Re: [Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Martin Kosek
On 03/04/2016 02:30 PM, Alexander Bokovoy wrote: > On Fri, 04 Mar 2016, Martin Kosek wrote: >> On 03/04/2016 01:09 PM, Alexander Bokovoy wrote: >>> On Fri, 04 Mar 2016, Martin Kosek wrote: On 03/04/2016 12:59 PM, Alexander Bokovoy wrote: > On Fri, 04 Mar 2016, Martin Kosek wrote: >> On

Re: [Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Alexander Bokovoy
On Fri, 04 Mar 2016, Martin Kosek wrote: On 03/04/2016 01:09 PM, Alexander Bokovoy wrote: On Fri, 04 Mar 2016, Martin Kosek wrote: On 03/04/2016 12:59 PM, Alexander Bokovoy wrote: On Fri, 04 Mar 2016, Martin Kosek wrote: On 03/04/2016 10:10 AM, Alexander Bokovoy wrote: On Fri, 04 Mar 2016, M

Re: [Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Martin Kosek
On 03/04/2016 01:09 PM, Alexander Bokovoy wrote: > On Fri, 04 Mar 2016, Martin Kosek wrote: >> On 03/04/2016 12:59 PM, Alexander Bokovoy wrote: >>> On Fri, 04 Mar 2016, Martin Kosek wrote: On 03/04/2016 10:10 AM, Alexander Bokovoy wrote: > On Fri, 04 Mar 2016, Martin Kosek wrote: >> Hi

Re: [Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Alexander Bokovoy
On Fri, 04 Mar 2016, Martin Kosek wrote: On 03/04/2016 12:59 PM, Alexander Bokovoy wrote: On Fri, 04 Mar 2016, Martin Kosek wrote: On 03/04/2016 10:10 AM, Alexander Bokovoy wrote: On Fri, 04 Mar 2016, Martin Kosek wrote: Hi Alexander and others, As you know, SSSD 1.13.4 added support of read

Re: [Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Martin Kosek
On 03/04/2016 12:59 PM, Alexander Bokovoy wrote: > On Fri, 04 Mar 2016, Martin Kosek wrote: >> On 03/04/2016 10:10 AM, Alexander Bokovoy wrote: >>> On Fri, 04 Mar 2016, Martin Kosek wrote: Hi Alexander and others, As you know, SSSD 1.13.4 added support of reading the native SUDO tree

Re: [Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Alexander Bokovoy
On Fri, 04 Mar 2016, Martin Kosek wrote: On 03/04/2016 10:10 AM, Alexander Bokovoy wrote: On Fri, 04 Mar 2016, Martin Kosek wrote: Hi Alexander and others, As you know, SSSD 1.13.4 added support of reading the native SUDO tree [1]. This means that FreeIPA deployments with all clients being SSS

Re: [Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Martin Kosek
On 03/04/2016 10:10 AM, Alexander Bokovoy wrote: > On Fri, 04 Mar 2016, Martin Kosek wrote: >> Hi Alexander and others, >> >> As you know, SSSD 1.13.4 added support of reading the native SUDO tree [1]. >> This means that FreeIPA deployments with all clients being SSSD 1.13.4 or >> older >> will be

Re: [Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Alexander Bokovoy
On Fri, 04 Mar 2016, Jakub Hrozek wrote: On Fri, Mar 04, 2016 at 11:10:47AM +0200, Alexander Bokovoy wrote: On the other hand, if no users are going to use the configuration, it should not hurt anymore to have it enabled. With current slapi-nis state there should be no problems anymore. I admi

Re: [Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Jakub Hrozek
On Fri, Mar 04, 2016 at 11:10:47AM +0200, Alexander Bokovoy wrote: > On the other hand, if no users are going to use the configuration, it > should not hurt anymore to have it enabled. With current slapi-nis state > there should be no problems anymore. I admit I haven't been following the slapi-ni

Re: [Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Alexander Bokovoy
On Fri, 04 Mar 2016, Martin Kosek wrote: Hi Alexander and others, As you know, SSSD 1.13.4 added support of reading the native SUDO tree [1]. This means that FreeIPA deployments with all clients being SSSD 1.13.4 or older will be able to disable the sudoers schema compatiblity tree (cn=sudoers,c

[Freeipa-devel] Disabling Schema Compatibility rule

2016-03-04 Thread Martin Kosek
Hi Alexander and others, As you know, SSSD 1.13.4 added support of reading the native SUDO tree [1]. This means that FreeIPA deployments with all clients being SSSD 1.13.4 or older will be able to disable the sudoers schema compatiblity tree (cn=sudoers,cn=Schema Compatibility,cn=plugins,cn=config