Re: [Freeipa-devel] [help]

2016-10-19 Thread 郑磊
9, 2016 07:56 PM To: "郑磊"; "freeipa-devel"; Subject: Re: [Freeipa-devel] [help] Comments inline On 19.10.2016 10:30, 郑磊 wrote: -

Re: [Freeipa-devel] [help]

2016-10-19 Thread Martin Basti
Basti"; *Date: * Wed, Oct 19, 2016 04:03 PM *To: * "郑磊"; "freeipa-devel"; *Subject: * Re: [Freeipa-devel] [help] On 19.10.2016 03:35, 郑磊 wrote: Hello, In the process of using freeipa, we found a lot of content without Chinese translation. In order to we can better use the

Re: [Freeipa-devel] [help]

2016-10-19 Thread 郑磊
M To: "郑磊"; "freeipa-devel"; Subject: Re: [Freeipa-devel] [help] On 19.10.2016 03:35, 郑磊 wrote: Hello, In the process of using freeipa, we found a lot of content without Chinese translation. In order to we can better u

Re: [Freeipa-devel] [help]

2016-10-19 Thread Petr Vobornik
郑磊 >> Phone:18684703229 >> Email:zheng...@kylinos.cn >> Company:天津麒麟信息技术有限公司 >> Address:湖南长沙市开福区三一大道工美大厦十四楼 >> -- Original -- >> *From: * "Martin Basti"; >> *Date: * Tue, Oct 18, 2016 06:50 PM >> *To: * &quo

Re: [Freeipa-devel] [help]

2016-10-19 Thread Martin Basti
rtin Basti"; *Date: * Tue, Oct 18, 2016 06:50 PM *To: * "郑磊"; "freeipa-devel"; *Subject: * Re: [Freeipa-devel] [help] On 18.10.2016 03:28, 郑磊 wrote: Hello everyone, I'm using freeipa, and having a test and research with the function of freeipa. At the same time, I

Re: [Freeipa-devel] [help]

2016-10-18 Thread 郑磊
uot;; Date: Tue, Oct 18, 2016 06:50 PM To: "郑磊"; "freeipa-devel"; Subject: Re: [Freeipa-devel] [help] On 18.10.2016 03:28, 郑磊 wrote: Hello everyone, I'm using freeipa, and having a test and research with the

Re: [Freeipa-devel] [help]

2016-10-18 Thread Martin Basti
On 18.10.2016 03:28, 郑磊 wrote: Hello everyone, I'm using freeipa, and having a test and research with the function of freeipa. At the same time, I have carried on the Chinese translation to the web interface, also added own log module in web interface, referring to the following screensh

[Freeipa-devel] [help]

2016-10-17 Thread 郑磊
Hello everyone, I'm using freeipa, and having a test and research with the function of freeipa. At the same time, I have carried on the Chinese translation to the web interface, also added own log module in web interface, referring to the following screenshots. However, for these changes

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-15 Thread Petr Spacek
On 14.10.2014 20:33, Nathaniel McCallum wrote: On Tue, 2014-10-14 at 10:38 +0200, Jan Cholasta wrote: Dne 14.10.2014 v 10:23 Petr Viktorin napsal(a): On 10/14/2014 08:51 AM, Jan Cholasta wrote: Dne 14.10.2014 v 08:37 Martin Kosek napsal(a): On 10/13/2014 07:23 PM, Nathaniel McCallum wrote: O

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-14 Thread Nathaniel McCallum
On Tue, 2014-10-14 at 10:38 +0200, Jan Cholasta wrote: > Dne 14.10.2014 v 10:23 Petr Viktorin napsal(a): > > On 10/14/2014 08:51 AM, Jan Cholasta wrote: > >> Dne 14.10.2014 v 08:37 Martin Kosek napsal(a): > >>> On 10/13/2014 07:23 PM, Nathaniel McCallum wrote: > On Mon, 2014-10-13 at 12:39 +02

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-14 Thread Jan Cholasta
Dne 14.10.2014 v 10:23 Petr Viktorin napsal(a): On 10/14/2014 08:51 AM, Jan Cholasta wrote: Dne 14.10.2014 v 08:37 Martin Kosek napsal(a): On 10/13/2014 07:23 PM, Nathaniel McCallum wrote: On Mon, 2014-10-13 at 12:39 +0200, Martin Kosek wrote: Also, few comments to your current patch set (tho

