Re: [Freeipa-devel] Some thoughts about login services

2010-10-18 Thread Rob Crittenden
Dmitri Pal wrote: Simo Sorce wrote: On Fri, 15 Oct 2010 14:12:22 -0400 Dmitri Pald...@redhat.com wrote: Simo Sorce wrote: I'd go for the last one, may be ugly, but does not undo anything that already works and has the effect of simplifying the UI which is what you are after right now.

Re: [Freeipa-devel] Some thoughts about login services

2010-10-15 Thread Rob Crittenden
Dmitri Pal wrote: Hello, Currently HBAC login group is defined as: objectClasses: (2.16.840.1.113730.3.8.4.11 NAME 'ipaHBACServiceGroup' DESC 'IPA HBAC service group object class' SUP nestedGroup STRUCTURAL X-ORIGIN 'IPA v2' ) Which means it can be nested. In the recent discussion about SUDO

Re: [Freeipa-devel] Some thoughts about login services

2010-10-15 Thread Dmitri Pal
Simo Sorce wrote: On Fri, 15 Oct 2010 11:36:50 -0400 Dmitri Pal d...@redhat.com wrote: Hello, Currently HBAC login group is defined as: objectClasses: (2.16.840.1.113730.3.8.4.11 NAME 'ipaHBACServiceGroup' DESC 'IPA HBAC service group object class' SUP nestedGroup STRUCTURAL X-ORIGIN

Re: [Freeipa-devel] Some thoughts about login services

2010-10-15 Thread Simo Sorce
On Fri, 15 Oct 2010 14:12:22 -0400 Dmitri Pal d...@redhat.com wrote: Simo Sorce wrote: I'd go for the last one, may be ugly, but does not undo anything that already works and has the effect of simplifying the UI which is what you are after right now. Of course that also means the UI will

Re: [Freeipa-devel] Some thoughts about login services

2010-10-15 Thread Dmitri Pal
Simo Sorce wrote: On Fri, 15 Oct 2010 14:12:22 -0400 Dmitri Pal d...@redhat.com wrote: Simo Sorce wrote: I'd go for the last one, may be ugly, but does not undo anything that already works and has the effect of simplifying the UI which is what you are after right now. Of