Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-04 Thread Alexander Bokovoy
On Fri, 04 Oct 2013, Alexander Bokovoy wrote: On Thu, 03 Oct 2013, Martin Kosek wrote: On 10/03/2013 03:10 PM, Alexander Bokovoy wrote: On Wed, 02 Oct 2013, Sumit Bose wrote: Please note that I did not test with more than 1 subdomain, since I do not have more ADs available. I have done

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-04 Thread Alexander Bokovoy
On Thu, 03 Oct 2013, Sumit Bose wrote: On Thu, Oct 03, 2013 at 06:04:24PM +0200, Martin Kosek wrote: On 10/03/2013 03:10 PM, Alexander Bokovoy wrote: On Wed, 02 Oct 2013, Sumit Bose wrote: Please note that I did not test with more than 1 subdomain, since I do not have more ADs available.

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-04 Thread Alexander Bokovoy
On Fri, 04 Oct 2013, Alexander Bokovoy wrote: On Fri, 04 Oct 2013, Alexander Bokovoy wrote: On Thu, 03 Oct 2013, Martin Kosek wrote: On 10/03/2013 03:10 PM, Alexander Bokovoy wrote: On Wed, 02 Oct 2013, Sumit Bose wrote: Please note that I did not test with more than 1 subdomain, since I do

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-04 Thread Martin Kosek
On 10/04/2013 09:40 AM, Alexander Bokovoy wrote: On Fri, 04 Oct 2013, Alexander Bokovoy wrote: On Fri, 04 Oct 2013, Alexander Bokovoy wrote: On Thu, 03 Oct 2013, Martin Kosek wrote: On 10/03/2013 03:10 PM, Alexander Bokovoy wrote: On Wed, 02 Oct 2013, Sumit Bose wrote: Please note that I did

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-03 Thread Sumit Bose
On Thu, Oct 03, 2013 at 12:01:35AM +0300, Alexander Bokovoy wrote: On Wed, 02 Oct 2013, Tomas Babej wrote: I'll send new patchset shortly. New patchset is attached. 1. Added test update for ipalib/frontend.py changes 2. Used LDAPQuery as base for trustdomain_enable|disable commands as

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-03 Thread Jan Cholasta
On 2.10.2013 23:01, Alexander Bokovoy wrote: On Wed, 02 Oct 2013, Tomas Babej wrote: 2.) The trust-fetch-domains has somewhat confusing options: [tbabej@vm-147 labtool]$ ipa trust-fetch-domains tbad.idm.lab.eng.brq.redhat.com --help Usage: ipa [global-options] trust-fetch-domains REALM

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-03 Thread Martin Kosek
On 10/03/2013 03:10 PM, Alexander Bokovoy wrote: On Wed, 02 Oct 2013, Sumit Bose wrote: Please note that I did not test with more than 1 subdomain, since I do not have more ADs available. I have done some testing as well and the patches are working as expected except the trustdomain-disable

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-03 Thread Sumit Bose
On Thu, Oct 03, 2013 at 06:04:24PM +0200, Martin Kosek wrote: On 10/03/2013 03:10 PM, Alexander Bokovoy wrote: On Wed, 02 Oct 2013, Sumit Bose wrote: Please note that I did not test with more than 1 subdomain, since I do not have more ADs available. I have done some testing as well

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-03 Thread Alexander Bokovoy
On Thu, 03 Oct 2013, Martin Kosek wrote: On 10/03/2013 03:10 PM, Alexander Bokovoy wrote: On Wed, 02 Oct 2013, Sumit Bose wrote: Please note that I did not test with more than 1 subdomain, since I do not have more ADs available. I have done some testing as well and the patches are working

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-02 Thread Tomas Babej
On 10/01/2013 05:15 PM, Alexander Bokovoy wrote: On Mon, 30 Sep 2013, Alexander Bokovoy wrote: On Mon, 30 Sep 2013, Tomas Babej wrote: On 09/28/2013 10:01 PM, Alexander Bokovoy wrote: On Fri, 27 Sep 2013, Sumit Bose wrote: On Fri, Sep 27, 2013 at 03:53:08PM +0300, Alexander Bokovoy wrote:

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-02 Thread Alexander Bokovoy
On Wed, 02 Oct 2013, Tomas Babej wrote: I'll send new patchset shortly. New patchset is attached. 1. Added test update for ipalib/frontend.py changes 2. Used LDAPQuery as base for trustdomain_enable|disable commands as suggested by Honza. 3. Fixed issues with removal of trust account password

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-10-02 Thread Sumit Bose
On Wed, Oct 02, 2013 at 10:31:21PM +0200, Tomas Babej wrote: On 10/01/2013 05:15 PM, Alexander Bokovoy wrote: On Mon, 30 Sep 2013, Alexander Bokovoy wrote: On Mon, 30 Sep 2013, Tomas Babej wrote: On 09/28/2013 10:01 PM, Alexander Bokovoy wrote: On Fri, 27 Sep 2013, Sumit Bose wrote: On Fri,

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-30 Thread Jan Cholasta
On 28.9.2013 22:01, Alexander Bokovoy wrote: On Fri, 27 Sep 2013, Sumit Bose wrote: On Fri, Sep 27, 2013 at 03:53:08PM +0300, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-30 Thread Alexander Bokovoy
On Mon, 30 Sep 2013, Jan Cholasta wrote: On 28.9.2013 22:01, Alexander Bokovoy wrote: On Fri, 27 Sep 2013, Sumit Bose wrote: On Fri, Sep 27, 2013 at 03:53:08PM +0300, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon,

