[Freeipa-devel] in-tree webUI

2015-09-15 Thread Lukáš Hellebrandt
Hello, I am learning FreeIPA development and looking for a way to test my changes in code: so far, I have to compile, build RPMs, copy them to the machine desired, uninstall old version, install new version from RPMs - that, for every change I want to test. Which takes way too long. I know

Re: [Freeipa-devel] URI in HBAC rules - patch - request for feedback

2016-02-29 Thread Lukáš Hellebrandt
> On the patches: > > [2] you define a new attribute Url which is fine, but the actual > attribute is not ok in several way. > > - You assigned an OID from a hole in the IPAv2 Attibutes space, it > should be an assigned ID from the IPAv3 attribute space instead > > - You do not namespace the

Re: [Freeipa-devel] URI in HBAC rules - patch - request for feedback

2016-02-29 Thread Lukáš Hellebrandt
On 02/28/2016 11:39 AM, Jakub Hrozek wrote: > On Fri, Feb 26, 2016 at 11:33:26AM -0500, Simo Sorce wrote: >> On Fri, 2016-02-26 at 17:17 +0100, Jakub Hrozek wrote: >>> On Fri, Feb 26, 2016 at 10:58:57AM -0500, Simo Sorce wrote: >>>> On Fri, 2016-02-26 at 13:17

[Freeipa-devel] URI in HBAC rules - patch - request for feedback

2016-02-26 Thread Lukáš Hellebrandt
Hi, FreeIPA and SSSD communities! I am working on adding URI to HBAC as my thesis [1]. The goal is to control access not only based on (user, host, service), but on (user, host, service, resource's URI). I created a patch for FreeIPA [2] so it is capable of storing URI as part of HBAC rule. I

[Freeipa-devel] [PATCH] 0001 Adding URL to HBAC rule

2016-02-26 Thread Lukáš Hellebrandt
On 02/26/2016 01:30 PM, Martin Kosek wrote: > Greetings, welcome! > > On 02/26/2016 01:17 PM, Lukáš Hellebrandt wrote: > ... >> Btw, is there some better place to share patches than a pasting tool? >> Maybe some form of pull request? > > There is :-) Ple

[Freeipa-devel] URI in HBAC - design page

2016-03-23 Thread Lukáš Hellebrandt
I created a design page for the feature: http://www.freeipa.org/page/URI-based-HBAC-design -- Lukas Hellebrandt Associate Quality Engineer lhell...@redhat.com -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to

Re: [Freeipa-devel] URI in HBAC - design page

2016-03-29 Thread Lukáš Hellebrandt
On 03/24/2016 10:31 AM, Jan Pazdziora wrote: > On Wed, Mar 23, 2016 at 04:41:49PM +0100, Lukáš Hellebrandt wrote: >> I created a design page for the feature: >> >> http://www.freeipa.org/page/URI-based-HBAC-design > > In the document, you say > > In all o

Re: [Freeipa-devel] URI in HBAC - design page

2016-03-29 Thread Lukáš Hellebrandt
On 03/24/2016 01:41 PM, Jan Pazdziora wrote: > On Wed, Mar 23, 2016 at 04:41:49PM +0100, Lukáš Hellebrandt wrote: >> I created a design page for the feature: >> >> http://www.freeipa.org/page/URI-based-HBAC-design > > Could you please elaborate on unauthentica

Re: [Freeipa-devel] URI in HBAC - design page

2016-03-29 Thread Lukáš Hellebrandt
On 03/24/2016 10:24 AM, Jan Pazdziora wrote: > On Wed, Mar 23, 2016 at 04:41:49PM +0100, Lukáš Hellebrandt wrote: >> I created a design page for the feature: >> >> http://www.freeipa.org/page/URI-based-HBAC-design > > The way most web applications (that I see as the f

Re: [Freeipa-devel] URI in HBAC - design page

2016-03-29 Thread Lukáš Hellebrandt
On 03/24/2016 01:31 PM, Jan Pazdziora wrote: > On Wed, Mar 23, 2016 at 06:39:45PM +0100, Petr Vobornik wrote: >> On 03/23/2016 04:41 PM, Lukáš Hellebrandt wrote: >>> I created a design page for the feature: >>> >>> http://www.freeipa.org/page/URI-based-HBAC-des

Re: [Freeipa-devel] URI in HBAC - design page

2016-03-29 Thread Lukáš Hellebrandt
On 03/24/2016 02:39 PM, Rob Crittenden wrote: > Adam Young wrote: >> On 03/24/2016 05:43 AM, Jan Pazdziora wrote: >>> On Wed, Mar 23, 2016 at 04:41:49PM +0100, Lukáš Hellebrandt wrote: >>>> I created a design page for the feature: >>>> >>>> h

[Freeipa-devel] URI in HBAC - code

2016-04-27 Thread Lukáš Hellebrandt
SSSD: https://github.com/lhellebr/sssd/commits/url_in_hbac Apache module: https://github.com/lhellebr/mod_hbacauthz_pam FreeIPA: http://pastebin.com/X6H9BTwk On 04/26/2016 03:56 PM, Petr Spacek wrote: > On 26.4.2016 15:16, Jan Pazdziora wrote: >> On Tue, Apr 26, 2016 at 02:16:54PM +0200, Petr

[Freeipa-devel] URI in HBAC

2016-04-25 Thread Lukáš Hellebrandt
http://www.freeipa.org/page/V4/URI-based_HBAC I have made some important changes to the design document of this proposed feature. The difference is mainly changing regular expression interpretation of URI to longest-prefix matching. This change was done mainly because of upstream's reactions. I

Re: [Freeipa-devel] URI in HBAC - code

2016-05-12 Thread Lukáš Hellebrandt
On 04/27/2016 03:34 PM, Lukáš Hellebrandt wrote: > SSSD: https://github.com/lhellebr/sssd/commits/url_in_hbac > Apache module: https://github.com/lhellebr/mod_hbacauthz_pam > FreeIPA: http://pastebin.com/X6H9BTwk > > On 04/26/2016 03:56 PM, Petr Spacek wrote: >> On 26.4.2016