Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-07-15 Thread Simo Sorce
On Fri, 2016-07-15 at 14:29 +0200, Stanislav Laznicka wrote: > On 07/15/2016 02:10 PM, Simo Sorce wrote: > > > > On Wed, 2016-05-18 at 15:28 +0200, Stanislav Laznicka wrote: > > > > > > On 05/18/2016 02:19 PM, Alexander Bokovoy wrote: > > > > > > > > On Wed, 18 May 2016, Stanislav Laznicka

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-07-15 Thread Stanislav Laznicka
On 07/15/2016 02:10 PM, Simo Sorce wrote: On Wed, 2016-05-18 at 15:28 +0200, Stanislav Laznicka wrote: On 05/18/2016 02:19 PM, Alexander Bokovoy wrote: On Wed, 18 May 2016, Stanislav Laznicka wrote: when removal succeeds but addition fails for some reason? The operation is not atomic anymore.

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-07-15 Thread Simo Sorce
On Wed, 2016-05-18 at 15:28 +0200, Stanislav Laznicka wrote: > On 05/18/2016 02:19 PM, Alexander Bokovoy wrote: > > > > On Wed, 18 May 2016, Stanislav Laznicka wrote: > > > > > > > > > > > > > > > > > when removal succeeds but addition fails for some reason? > > > > > TheĀ  > > > > > operation

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Jakub Hrozek
On Wed, May 18, 2016 at 05:13:11PM +0300, Alexander Bokovoy wrote: > On Wed, 18 May 2016, Stanislav Laznicka wrote: > > On 05/18/2016 02:19 PM, Alexander Bokovoy wrote: > > > On Wed, 18 May 2016, Stanislav Laznicka wrote: > > > > > > when removal succeeds but addition fails for some > > > > > >

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Martin Basti
On 18.05.2016 16:13, Alexander Bokovoy wrote: On Wed, 18 May 2016, Stanislav Laznicka wrote: On 05/18/2016 02:19 PM, Alexander Bokovoy wrote: On Wed, 18 May 2016, Stanislav Laznicka wrote: when removal succeeds but addition fails for some reason? The operation is not atomic anymore. We

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Alexander Bokovoy
On Wed, 18 May 2016, Stanislav Laznicka wrote: On 05/18/2016 02:19 PM, Alexander Bokovoy wrote: On Wed, 18 May 2016, Stanislav Laznicka wrote: when removal succeeds but addition fails for some reason? The operation is not atomic anymore. We offline-discussed this with Honza. There should

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Stanislav Laznicka
On 05/18/2016 02:19 PM, Alexander Bokovoy wrote: On Wed, 18 May 2016, Stanislav Laznicka wrote: when removal succeeds but addition fails for some reason? The operation is not atomic anymore. We offline-discussed this with Honza. There should be a new command `ipa

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Alexander Bokovoy
On Wed, 18 May 2016, Stanislav Laznicka wrote: when removal succeeds but addition fails for some reason? The operation is not atomic anymore. We offline-discussed this with Honza. There should be a new command `ipa hbacrule-replace-accesstime rule_name --orig-time=icalstr1

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Stanislav Laznicka
On 05/18/2016 01:47 PM, Stanislav Laznicka wrote: On 05/18/2016 01:15 PM, Stanislav Laznicka wrote: On 05/18/2016 01:00 PM, Petr Spacek wrote: On 18.5.2016 12:52, Jan Cholasta wrote: On 18.5.2016 12:43, Stanislav Laznicka wrote: On 05/18/2016 12:38 PM, Jan Cholasta wrote: On 18.5.2016

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Martin Basti
On 18.05.2016 13:47, Stanislav Laznicka wrote: On 05/18/2016 01:15 PM, Stanislav Laznicka wrote: On 05/18/2016 01:00 PM, Petr Spacek wrote: On 18.5.2016 12:52, Jan Cholasta wrote: On 18.5.2016 12:43, Stanislav Laznicka wrote: On 05/18/2016 12:38 PM, Jan Cholasta wrote: On 18.5.2016 12:23,