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-14 Thread Petr Viktorin
On 10/14/2014 08:51 AM, Jan Cholasta wrote: Dne 14.10.2014 v 08:37 Martin Kosek napsal(a): On 10/13/2014 07:23 PM, Nathaniel McCallum wrote: On Mon, 2014-10-13 at 12:39 +0200, Martin Kosek wrote: Also, few comments to your current patch set (though the patches themselves will probably not land

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-13 Thread Jan Cholasta
Dne 14.10.2014 v 08:37 Martin Kosek napsal(a): On 10/13/2014 07:23 PM, Nathaniel McCallum wrote: On Mon, 2014-10-13 at 12:39 +0200, Martin Kosek wrote: Also, few comments to your current patch set (though the patches themselves will probably not land in 4.1): Patch 0001: - while it may work (a

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-13 Thread Martin Kosek
On 10/13/2014 07:23 PM, Nathaniel McCallum wrote: > On Mon, 2014-10-13 at 12:39 +0200, Martin Kosek wrote: >> On 10/10/2014 05:43 PM, Nathaniel McCallum wrote: >>> As a result of this ongoing conversation, I have opened two 389 bugs: >>> >>> 1. Post Read - https://fedorahosted.org/389/ticket/47924

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-13 Thread Nathaniel McCallum
On Mon, 2014-10-13 at 12:39 +0200, Martin Kosek wrote: > On 10/10/2014 05:43 PM, Nathaniel McCallum wrote: > > As a result of this ongoing conversation, I have opened two 389 bugs: > > > > 1. Post Read - https://fedorahosted.org/389/ticket/47924 > > 2. UUID ACIs - https://fedorahosted.org/389/tick

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-13 Thread Martin Kosek
On 10/10/2014 05:43 PM, Nathaniel McCallum wrote: > As a result of this ongoing conversation, I have opened two 389 bugs: > > 1. Post Read - https://fedorahosted.org/389/ticket/47924 > 2. UUID ACIs - https://fedorahosted.org/389/ticket/47925 > > On Wed, 2014-10-08 at 17:46 -0400, Nathaniel McCall

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread Ludwig Krispenz
aci: (targetfilter = "(objectClass=ipaToken)")(targetattrs = "objectclass || d escription || managedBy || ipatokenUniqueID || ipatokenDisabled || ipatokenNo tBefore || ipatokenNotAfter || ipatokenVendor || ipatokenModel || ipatokenSer i

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread Simo Sorce
On Fri, 10 Oct 2014 17:38:46 +0200 Ludwig Krispenz wrote: > > > https://fedorahosted.org/389/ticket/47924 > > > >> is it possible to reproduce without IPA ? > > Perhaps. You'd need the OTP schema and ACIs from FreeIPA, unless > > you can find another way to reproduce it. > well, did think abou

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread Nathaniel McCallum
As a result of this ongoing conversation, I have opened two 389 bugs: 1. Post Read - https://fedorahosted.org/389/ticket/47924 2. UUID ACIs - https://fedorahosted.org/389/ticket/47925 On Wed, 2014-10-08 at 17:46 -0400, Nathaniel McCallum wrote: > The background of this email is this bug: > https:

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread thierry bordaz
On 10/10/2014 05:30 PM, Ludwig Krispenz wrote: On 10/10/2014 05:16 PM, thierry bordaz wrote: On 10/10/2014 04:38 PM, Ludwig Krispenz wrote: On 10/10/2014 03:58 PM, thierry bordaz wrote: On 10/09/2014 10:51 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 22:22 +0200, thierry bordaz wrote

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread Nathaniel McCallum
On Fri, 2014-10-10 at 17:38 +0200, Ludwig Krispenz wrote: > > https://fedorahosted.org/389/ticket/47924 > > > >> is it possible to reproduce without IPA ? > > Perhaps. You'd need the OTP schema and ACIs from FreeIPA, unless you can > > find another way to reproduce it. > well, did think about it

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread Ludwig Krispenz
https://fedorahosted.org/389/ticket/47924 is it possible to reproduce without IPA ? Perhaps. You'd need the OTP schema and ACIs from FreeIPA, unless you can find another way to reproduce it. well, did think about it again, we probaly also would need all the plugins, so could be difficult

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread Nathaniel McCallum
On Fri, 2014-10-10 at 17:30 +0200, Ludwig Krispenz wrote: > > On 10/10/2014 05:16 PM, thierry bordaz wrote: > > > On 10/10/2014 04:38 PM, Ludwig Krispenz wrote: > > > > > > > > On 10/10/2014 03:58 PM, thierry bordaz wrote: > > > > > > > On 10/09/2014 10:51 PM, Nathaniel McCallum wrote: > > > >

