Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-16 Thread Simo Sorce
On 16/11/15 13:20, Alexander Bokovoy wrote: On Mon, 16 Nov 2015, Simo Sorce wrote: On 16/11/15 06:02, Ludwig Krispenz wrote: On 11/16/2015 10:32 AM, Martin Kosek wrote: On 11/13/2015 04:40 PM, Simo Sorce wrote: On 13/11/15 10:17, Martin Basti wrote: ... And in general I am opposed to have

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-16 Thread Simo Sorce
On 16/11/15 06:02, Ludwig Krispenz wrote: On 11/16/2015 10:32 AM, Martin Kosek wrote: On 11/13/2015 04:40 PM, Simo Sorce wrote: On 13/11/15 10:17, Martin Basti wrote: ... And in general I am opposed to have a separate object on performance grounds (for clients) and also on the fact that is

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-16 Thread Alexander Bokovoy
On Mon, 16 Nov 2015, Simo Sorce wrote: On 16/11/15 06:02, Ludwig Krispenz wrote: On 11/16/2015 10:32 AM, Martin Kosek wrote: On 11/13/2015 04:40 PM, Simo Sorce wrote: On 13/11/15 10:17, Martin Basti wrote: ... And in general I am opposed to have a separate object on performance grounds

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-16 Thread Alexander Bokovoy
On Mon, 16 Nov 2015, Ludwig Krispenz wrote: On 11/16/2015 10:32 AM, Martin Kosek wrote: On 11/13/2015 04:40 PM, Simo Sorce wrote: On 13/11/15 10:17, Martin Basti wrote: ... And in general I am opposed to have a separate object on performance grounds (for clients) and also on the fact that

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-16 Thread Martin Kosek
On 11/13/2015 04:40 PM, Simo Sorce wrote: On 13/11/15 10:17, Martin Basti wrote: ... And in general I am opposed to have a separate object on performance grounds (for clients) and also on the fact that is becomes tricky to keep objects in sync. What exactly is the performance issue there? To

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-16 Thread Ludwig Krispenz
On 11/16/2015 10:32 AM, Martin Kosek wrote: On 11/13/2015 04:40 PM, Simo Sorce wrote: On 13/11/15 10:17, Martin Basti wrote: ... And in general I am opposed to have a separate object on performance grounds (for clients) and also on the fact that is becomes tricky to keep objects in sync.

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-13 Thread Martin Basti
On 13.11.2015 14:41, Simo Sorce wrote: On 11/11/15 09:30, Martin Basti wrote: On 11.11.2015 14:52, Martin Basti wrote: Comments inline Martin^2 On 11.11.2015 09:24, Stanislav Laznicka wrote: On 11/05/2015 06:17 PM, Petr Spacek wrote: On 4.11.2015 15:20, Martin Basti wrote: Hello, we

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-13 Thread Martin Basti
On 13.11.2015 16:40, Simo Sorce wrote: On 13/11/15 10:17, Martin Basti wrote: On 13.11.2015 14:41, Simo Sorce wrote: On 11/11/15 09:30, Martin Basti wrote: On 11.11.2015 14:52, Martin Basti wrote: Comments inline Martin^2 On 11.11.2015 09:24, Stanislav Laznicka wrote: On 11/05/2015

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-13 Thread Simo Sorce
On 13/11/15 10:17, Martin Basti wrote: On 13.11.2015 14:41, Simo Sorce wrote: On 11/11/15 09:30, Martin Basti wrote: On 11.11.2015 14:52, Martin Basti wrote: Comments inline Martin^2 On 11.11.2015 09:24, Stanislav Laznicka wrote: On 11/05/2015 06:17 PM, Petr Spacek wrote: On 4.11.2015

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-13 Thread Simo Sorce
On 13/11/15 11:51, Martin Basti wrote: On 13.11.2015 16:40, Simo Sorce wrote: On 13/11/15 10:17, Martin Basti wrote: On 13.11.2015 14:41, Simo Sorce wrote: On 11/11/15 09:30, Martin Basti wrote: On 11.11.2015 14:52, Martin Basti wrote: Comments inline Martin^2 On 11.11.2015 09:24,

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-13 Thread Jakub Hrozek
On Fri, Nov 13, 2015 at 10:40:27AM -0500, Simo Sorce wrote: > On 13/11/15 10:17, Martin Basti wrote: > > > > > >On 13.11.2015 14:41, Simo Sorce wrote: > >>On 11/11/15 09:30, Martin Basti wrote: > >>> > >>> > >>>On 11.11.2015 14:52, Martin Basti wrote: > Comments inline > Martin^2 > >

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-13 Thread Simo Sorce
On 11/11/15 09:30, Martin Basti wrote: On 11.11.2015 14:52, Martin Basti wrote: Comments inline Martin^2 On 11.11.2015 09:24, Stanislav Laznicka wrote: On 11/05/2015 06:17 PM, Petr Spacek wrote: On 4.11.2015 15:20, Martin Basti wrote: Hello, we (Standa and I) had offline discussion and

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-11 Thread Stanislav Laznicka
On 11/05/2015 06:17 PM, Petr Spacek wrote: On 4.11.2015 15:20, Martin Basti wrote: Hello, we (Standa and I) had offline discussion and I proposed following idea: 1) create new entry in LDAP for "time rule" instead of adding the time rule string directly into HBACRule. This will allow to

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-11 Thread Martin Basti
Comments inline Martin^2 On 11.11.2015 09:24, Stanislav Laznicka wrote: On 11/05/2015 06:17 PM, Petr Spacek wrote: On 4.11.2015 15:20, Martin Basti wrote: Hello, we (Standa and I) had offline discussion and I proposed following idea: 1) create new entry in LDAP for "time rule" instead of

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-11 Thread Martin Basti
On 11.11.2015 14:52, Martin Basti wrote: Comments inline Martin^2 On 11.11.2015 09:24, Stanislav Laznicka wrote: On 11/05/2015 06:17 PM, Petr Spacek wrote: On 4.11.2015 15:20, Martin Basti wrote: Hello, we (Standa and I) had offline discussion and I proposed following idea: 1) create

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-05 Thread Petr Spacek
On 4.11.2015 15:20, Martin Basti wrote: > > > On 04.11.2015 13:46, Stanislav Laznicka wrote: >> Hi, >> >> The fixed patches to Martin^2's and Jakub's reviews are almost ready, there >> are just a few things left. Martin B. mentioned in his review that '~' might >> not be the best delimiter for

[Freeipa-devel] [Update]Time-Based Account Policies

2015-11-04 Thread Stanislav Laznicka
Hi, The fixed patches to Martin^2's and Jakub's reviews are almost ready, there are just a few things left. Martin B. mentioned in his review that '~' might not be the best delimiter for range values in the HBAC time policies language as it is not commonly used for that purpose. I started

Re: [Freeipa-devel] [Update]Time-Based Account Policies

2015-11-04 Thread Martin Basti
On 04.11.2015 13:46, Stanislav Laznicka wrote: Hi, The fixed patches to Martin^2's and Jakub's reviews are almost ready, there are just a few things left. Martin B. mentioned in his review that '~' might not be the best delimiter for range values in the HBAC time policies language as it is