Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-05-13 Thread Martin Babinsky
On 05/13/2016 12:07 PM, Alexander Bokovoy wrote: On Thu, 12 May 2016, Martin Babinsky wrote: We should not allow anything after @ not belonging to the list of realm domains. We also will need to extend realm domains to include non-domain-based UPN suffixes. This actually flies close to what I ne

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-05-13 Thread Alexander Bokovoy
On Thu, 12 May 2016, Martin Babinsky wrote: We should not allow anything after @ not belonging to the list of realm domains. We also will need to extend realm domains to include non-domain-based UPN suffixes. This actually flies close to what I need to finish in my AD trust UPN patches, so I need

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-05-12 Thread Martin Babinsky
On 05/09/2016 08:26 AM, Alexander Bokovoy wrote: On Fri, 06 May 2016, Martin Babinsky wrote: On 05/05/2016 02:58 PM, Milan Kubík wrote: On 04/08/2016 05:10 PM, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principa

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-05-08 Thread Alexander Bokovoy
On Fri, 06 May 2016, Martin Babinsky wrote: On 05/05/2016 02:58 PM, Milan Kubík wrote: On 04/08/2016 05:10 PM, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in both backend and frontend layers of FreeIPA

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-05-06 Thread Martin Babinsky
On 05/05/2016 02:58 PM, Milan Kubík wrote: On 04/08/2016 05:10 PM, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in both backend and frontend layers of FreeIPA so that we may have multiple aliases per user

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-05-06 Thread Martin Babinsky
On 05/06/2016 02:57 PM, Martin Kosek wrote: On 04/18/2016 10:31 AM, Martin Kosek wrote: On 04/08/2016 05:10 PM, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in both backend and frontend layers of FreeIPA

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-05-06 Thread Martin Kosek
On 04/18/2016 10:31 AM, Martin Kosek wrote: > On 04/08/2016 05:10 PM, Martin Babinsky wrote: >> Hi list, >> >> I have put together a draft [1] outlining the effort to reimplement the >> handling of Kerberos principals in both backend and frontend layers of >> FreeIPA >> so that we may have multipl

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-05-05 Thread Milan Kubík
On 04/08/2016 05:10 PM, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in both backend and frontend layers of FreeIPA so that we may have multiple aliases per user, host or service and thus implement stuf

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-19 Thread Simo Sorce
On Tue, 2016-04-19 at 12:37 +0200, Martin Babinsky wrote: > On 04/19/2016 10:11 AM, David Kupka wrote: > > On 18/04/16 21:42, Simo Sorce wrote: > >> On Wed, 2016-04-13 at 07:50 +0200, David Kupka wrote: > >>> On 08/04/16 17:10, Martin Babinsky wrote: > Hi list, > > I have put togethe

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-19 Thread Martin Babinsky
On 04/19/2016 10:11 AM, David Kupka wrote: On 18/04/16 21:42, Simo Sorce wrote: On Wed, 2016-04-13 at 07:50 +0200, David Kupka wrote: On 08/04/16 17:10, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in b

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-19 Thread David Kupka
On 18/04/16 21:42, Simo Sorce wrote: On Wed, 2016-04-13 at 07:50 +0200, David Kupka wrote: On 08/04/16 17:10, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in both backend and frontend layers of FreeIPA s

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-18 Thread Simo Sorce
On Wed, 2016-04-13 at 07:50 +0200, David Kupka wrote: > On 08/04/16 17:10, Martin Babinsky wrote: > > Hi list, > > > > I have put together a draft [1] outlining the effort to reimplement the > > handling of Kerberos principals in both backend and frontend layers of > > FreeIPA so that we may have m

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-18 Thread Martin Kosek
On 04/08/2016 05:10 PM, Martin Babinsky wrote: > Hi list, > > I have put together a draft [1] outlining the effort to reimplement the > handling of Kerberos principals in both backend and frontend layers of FreeIPA > so that we may have multiple aliases per user, host or service and thus > impleme

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-13 Thread Martin Babinsky
On 04/13/2016 07:50 AM, David Kupka wrote: On 08/04/16 17:10, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in both backend and frontend layers of FreeIPA so that we may have multiple aliases per user, hos

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-12 Thread David Kupka
On 08/04/16 17:10, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in both backend and frontend layers of FreeIPA so that we may have multiple aliases per user, host or service and thus implement stuff like h

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-12 Thread Petr Spacek
On 11.4.2016 16:58, thierry bordaz wrote: > > > On 04/11/2016 04:51 PM, Simo Sorce wrote: >> On Mon, 2016-04-11 at 16:29 +0200, thierry bordaz wrote: >>> On 04/08/2016 05:10 PM, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-11 Thread thierry bordaz
On 04/11/2016 04:51 PM, Simo Sorce wrote: On Mon, 2016-04-11 at 16:29 +0200, thierry bordaz wrote: On 04/08/2016 05:10 PM, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in both backend and frontend laye

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-11 Thread Simo Sorce
On Mon, 2016-04-11 at 16:29 +0200, thierry bordaz wrote: > > On 04/08/2016 05:10 PM, Martin Babinsky wrote: > > Hi list, > > > > I have put together a draft [1] outlining the effort to reimplement > > the handling of Kerberos principals in both backend and frontend > > layers of FreeIPA so that

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-11 Thread thierry bordaz
On 04/08/2016 05:10 PM, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in both backend and frontend layers of FreeIPA so that we may have multiple aliases per user, host or service and thus implement st

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-11 Thread Simo Sorce
On Mon, 2016-04-11 at 12:50 +0200, Martin Babinsky wrote: > On 04/11/2016 11:05 AM, Petr Spacek wrote: > > On 8.4.2016 17:10, Martin Babinsky wrote: > >> Hi list, > >> > >> I have put together a draft [1] outlining the effort to reimplement the > >> handling of Kerberos principals in both backend a

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-11 Thread Martin Babinsky
On 04/11/2016 11:05 AM, Petr Spacek wrote: On 8.4.2016 17:10, Martin Babinsky wrote: Hi list, I have put together a draft [1] outlining the effort to reimplement the handling of Kerberos principals in both backend and frontend layers of FreeIPA so that we may have multiple aliases per user, hos

Re: [Freeipa-devel] [DESIGN] Kerberos principal alias handling

2016-04-11 Thread Petr Spacek
On 8.4.2016 17:10, Martin Babinsky wrote: > Hi list, > > I have put together a draft [1] outlining the effort to reimplement the > handling of Kerberos principals in both backend and frontend layers of FreeIPA > so that we may have multiple aliases per user, host or service and thus > implement st