4] https://fedorahosted.org/sssd/ [5] http://www.freeipa.org/page/DocumentationPortal -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat

Re: [Freeipa-devel] [PATCH] Add DS to IPA migration plugin and password migration page.

2009-10-30 Thread Dmitri Pal
___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com

Re: [Freeipa-devel] [PATCH] Add DS to IPA migration plugin and password migration page.

2009-10-30 Thread Dmitri Pal
Simo Sorce wrote: On Fri, 2009-10-30 at 16:25 -0400, Dmitri Pal wrote: Simo Sorce wrote: On Fri, 2009-10-30 at 15:57 -0400, Rob Crittenden wrote: The message is not configurable, it just says that something is trying to modify your user preferences

Re: [Freeipa-devel] [PATCH] Add DS to IPA migration plugin and password migration page.

2009-10-30 Thread Dmitri Pal
Rob Crittenden wrote: Dmitri Pal wrote: Simo Sorce wrote: On Fri, 2009-10-30 at 15:56 -0400, Dmitri Pal wrote: But then you have to update it on all replicas and will definitely forget to do it. Is it really a hassle to have it in the DS? Yes it means you have to build a UI

Re: [Freeipa-devel] GeneralizedTime v.s datetime.datetime in XMLRPC

2009-11-04 Thread Dmitri Pal
a convention that all date/time information is exchanged in UTC (effectively the same thing as omitting timezone information, if that's what you meant). datetime.datetime handles UTC trivially. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] Re: Certificate enrollment, principal names

2009-11-04 Thread Dmitri Pal
@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing

Re: [Freeipa-devel] Re: Certificate enrollment, principal names

2009-11-05 Thread Dmitri Pal
bar, host foo will be denied regardless of the way it asked via CSR or not. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] Re: Certificate enrollment, principal names

2009-11-05 Thread Dmitri Pal
. I think Rob figured out how to factor this into the aci validation and the code to do it already there. Rob? -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

[Freeipa-devel] DNS schema

2009-11-05 Thread Dmitri Pal
. Ideas? -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com

Re: [Freeipa-devel] DNS schema

2009-11-05 Thread Dmitri Pal
Simo Sorce wrote: On Thu, 2009-11-05 at 14:37 -0500, Dmitri Pal wrote: Hi, Now when we decided to use latest DS that is available from 389 project for IPA v2 we can take advantage of the syntaxes that DS team has added. For example they added numeric syntax that was a part

Re: [Freeipa-devel] Thoughts on client configuration

2009-11-09 Thread Dmitri Pal
... rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA

Re: [Freeipa-devel] localized strings

2009-11-11 Thread Dmitri Pal
to bind _()? Jason, Pavel, Rob we talked about this many months ago and agreed that we will be writing translation ready code. I think we need to clean it up. I will add a task to the iteration to clean this up. Pavel I suspect it will fall on your shoulders. Ok? -- Thank you, Dmitri Pal

Re: [Freeipa-devel] How to implement Magic Private Groups in FreeIPA ?

2009-11-12 Thread Dmitri Pal
some experiments during this and the next week to see if we can implement this and still have happy clients, but we would like to have opinions if anyone have comments about this approach. Simo. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] service record conundrum

2009-12-03 Thread Dmitri Pal
understand these services are in a different location in the tree but this approach might be less painfull than LDIF and delete and add. I hope that we will get the RDN renames pretty soon so that this would not be an issue but it might not be soon enough for v2. -- Thank you, Dmitri Pal Engineering

Re: [Freeipa-devel] service record conundrum

2009-12-03 Thread Dmitri Pal
Rob Crittenden wrote: Dmitri Pal wrote: Rob Crittenden wrote: Here is sort of a tricky problem, need some advice (LONG). When we bootstrap an IPA server we create a number of principals for the server itself. We create a host/, HTTP/ and ldap/ principal using kadmin.local. By using

Re: [Freeipa-devel] ipa-server-install Unable to set admin password

2010-01-08 Thread Dmitri Pal
Rob Crittenden wrote: tatiana philippova wrote: also noticed next in /var/log/dirsrv/slapd-INTERNAL-BULLETIN-NET/errors : [08/Jan/2010:10:02:38 +1300] ipa_pwd_extop - krb5_c_string_to_key failed [Bad encryption type] [08/Jan/2010:10:02:38 +1300] ipa_pwd_extop - key encryption/encoding

Re: [Freeipa-devel] IPAv2, replica installation can be broken

2010-01-14 Thread Dmitri Pal
what we can afford to do for v2. Can we do c)? Thoughts? rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] not ascii, not utf-8, what's a parser supposed to do?