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread Ludwig Krispenz
On 10/10/2014 05:16 PM, thierry bordaz wrote: On 10/10/2014 04:38 PM, Ludwig Krispenz wrote: On 10/10/2014 03:58 PM, thierry bordaz wrote: On 10/09/2014 10:51 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 22:22 +0200, thierry bordaz wrote: On 10/09/2014 06:40 PM, Nathaniel McCallum wr

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread thierry bordaz
On 10/10/2014 04:38 PM, Ludwig Krispenz wrote: On 10/10/2014 03:58 PM, thierry bordaz wrote: On 10/09/2014 10:51 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 22:22 +0200, thierry bordaz wrote: On 10/09/2014 06:40 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 18:32 +0200, thierr

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread Ludwig Krispenz
On 10/10/2014 03:58 PM, thierry bordaz wrote: On 10/09/2014 10:51 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 22:22 +0200, thierry bordaz wrote: On 10/09/2014 06:40 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 18:32 +0200, thierry bordaz wrote: On 10/09/2014 06:27 PM, Nathani

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-10 Thread thierry bordaz
On 10/09/2014 10:51 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 22:22 +0200, thierry bordaz wrote: On 10/09/2014 06:40 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 18:32 +0200, thierry bordaz wrote: On 10/09/2014 06:27 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 14:11

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Nathaniel McCallum
On Thu, 2014-10-09 at 22:22 +0200, thierry bordaz wrote: > On 10/09/2014 06:40 PM, Nathaniel McCallum wrote: > > > On Thu, 2014-10-09 at 18:32 +0200, thierry bordaz wrote: > > > On 10/09/2014 06:27 PM, Nathaniel McCallum wrote: > > > > On Thu, 2014-10-09 at 14:11 +0200, thierry bordaz wrote: > > >

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread thierry bordaz
On 10/09/2014 06:40 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 18:32 +0200, thierry bordaz wrote: On 10/09/2014 06:27 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 14:11 +0200, thierry bordaz wrote: On 10/08/2014 11:46 PM, Nathaniel McCallum wrote: The background of this email

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Ludwig Krispenz
On 10/09/2014 06:53 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 18:38 +0200, Ludwig Krispenz wrote: On 10/09/2014 06:32 PM, thierry bordaz wrote: On 10/09/2014 06:27 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 14:11 +0200, thierry bordaz wrote: On 10/08/2014 11:46 PM, Nathani

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Nathaniel McCallum
On Thu, 2014-10-09 at 18:38 +0200, Ludwig Krispenz wrote: > On 10/09/2014 06:32 PM, thierry bordaz wrote: > > On 10/09/2014 06:27 PM, Nathaniel McCallum wrote: > >> On Thu, 2014-10-09 at 14:11 +0200, thierry bordaz wrote: > >>> On 10/08/2014 11:46 PM, Nathaniel McCallum wrote: > >>> > The back

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Nathaniel McCallum
On Thu, 2014-10-09 at 18:32 +0200, thierry bordaz wrote: > On 10/09/2014 06:27 PM, Nathaniel McCallum wrote: > > On Thu, 2014-10-09 at 14:11 +0200, thierry bordaz wrote: > >> On 10/08/2014 11:46 PM, Nathaniel McCallum wrote: > >> > >>> The background of this email is this bug: > >>> https://fedorah

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Ludwig Krispenz
On 10/09/2014 06:32 PM, thierry bordaz wrote: On 10/09/2014 06:27 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 14:11 +0200, thierry bordaz wrote: On 10/08/2014 11:46 PM, Nathaniel McCallum wrote: The background of this email is this bug: https://fedorahosted.org/freeipa/ticket/4456 A

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread thierry bordaz
On 10/09/2014 06:27 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 14:11 +0200, thierry bordaz wrote: On 10/08/2014 11:46 PM, Nathaniel McCallum wrote: The background of this email is this bug: https://fedorahosted.org/freeipa/ticket/4456 Attached are two patches which solve this issue f

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Nathaniel McCallum
On Thu, 2014-10-09 at 14:11 +0200, thierry bordaz wrote: > On 10/08/2014 11:46 PM, Nathaniel McCallum wrote: > > > The background of this email is this bug: > > https://fedorahosted.org/freeipa/ticket/4456 > > > > Attached are two patches which solve this issue for admin users (not > > very helpf

