Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-27 Thread Adam Young
On 09/26/2011 08:54 AM, Rob Crittenden wrote: Simo Sorce wrote: On Mon, 2011-09-26 at 11:22 +0200, Martin Kosek wrote: On Mon, 2011-09-26 at 08:31 +0200, Martin Kosek wrote: On Sun, 2011-09-25 at 23:05 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-09-23 at 14:12 -0400, Rob Cr

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-27 Thread Simo Sorce
On Tue, 2011-09-27 at 08:58 +0200, Martin Kosek wrote: > On Mon, 2011-09-26 at 21:07 -0400, Rob Crittenden wrote: > > Martin Kosek wrote: > > > On Mon, 2011-09-26 at 08:54 -0400, Rob Crittenden wrote: > > >> Simo Sorce wrote: > > >>> On Mon, 2011-09-26 at 11:22 +0200, Martin Kosek wrote: > > I

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-26 Thread Martin Kosek
On Mon, 2011-09-26 at 21:07 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > On Mon, 2011-09-26 at 08:54 -0400, Rob Crittenden wrote: > >> Simo Sorce wrote: > >>> On Mon, 2011-09-26 at 11:22 +0200, Martin Kosek wrote: > IPA server, client and replica installation and WebUI worked for me.

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-26 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2011-09-26 at 08:54 -0400, Rob Crittenden wrote: Simo Sorce wrote: On Mon, 2011-09-26 at 11:22 +0200, Martin Kosek wrote: IPA server, client and replica installation and WebUI worked for me. This patch seems to defeat the purpose as we are still allowing krb auth

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-26 Thread Martin Kosek
On Mon, 2011-09-26 at 08:54 -0400, Rob Crittenden wrote: > Simo Sorce wrote: > > On Mon, 2011-09-26 at 11:22 +0200, Martin Kosek wrote: > >> IPA server, client and replica installation and WebUI worked for me. > > > > This patch seems to defeat the purpose as we are still allowing krb auth > > on l

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-26 Thread Rob Crittenden
Simo Sorce wrote: On Mon, 2011-09-26 at 11:22 +0200, Martin Kosek wrote: On Mon, 2011-09-26 at 08:31 +0200, Martin Kosek wrote: On Sun, 2011-09-25 at 23:05 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-09-23 at 14:12 -0400, Rob Crittenden wrote: Always require SSL in the Kerb

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-26 Thread Simo Sorce
On Mon, 2011-09-26 at 11:22 +0200, Martin Kosek wrote: > On Mon, 2011-09-26 at 08:31 +0200, Martin Kosek wrote: > > On Sun, 2011-09-25 at 23:05 -0400, Rob Crittenden wrote: > > > Martin Kosek wrote: > > > > On Fri, 2011-09-23 at 14:12 -0400, Rob Crittenden wrote: > > > >> Always require SSL in the

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-26 Thread Martin Kosek
On Mon, 2011-09-26 at 08:31 +0200, Martin Kosek wrote: > On Sun, 2011-09-25 at 23:05 -0400, Rob Crittenden wrote: > > Martin Kosek wrote: > > > On Fri, 2011-09-23 at 14:12 -0400, Rob Crittenden wrote: > > >> Always require SSL in the Kerberos authorization block. > > >> > > >> This also corrects a

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-25 Thread Martin Kosek
On Sun, 2011-09-25 at 23:05 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > On Fri, 2011-09-23 at 14:12 -0400, Rob Crittenden wrote: > >> Always require SSL in the Kerberos authorization block. > >> > >> This also corrects a slight bug where if add is True then we always > >> re-update the f

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-25 Thread Rob Crittenden
Martin Kosek wrote: On Fri, 2011-09-23 at 14:12 -0400, Rob Crittenden wrote: Always require SSL in the Kerberos authorization block. This also corrects a slight bug where if add is True then we always re-update the file. rob ACK. Pushed to master, ipa-2-1. Martin Sorry guys, this breaks

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-23 Thread Martin Kosek
On Fri, 2011-09-23 at 14:12 -0400, Rob Crittenden wrote: > Always require SSL in the Kerberos authorization block. > > This also corrects a slight bug where if add is True then we always > re-update the file. > > rob ACK. Pushed to master, ipa-2-1. Martin _

[Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-23 Thread Rob Crittenden
Always require SSL in the Kerberos authorization block. This also corrects a slight bug where if add is True then we always re-update the file. rob >From ab958d79c51951a6c635611905732ab55b544c9f Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Fri, 23 Sep 2011 11:46:59 -0400 Subject: [PATC