2010-01-26 Thread Dmitri Pal
%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c%c' % \ (40,94,40,0,124,10,124,13,124,32,124,58,124,60,41,124,91,0,10,13,128,45,255,93,43,124,91,32,93,43,36,41) Which is pretty unreadable, but with sufficient comments could be acceptable. -- Thank you, Dmitri Pal Engineering

Re: [Freeipa-devel] [DOC] about netgroups

2010-02-23 Thread Dmitri Pal
___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs

Re: [Freeipa-devel] [DOC] about netgroups

2010-02-23 Thread Dmitri Pal
Dmitri Pal wrote: Pavel Zůna wrote: I was asked to complete the documentation of IPA commands on the internal wiki. Unfortunatly, I currently don't have access to it and have decided to put some of the information I've been gathering here on freeipa-devel. It's not a secret after all

Re: [Freeipa-devel] JSON problems (the woes of binary data)

2010-02-26 Thread Dmitri Pal
, though I am not a specialist, but suggestion seems logical. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list

Re: [Freeipa-devel] commit policy for translations (.po files)

2010-02-26 Thread Dmitri Pal
translations are correct or not. +1 we do the same for sssd Simo. I agree too. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] [Freeipa-users] [Freeipa-interest] Announcing FreeIPA v2 Server Alpha 2 Release

2010-03-12 Thread Dmitri Pal
and will look into them. Christian ___ Freeipa-users mailing list freeipa-us...@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] [PATCH] 449 renumber IPA schema OIDs

2010-05-21 Thread Dmitri Pal
will not be used. * For v2 we should use only 3,4,5,6. 1 and are reserved for v1 So the things would look like in the attached files. I have not had a chance to make sure they load but I hope I did not miss anything. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] [PATCH] 449 renumber IPA schema OIDs

2010-05-21 Thread Dmitri Pal
Rob Crittenden wrote: Dmitri Pal wrote: Rob Crittenden wrote: Use correct OID base for ipaVolumeKey (its an objectClass, not an attribute). Re-number to use contiguous values. There were some pretty big gaps. rob

Re: [Freeipa-devel] [PATCH] 466 drop serviceName schema

2010-06-11 Thread Dmitri Pal
https://www.redhat.com/mailman/listinfo/freeipa-devel Visual ack. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel

[Freeipa-devel] Process improvements in the IPA project

2010-06-15 Thread Dmitri Pal
to the project. If you are interested in where we are and what we are doing or have an issue you would like to report please use trac instance at: https://fedorahosted.org/freeipa -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking

Re: [Freeipa-devel] Process improvements in the IPA project

2010-06-15 Thread Dmitri Pal
Dmitri Pal wrote: Hello, We had some delay with the implementation of the UI for v2. Now when the problems are cleared we are marching forward towards the end of the project cycle. As we dive more and more into the details of the implementation related to the UI we get more and more

[Freeipa-devel] Question about administrative granularity

2010-06-15 Thread Dmitri Pal
with the schema for those. Comments welcome! -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa-devel

[Freeipa-devel] [PATCH] Schema adjustment

2010-07-14 Thread Dmitri Pal
The ipaAssociation is the core of different association objects. It seems that the service is an exception rather then a rule. So it is moved into the object where it belongs. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking

Re: [Freeipa-devel] [PATCH] 487 fix netgroup plugin

2010-07-14 Thread Dmitri Pal
Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] [PATCH] 1. Schema Cleanup

2010-07-19 Thread Dmitri Pal
Dmitri Pal wrote: The ipaAssociation is the core of different association objects. It seems that the service is an exception rather then a rule. So it is moved into the object where it belongs. I am withdrawing this patch. A new one is attached. In addition to the original changes it also

[Freeipa-devel] Support of SUDO in IPA

2010-07-22 Thread Dmitri Pal
. Please find the first cut at the design of the server side here: http://www.freeipa.org/page/SUDO_Schema_Design Please help us find the right answers to the questions asked at the bottom of the page. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc

[Freeipa-devel] Special HBAC rules

2010-07-28 Thread Dmitri Pal
to start to control access via HBAC rules, Potentially we can support several patterns in one HBAC rule if there different naming conventions due to acquisitions and other historical reasons. Thoughts? -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] Sudoers schema

