Re: [Freeipa-devel] [PATCH-SET] 0044-0048 Use SASL/GSSAPI for replication agreements

2011-01-14 Thread Simo Sorce
On Fri, 14 Jan 2011 12:52:45 +0100 Jakub Hrozek wrote: > Ack > > Although probably after yesterday's patches I had to do a 3-way merge > on patch #47, so please check it merges OK. Rebase and pushed to master all 5 patches. Simo. -- Simo Sorce * Red Hat, Inc * New York _

Re: [Freeipa-devel] [PATCH-SET] 0044-0048 Use SASL/GSSAPI for replication agreements

2011-01-14 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/13/2011 09:19 PM, Simo Sorce wrote: > On Thu, 13 Jan 2011 20:19:13 +0100 > Jakub Hrozek wrote: > >> I only found two issues in the winsync codepatch (which I didn't >> test): >> >> +ad_conn = ipaldap.IPAdmin(ad_dc_name, port=636, >>

Re: [Freeipa-devel] [PATCH-SET] 0044-0048 Use SASL/GSSAPI for replication agreements

2011-01-13 Thread Simo Sorce
On Thu, 13 Jan 2011 20:19:13 +0100 Jakub Hrozek wrote: > I only found two issues in the winsync codepatch (which I didn't > test): > > +ad_conn = ipaldap.IPAdmin(ad_dc_name, port=636, > cacert=cacert) > +ad_conn = do_simple_bind(binddn=ad_binddn, bindpw=ad_pwd) > > I thi

Re: [Freeipa-devel] [PATCH-SET] 0044-0048 Use SASL/GSSAPI for replication agreements

2011-01-13 Thread Jakub Hrozek
On 01/12/2011 08:45 PM, Simo Sorce wrote: The exisitng code sets up replication agreements by recycling the Directory Manager password for the Replication Manager user. This causes 2 issues: - If you change the DM password newer replicas will fail to access the older masters as they will hav