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Nathaniel McCallum
On Thu, 2014-10-09 at 18:01 +0200, Ludwig Krispenz wrote: > On 10/09/2014 05:51 PM, Nathaniel McCallum wrote: > > On Thu, 2014-10-09 at 16:33 +0200, Ludwig Krispenz wrote: > >> On 10/09/2014 04:27 PM, Simo Sorce wrote: > >>> On Thu, 09 Oct 2014 16:06:06 +0200 > >>> Ludwig Krispenz wrote: > >>> > >

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Ludwig Krispenz
On 10/09/2014 05:51 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 16:33 +0200, Ludwig Krispenz wrote: On 10/09/2014 04:27 PM, Simo Sorce wrote: On Thu, 09 Oct 2014 16:06:06 +0200 Ludwig Krispenz wrote: On 10/09/2014 03:13 PM, Simo Sorce wrote: On Wed, 08 Oct 2014 17:46:01 -0400 Natha

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Nathaniel McCallum
On Thu, 2014-10-09 at 16:33 +0200, Ludwig Krispenz wrote: > On 10/09/2014 04:27 PM, Simo Sorce wrote: > > On Thu, 09 Oct 2014 16:06:06 +0200 > > Ludwig Krispenz wrote: > > > >> On 10/09/2014 03:13 PM, Simo Sorce wrote: > >>> On Wed, 08 Oct 2014 17:46:01 -0400 > >>> Nathaniel McCallum wrote: > >>>

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Ludwig Krispenz
On 10/09/2014 04:47 PM, Simo Sorce wrote: On Thu, 09 Oct 2014 16:33:20 +0200 Ludwig Krispenz wrote: On 10/09/2014 04:27 PM, Simo Sorce wrote: On Thu, 09 Oct 2014 16:06:06 +0200 Ludwig Krispenz wrote: On 10/09/2014 03:13 PM, Simo Sorce wrote: On Wed, 08 Oct 2014 17:46:01 -0400 Nathaniel M

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Simo Sorce
On Thu, 09 Oct 2014 16:33:20 +0200 Ludwig Krispenz wrote: > > On 10/09/2014 04:27 PM, Simo Sorce wrote: > > On Thu, 09 Oct 2014 16:06:06 +0200 > > Ludwig Krispenz wrote: > > > >> On 10/09/2014 03:13 PM, Simo Sorce wrote: > >>> On Wed, 08 Oct 2014 17:46:01 -0400 > >>> Nathaniel McCallum wrote:

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Ludwig Krispenz
On 10/09/2014 04:27 PM, Simo Sorce wrote: On Thu, 09 Oct 2014 16:06:06 +0200 Ludwig Krispenz wrote: On 10/09/2014 03:13 PM, Simo Sorce wrote: On Wed, 08 Oct 2014 17:46:01 -0400 Nathaniel McCallum wrote: The background of this email is this bug: https://fedorahosted.org/freeipa/ticket/4456

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Simo Sorce
On Thu, 09 Oct 2014 16:06:06 +0200 Ludwig Krispenz wrote: > > On 10/09/2014 03:13 PM, Simo Sorce wrote: > > On Wed, 08 Oct 2014 17:46:01 -0400 > > Nathaniel McCallum wrote: > > > >> The background of this email is this bug: > >> https://fedorahosted.org/freeipa/ticket/4456 > >> > >> Attached ar

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Ludwig Krispenz
On 10/09/2014 03:13 PM, Simo Sorce wrote: On Wed, 08 Oct 2014 17:46:01 -0400 Nathaniel McCallum wrote: The background of this email is this bug: https://fedorahosted.org/freeipa/ticket/4456 Attached are two patches which solve this issue for admin users (not very helpful, I know). They depen

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread Simo Sorce
On Wed, 08 Oct 2014 17:46:01 -0400 Nathaniel McCallum wrote: > The background of this email is this bug: > https://fedorahosted.org/freeipa/ticket/4456 > > Attached are two patches which solve this issue for admin users (not > very helpful, I know). They depend on this fix in 389: > https://fedo

Re: [Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-09 Thread thierry bordaz
On 10/08/2014 11:46 PM, Nathaniel McCallum wrote: The background of this email is this bug: https://fedorahosted.org/freeipa/ticket/4456 Attached are two patches which solve this issue for admin users (not very helpful, I know). They depend on this fix in 389: https://fedorahosted.org/389/ticket

[Freeipa-devel] [HELP] Regular users should not be able to add OTP tokens with custom name

2014-10-08 Thread Nathaniel McCallum
The background of this email is this bug: https://fedorahosted.org/freeipa/ticket/4456 Attached are two patches which solve this issue for admin users (not very helpful, I know). They depend on this fix in 389: https://fedorahosted.org/389/ticket/47920 There are two outstanding issues: 1. 389 do