2010-08-03 Thread Dmitri Pal
, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa

Re: [Freeipa-devel] Sudoers schema

2010-08-04 Thread Dmitri Pal
. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] Sudoers schema

2010-08-04 Thread Dmitri Pal
___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] [PATCH] 490 add DNS lookup to new hosts/services

2010-08-04 Thread Dmitri Pal
-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] Sudoers schema

2010-08-05 Thread Dmitri Pal
Hello, It occurred to me that we can have a compromise. We can have two ways and let the admins to decide which model to follow. So the schema will look like this: The sudo rule entry will have a string attribute to put a command verbatim as it is designed now and an attribute that contains a DN

Re: [Freeipa-devel] [PATCH] 518 handle errors in uninstall better

2010-09-01 Thread Dmitri Pal
@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa

Re: [Freeipa-devel] webUI code restructuring [wall of text, diagrams, ... you've been warned!]

2010-09-07 Thread Dmitri Pal
. This is just a suggestion btw. Enough text. Waiting for comments. :) Pavel Very impressive! -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out

Re: [Freeipa-devel] [PATCH] 2. Enabling SUDO support

2010-09-10 Thread Dmitri Pal
Rob Crittenden wrote: Dmitri Pal wrote: See patch comment for more details. ACK with these exceptions: I made a few minor changes in the ldif syntax: - remove blank lines - add missing dn: cn=schema - move SYNTAX to just before X-ORIGIN in hostMask I also fixed the SUDO service group

Re: [Freeipa-devel] Optimizing for the common case: automount and DNS

2010-09-10 Thread Dmitri Pal
Adam Young wrote: On 09/10/2010 10:24 AM, Rob Crittenden wrote: Dmitri Pal wrote: Adam Young wrote: Both Automount and DNS are heirarchical entities. DNS starts with a zone. Usually, a zone is a domain name, like redhat.com. It might be more specific, like devel.redhat.com. A DNS setup

Re: [Freeipa-devel] [PATCH] 528 make some hbac options mutually exclusive

2010-09-14 Thread Dmitri Pal
Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] [PATCH] 2. Enabling SUDO support

2010-09-15 Thread Dmitri Pal
Rob Crittenden wrote: Dmitri Pal wrote: See patch comment for more details. ACK with these exceptions: I made a few minor changes in the ldif syntax: - remove blank lines - add missing dn: cn=schema - move SYNTAX to just before X-ORIGIN in hostMask I also fixed the SUDO service group

Re: [Freeipa-devel] default stance for posix/non-posix groups

2010-09-16 Thread Dmitri Pal
, that the default stance by all groups are POSIX unless otherwise requested. Any objectsion? makes sense rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal

Re: [Freeipa-devel] sudo schema

2010-09-23 Thread Dmitri Pal
/ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com

[Freeipa-devel] [PATCH] 2 Addressing issues found in SUDO schema

2010-09-24 Thread Dmitri Pal
$Subj JR, please give it a try. I will update the page accordingly... -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ From d016c7c9d7f548550e14000f62741abf981c6529 Mon Sep 17

Re: [Freeipa-devel] [SSSD] Handling nested netgroups (looking for recommendations)

2010-09-28 Thread Dmitri Pal
...@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/sssd-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel

Re: [Freeipa-devel] Sudo Schema Bug

2010-09-29 Thread Dmitri Pal
...@citrixonline.commailto:jr.aqu...@citrixonline.com http://www.citrixonline.comhttp://www.citrixonline.com/ -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] Sudo Schema Bug

2010-09-29 Thread Dmitri Pal
correct me if I am wrong. Thanks Dmitri -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa

Re: [Freeipa-devel] Sudo Schema Bug/Feature

2010-09-30 Thread Dmitri Pal
How do we adjust FreeIPA such that it ensures Deny-IPASudoRules precede any Allow-IPASudoRules ? So it looks like current schema would not fly well with SUDO due to SUDO bug/feature. SUDO will match just any first rule that satisfies the user-hpost-command combination but we can't

Re: [Freeipa-devel] [PATCH] 549 remove reliance on admin user

2010-10-01 Thread Dmitri Pal
___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com

Re: [Freeipa-devel] Sudo Schema Bug/Feature

2010-10-03 Thread Dmitri Pal
Dmitri Pal wrote: How do we adjust FreeIPA such that it ensures Deny-IPASudoRules precede any Allow-IPASudoRules ? So it looks like current schema would not fly well with SUDO due to SUDO bug/feature. SUDO will match just any first rule that satisfies the user-hpost-command