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-30 Thread Alexander Bokovoy
On Mon, 30 Sep 2013, Sumit Bose wrote: On Sat, Sep 28, 2013 at 11:01:34PM +0300, Alexander Bokovoy wrote: On Fri, 27 Sep 2013, Sumit Bose wrote: On Fri, Sep 27, 2013 at 03:53:08PM +0300, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-30 Thread Tomas Babej
On 09/28/2013 10:01 PM, Alexander Bokovoy wrote: On Fri, 27 Sep 2013, Sumit Bose wrote: On Fri, Sep 27, 2013 at 03:53:08PM +0300, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote:

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-30 Thread Alexander Bokovoy
On Mon, 30 Sep 2013, Tomas Babej wrote: On 09/28/2013 10:01 PM, Alexander Bokovoy wrote: On Fri, 27 Sep 2013, Sumit Bose wrote: On Fri, Sep 27, 2013 at 03:53:08PM +0300, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-28 Thread Alexander Bokovoy
On Fri, 27 Sep 2013, Sumit Bose wrote: On Fri, Sep 27, 2013 at 03:53:08PM +0300, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Martin Kosek wrote: However,

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-27 Thread Sumit Bose
On Mon, Sep 23, 2013 at 06:04:22PM +0300, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Martin Kosek wrote: However, we don't have trust type available so it needs to discovered every time. This

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-27 Thread Alexander Bokovoy
On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Martin Kosek wrote: However, we don't have trust type available so it needs to discovered every time. This doesn't play well with the

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-27 Thread Alexander Bokovoy
On Fri, 27 Sep 2013, Sumit Bose wrote: On Mon, Sep 23, 2013 at 06:04:22PM +0300, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Martin Kosek wrote: However, we don't have trust type available so it needs

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-27 Thread Sumit Bose
On Fri, Sep 27, 2013 at 03:53:08PM +0300, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Martin Kosek wrote: However, we don't have trust type available so

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-23 Thread Martin Kosek
On 09/20/2013 01:59 PM, Jan Cholasta wrote: On 20.9.2013 12:55, Alexander Bokovoy wrote: 1) The object is named subdomain, but the commands are named trust_domain_*. Please use the object name as the base for command names. I would suggest renaming the object to trustdomain, as the framework

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-23 Thread Alexander Bokovoy
On Mon, 23 Sep 2013, Martin Kosek wrote: However, we don't have trust type available so it needs to discovered every time. This doesn't play well with the framework, it is simply not expecting dynamic containers. This doesn't sound like a big obstacle to me. Right now the trust_type lookup is

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-23 Thread Alexander Bokovoy
On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Martin Kosek wrote: However, we don't have trust type available so it needs to discovered every time. This doesn't play well with the framework, it is simply not expecting dynamic containers. This doesn't sound like a big

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-23 Thread Alexander Bokovoy
On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Alexander Bokovoy wrote: On Mon, 23 Sep 2013, Martin Kosek wrote: However, we don't have trust type available so it needs to discovered every time. This doesn't play well with the framework, it is simply not expecting dynamic

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-20 Thread Jan Cholasta
On 19.9.2013 21:08, Alexander Bokovoy wrote: Hi! Attached patch adds IPA CLI to manage trust subdomains. ipa trust-domain-fetch trust -- fetch list of subdomains from AD side and add new ones to IPA ipa trust-domain-find trust-- show all available subdomains ipa trust-domain-del trust

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-20 Thread Alexander Bokovoy
On Fri, 20 Sep 2013, Jan Cholasta wrote: On 19.9.2013 21:08, Alexander Bokovoy wrote: Hi! Attached patch adds IPA CLI to manage trust subdomains. ipa trust-domain-fetch trust -- fetch list of subdomains from AD side and add new ones to IPA ipa trust-domain-find trust-- show all

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-20 Thread Jan Cholasta
On 20.9.2013 09:36, Alexander Bokovoy wrote: On Fri, 20 Sep 2013, Jan Cholasta wrote: On 19.9.2013 21:08, Alexander Bokovoy wrote: Hi! Attached patch adds IPA CLI to manage trust subdomains. ipa trust-domain-fetch trust -- fetch list of subdomains from AD side and add new ones to IPA ipa

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-20 Thread Alexander Bokovoy
On Fri, 20 Sep 2013, Jan Cholasta wrote: part of https://fedorahosted.org/freeipa/ticket/3909 The patch implements some dark magic to get around IPA framework limitations: -- CLI commands belong to 'trust' family but operate on 'subdomain' object -- 'subdomain' objects are stored under trust

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-20 Thread Jan Cholasta
On 20.9.2013 12:55, Alexander Bokovoy wrote: 1) The object is named subdomain, but the commands are named trust_domain_*. Please use the object name as the base for command names. I would suggest renaming the object to trustdomain, as the framework does not allow underscores in object names, and

Re: [Freeipa-devel] [PATCH] 0118 add support for subdomains

2013-09-20 Thread Sumit Bose
On Thu, Sep 19, 2013 at 10:08:37PM +0300, Alexander Bokovoy wrote: Hi! Attached patch adds IPA CLI to manage trust subdomains. ipa trust-domain-fetch trust -- fetch list of subdomains from AD side and add new ones to IPA ipa trust-domain-find trust-- show all available subdomains