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Stanislav Laznicka
On 05/18/2016 01:15 PM, Stanislav Laznicka wrote: On 05/18/2016 01:00 PM, Petr Spacek wrote: On 18.5.2016 12:52, Jan Cholasta wrote: On 18.5.2016 12:43, Stanislav Laznicka wrote: On 05/18/2016 12:38 PM, Jan Cholasta wrote: On 18.5.2016 12:23, Petr Spacek wrote: On 18.5.2016 08:25, Stanislav

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Jan Cholasta
On 18.5.2016 13:00, Petr Spacek wrote: On 18.5.2016 12:52, Jan Cholasta wrote: On 18.5.2016 12:43, Stanislav Laznicka wrote: On 05/18/2016 12:38 PM, Jan Cholasta wrote: On 18.5.2016 12:23, Petr Spacek wrote: On 18.5.2016 08:25, Stanislav Laznicka wrote: On 05/17/2016 12:40 PM, Petr Spacek

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Stanislav Laznicka
On 05/18/2016 01:00 PM, Petr Spacek wrote: On 18.5.2016 12:52, Jan Cholasta wrote: On 18.5.2016 12:43, Stanislav Laznicka wrote: On 05/18/2016 12:38 PM, Jan Cholasta wrote: On 18.5.2016 12:23, Petr Spacek wrote: On 18.5.2016 08:25, Stanislav Laznicka wrote: On 05/17/2016 12:40 PM, Petr

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Petr Spacek
On 18.5.2016 12:52, Jan Cholasta wrote: > On 18.5.2016 12:43, Stanislav Laznicka wrote: >> On 05/18/2016 12:38 PM, Jan Cholasta wrote: >>> On 18.5.2016 12:23, Petr Spacek wrote: On 18.5.2016 08:25, Stanislav Laznicka wrote: > On 05/17/2016 12:40 PM, Petr Spacek wrote: >> On 13.5.2016

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Jan Cholasta
On 18.5.2016 12:43, Stanislav Laznicka wrote: On 05/18/2016 12:38 PM, Jan Cholasta wrote: On 18.5.2016 12:23, Petr Spacek wrote: On 18.5.2016 08:25, Stanislav Laznicka wrote: On 05/17/2016 12:40 PM, Petr Spacek wrote: On 13.5.2016 13:50, Stanislav Laznicka wrote: Hello list, We had a

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Stanislav Laznicka
On 05/18/2016 12:38 PM, Jan Cholasta wrote: On 18.5.2016 12:23, Petr Spacek wrote: On 18.5.2016 08:25, Stanislav Laznicka wrote: On 05/17/2016 12:40 PM, Petr Spacek wrote: On 13.5.2016 13:50, Stanislav Laznicka wrote: Hello list, We had a discussion today over integrating the Time Rules

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Jan Cholasta
On 18.5.2016 12:23, Petr Spacek wrote: On 18.5.2016 08:25, Stanislav Laznicka wrote: On 05/17/2016 12:40 PM, Petr Spacek wrote: On 13.5.2016 13:50, Stanislav Laznicka wrote: Hello list, We had a discussion today over integrating the Time Rules into the CLI and WebUI and a problem came up

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Petr Spacek
On 18.5.2016 08:25, Stanislav Laznicka wrote: > On 05/17/2016 12:40 PM, Petr Spacek wrote: >> On 13.5.2016 13:50, Stanislav Laznicka wrote: >>> Hello list, >>> >>> We had a discussion today over integrating the Time Rules into the CLI and >>> WebUI and a problem came up with with the current

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-18 Thread Stanislav Laznicka
On 05/17/2016 12:40 PM, Petr Spacek wrote: On 13.5.2016 13:50, Stanislav Laznicka wrote: Hello list, We had a discussion today over integrating the Time Rules into the CLI and WebUI and a problem came up with with the current solution. It seems that while having templating handled by

Re: [Freeipa-devel] [DESIGN] Time-Based HBAC Policies

2016-05-17 Thread Petr Spacek
On 13.5.2016 13:50, Stanislav Laznicka wrote: > Hello list, > > We had a discussion today over integrating the Time Rules into the CLI and > WebUI and a problem came up with with the current solution. It seems that > while having templating handled by CoSTemplates might be nice in terms of easy >