[Freeipa-devel] Proposal about ACI management in IPA v2

2010-10-08 Thread Dmitri Pal
because the complex task is decomposed into logical parts. I do not suggest that we do it in v2 but I think it is a way to go in general in future. Hope this approach does not have much flaws. Yes it will require some work in the ACI space but I hope it is not a huge rework. -- Thank you, Dmitri Pal

Re: [Freeipa-devel] Proposal about ACI management in IPA v2

2010-10-11 Thread Dmitri Pal
Simo Sorce wrote: On Sun, 10 Oct 2010 23:27:33 -0400 Dmitri Pal d...@redhat.com wrote: Actually the whole thing was inspired by the ACI UI from the LDAP book that is based on Netscape DS. Rob you say What it lacks is a way to *output* an aci so it can be easily represented in a UI

Re: [Freeipa-devel] Proposal about ACI management in IPA v2

2010-10-11 Thread Dmitri Pal
Rob Crittenden wrote: Dmitri Pal wrote: Simo Sorce wrote: On Sun, 10 Oct 2010 23:27:33 -0400 Dmitri Pald...@redhat.com wrote: Actually the whole thing was inspired by the ACI UI from the LDAP book that is based on Netscape DS. Rob you say What it lacks is a way to *output* an aci so

Re: [Freeipa-devel] DNS use cases

2010-10-13 Thread Dmitri Pal
queries get forwarded to server X, and the results cached for future use. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red

[Freeipa-devel] Playing with UI

2010-10-13 Thread Dmitri Pal
and DNS we start polishing the UI section by section area by area. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel

Re: [Freeipa-devel] Some thoughts about login services

2010-10-15 Thread Dmitri Pal
Simo Sorce wrote: On Fri, 15 Oct 2010 11:36:50 -0400 Dmitri Pal d...@redhat.com wrote: Hello, Currently HBAC login group is defined as: objectClasses: (2.16.840.1.113730.3.8.4.11 NAME 'ipaHBACServiceGroup' DESC 'IPA HBAC service group object class' SUP nestedGroup STRUCTURAL X-ORIGIN

Re: [Freeipa-devel] Some thoughts about login services

2010-10-15 Thread Dmitri Pal
Simo Sorce wrote: On Fri, 15 Oct 2010 14:12:22 -0400 Dmitri Pal d...@redhat.com wrote: Simo Sorce wrote: I'd go for the last one, may be ugly, but does not undo anything that already works and has the effect of simplifying the UI which is what you are after right now

[Freeipa-devel] [Fwd: [PATCH] 582 allow rdn changes]

2010-10-18 Thread Dmitri Pal
is ignored. ticket 323 rob -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa-devel

Re: [Freeipa-devel] Bulk IPA commands

2010-10-19 Thread Dmitri Pal
list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

[Freeipa-devel] IPA install with DNS

2010-10-20 Thread Dmitri Pal
and why? Is it just to create a DNS entry? Is so man page should probably explain that it is used only in case DNS is installed. Anywhere else? I agree we should do the IP address validation and it should support both IPv4 IPv6. -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] Bulk IPA commands

2010-10-20 Thread Dmitri Pal
Adam Young wrote: On 10/19/2010 06:29 PM, Dmitri Pal wrote: Rob Crittenden wrote: Adam Young wrote: I think I have an approach that will work for pacaking up multiple commands at once. Just want to mention that XML-RPC has a provision for doing multiple requests

[Freeipa-devel] [Fwd: [freeipa] #402: SUDO command attribute should be case sensitive]

2010-10-20 Thread Dmitri Pal
/402 freeipa http://freeipa.org FreeIPA -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa-devel

Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Dmitri Pal
___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs

Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Dmitri Pal
Simo Sorce wrote: On Fri, 22 Oct 2010 17:50:50 -0400 Dmitri Pal d...@redhat.com wrote: There should be some metadata about what to do if some call fails. Like fail the whole thing and stop or continue for the rest. So there should be a dictionary of the multicall properties

Re: [Freeipa-devel] Should we remove the reset button?