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-21 Thread David O'Brien
Dmitri Pal wrote: On 02/11/2011 10:12 AM, Rob Crittenden wrote: Dmitri Pal wrote: On 02/10/2011 07:25 PM, David O'Brien wrote: Dmitri Pal wrote: On 02/10/2011 03:05 PM, Jakub Hrozek wrote: On 02/10/2011 05:12 PM, Rob Crittenden wrote: But what other roles do we need? The mind boggles and ra

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-11 Thread Dmitri Pal
On 02/11/2011 10:12 AM, Rob Crittenden wrote: > Dmitri Pal wrote: >> On 02/10/2011 07:25 PM, David O'Brien wrote: >>> Dmitri Pal wrote: On 02/10/2011 03:05 PM, Jakub Hrozek wrote: > On 02/10/2011 05:12 PM, Rob Crittenden wrote: >> But what other roles do we need? The mind boggles and r

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-11 Thread Rob Crittenden
Dmitri Pal wrote: On 02/10/2011 07:25 PM, David O'Brien wrote: Dmitri Pal wrote: On 02/10/2011 03:05 PM, Jakub Hrozek wrote: On 02/10/2011 05:12 PM, Rob Crittenden wrote: But what other roles do we need? The mind boggles and rather than dictating what the initial ones will be I'm looking for

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-11 Thread Dmitri Pal
On 02/10/2011 07:25 PM, David O'Brien wrote: > Dmitri Pal wrote: >> On 02/10/2011 03:05 PM, Jakub Hrozek wrote: >>> On 02/10/2011 05:12 PM, Rob Crittenden wrote: But what other roles do we need? The mind boggles and rather than dictating what the initial ones will be I'm looking for some

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-10 Thread David O'Brien
Dmitri Pal wrote: On 02/10/2011 03:05 PM, Jakub Hrozek wrote: On 02/10/2011 05:12 PM, Rob Crittenden wrote: But what other roles do we need? The mind boggles and rather than dictating what the initial ones will be I'm looking for some guidance/suggestions. thanks rob I'm actually wondering i

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-10 Thread Dmitri Pal
On 02/10/2011 03:05 PM, Jakub Hrozek wrote: > On 02/10/2011 05:12 PM, Rob Crittenden wrote: >> But what other roles do we need? The mind boggles and rather than >> dictating what the initial ones will be I'm looking for some >> guidance/suggestions. >> >> thanks >> >> rob > > I'm actually wondering

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-10 Thread Jakub Hrozek
On 02/10/2011 05:12 PM, Rob Crittenden wrote: But what other roles do we need? The mind boggles and rather than dictating what the initial ones will be I'm looking for some guidance/suggestions. thanks rob I'm actually wondering if we need to define many default roles in the upstream project

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-10 Thread Dmitri Pal
On 02/10/2011 01:11 PM, Jan Zeleny wrote: > Rob Crittenden wrote: >> One of the features of IPAv2 is it is much easier to delegate >> permissions to perform tasks (add, delete, modify, etc). >> >> This delegation is broken out into three pieces: >> >> * permissions >> * privileges >> * roles

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-10 Thread Adam Young
On 02/10/2011 01:11 PM, Jan Zeleny wrote: Rob Crittenden wrote: One of the features of IPAv2 is it is much easier to delegate permissions to perform tasks (add, delete, modify, etc). This delegation is broken out into three pieces: * permissions * privileges * roles A permission is

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-10 Thread Jan Zeleny
Rob Crittenden wrote: > One of the features of IPAv2 is it is much easier to delegate > permissions to perform tasks (add, delete, modify, etc). > > This delegation is broken out into three pieces: > > * permissions > * privileges > * roles > > A permission is a very low-level object that

Re: [Freeipa-devel] Help define the roles IPA has by default

2011-02-10 Thread Gowrishankar Rajaiyan
On 02/10/2011 09:42 PM, Rob Crittenden wrote: One of the features of IPAv2 is it is much easier to delegate permissions to perform tasks (add, delete, modify, etc). This delegation is broken out into three pieces: * permissions * privileges * roles A permission is a very low-level object that

[Freeipa-devel] Help define the roles IPA has by default

2011-02-10 Thread Rob Crittenden
One of the features of IPAv2 is it is much easier to delegate permissions to perform tasks (add, delete, modify, etc). This delegation is broken out into three pieces: * permissions * privileges * roles A permission is a very low-level object that says who can do what to whom. These permis