2010-10-24 Thread Dmitri Pal
button may in fact outweigh the value of putting the feature in place. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel Good point might be worth reevaluating. Ben? -- Thank you, Dmitri Pal

Re: [Freeipa-devel] [Fwd: [freeipa] #402: SUDO command attribute should be case sensitive]

2010-10-24 Thread Dmitri Pal
Dmitri Pal wrote: Simo Sorce wrote: On Wed, 20 Oct 2010 15:42:17 -0400 Dmitri Pal d...@redhat.com wrote: Any suggestions what it should be? Should we create a new attribute or there is something handy to reuse? Probably makes sense to add a custom attribute

[Freeipa-devel] Autofs schema

2010-11-01 Thread Dmitri Pal
Are we using the right one? https://bugzilla.redhat.com/show_bug.cgi?id=643045 -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] patches needing review

2010-11-03 Thread Dmitri Pal
rcrit patches. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. --- Looking

Re: [Freeipa-devel] [ PATCH ] lite-server.py failing due to cli.py dependency: import default_encoding_utf8

2010-11-03 Thread Dmitri Pal
-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

[Freeipa-devel] Fields in the tickets

2010-11-08 Thread Dmitri Pal
Hi, Please do not forget to check the Affects CLI and newly added Affects DOC checkboxes when closing tickets when the work done changes the signature or output of the CLI or needs to be documented. -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] Proposed changes to the HBAC grammar

2010-11-18 Thread Dmitri Pal
agreed to, please, and identify the questions that we need to answer. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] Proposed changes to the HBAC grammar

2010-11-18 Thread Dmitri Pal
Adam Young wrote: On 11/18/2010 04:02 PM, Stephen Gallagher wrote: On 11/18/2010 09:55 AM, Dmitri Pal wrote: Steve can you summarize where we are and what we agreed to, please, and identify the questions that we need to answer. Simo, Adam and I had a long discussion on IRC

Re: [Freeipa-devel] Proposed changes to the HBAC grammar

2010-11-18 Thread Dmitri Pal
Adam Young wrote: On 11/18/2010 05:27 PM, Dmitri Pal wrote: Adam Young wrote: On 11/18/2010 04:02 PM, Stephen Gallagher wrote: On 11/18/2010 09:55 AM, Dmitri Pal wrote: Steve can you summarize where we are and what we agreed to, please, and identify

Re: [Freeipa-devel] [PATCH] Make the migration plugin more configurable

2010-11-19 Thread Dmitri Pal
/listinfo/freeipa-devel -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https

Re: [Freeipa-devel] Proposed changes to the HBAC grammar

2010-11-19 Thread Dmitri Pal
Dmitri Pal wrote: Stephen Gallagher wrote: Breaking the thread intentionally to bring back focus. With Adam's recent input, I've modified the grammar to what I hope will be it's final form. The complete grammar is available at https://fedorahosted.org/sssd/wiki/HBAC_Grammar

Re: [Freeipa-devel] [SSSD] Proposed changes to the HBAC grammar

2010-11-22 Thread Dmitri Pal
, (interval 1-31) 3-7,10,12,15,25-31 with no spaces inside. Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing

Re: [Freeipa-devel] [PATCH] 0100-top-nav-index

2010-11-22 Thread Dmitri Pal
://www.redhat.com/mailman/listinfo/freeipa-devel Do I read you right that instead of using actions menu you want to as another row of the tabs at the top? I am not sure I agree with this. -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. --- Looking

Re: [Freeipa-devel] [PATCH] 0100-top-nav-index

2010-11-22 Thread Dmitri Pal
Dmitri Pal wrote: Adam Young wrote: On 11/19/2010 06:53 PM, Endi Sukma Dewata wrote: On 11/19/2010 4:09 PM, Adam Young wrote: This will not work with entities that do not have associated tabs, e.g. hbacsvc, hbacsvcgroups, sudocmd, sudocmdgroups. For these entities

Re: [Freeipa-devel] [SSSD] Proposed changes to the HBAC grammar

2010-11-22 Thread Dmitri Pal
from a discussion with UXD which I will describe in a different thread. -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

[Freeipa-devel] Other issues with HBAC calendar

2010-11-22 Thread Dmitri Pal
be in DDHHMM format in grammar or in just NMM format where N is any numeric value that represents unlimited number of hours. Thoughts? -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Dmitri Pal
purposes in the rule? -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Dmitri Pal
the rule into several slices. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-24 Thread Dmitri Pal
Simo Sorce wrote: On Wed, 24 Nov 2010 11:26:05 -0500 Dmitri Pal d...@redhat.com wrote: Steven, please think about the case when the rule needs to be edited in UI and it has some value for DD - say 1. What you display in UI then? If you do not allow to enter days and you not allow more

  1   2   3   4   5   6   >