Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-12-03 Thread Petr Viktorin
On 11/28/2013 04:59 PM, Nathaniel McCallum wrote: Everything looks good to me. +1 Pushed to master: a1f32fa9369109235dba041de9c972da09d8448a -- PetrĀ³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/fr

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-28 Thread Nathaniel McCallum
Everything looks good to me. +1 On Thu, 2013-11-28 at 12:18 +0100, Petr Viktorin wrote: > Thanks! > Just a bit of cleaning up now, sending a patch with proposed changes to > speed things up. > > Patch needs a tiny rebase. > Points I missed: > - There are some unused imports. > - ValidationError

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-27 Thread Nathaniel McCallum
On Wed, 2013-11-27 at 12:28 +0100, Petr Viktorin wrote: > >> ipatokenradiusserver is not validated. See validate_searchtimelimit in > >> the config plugin for an example validator. You can use validate_ipaddr > >> and validate_hostname from ipalib.util. > > > > Fixed. > > Now the validation is too

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-27 Thread Simo Sorce
On Wed, 2013-11-27 at 15:12 -0500, Nathaniel McCallum wrote: > On Wed, 2013-11-27 at 14:34 +, Simo Sorce wrote: > > On Thu, 2013-11-21 at 15:54 -0500, Dmitri Pal wrote: > > > On 11/21/2013 01:34 PM, Nathaniel McCallum wrote: > > > >> The password can be retrieved with radiusproxy-show --all, be

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-27 Thread Nathaniel McCallum
On Wed, 2013-11-27 at 14:34 +, Simo Sorce wrote: > On Thu, 2013-11-21 at 15:54 -0500, Dmitri Pal wrote: > > On 11/21/2013 01:34 PM, Nathaniel McCallum wrote: > > >> The password can be retrieved with radiusproxy-show --all, because it is > > >> > not blocked by LDAP ACIs. Is that intended? > >

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-27 Thread Simo Sorce
On Thu, 2013-11-21 at 15:54 -0500, Dmitri Pal wrote: > On 11/21/2013 01:34 PM, Nathaniel McCallum wrote: > >> The password can be retrieved with radiusproxy-show --all, because it is > >> > not blocked by LDAP ACIs. Is that intended? > > Yes. But I'm torn as to whether or not this is a good idea.

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-27 Thread Petr Viktorin
Sorry for the late review! On 11/21/2013 07:34 PM, Nathaniel McCallum wrote: On Fri, 2013-11-15 at 12:34 +0100, Petr Viktorin wrote: The password can be retrieved with radiusproxy-show --all, because it is not blocked by LDAP ACIs. Is that intended? Yes. But I'm torn as to whether or not th

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-27 Thread Petr Viktorin
On 11/21/2013 09:54 PM, Dmitri Pal wrote: On 11/21/2013 01:34 PM, Nathaniel McCallum wrote: The password can be retrieved with radiusproxy-show --all, because it is not blocked by LDAP ACIs. Is that intended? Yes. But I'm torn as to whether or not this is a good idea. Regular users can't see r

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-21 Thread Dmitri Pal
On 11/21/2013 01:34 PM, Nathaniel McCallum wrote: >> The password can be retrieved with radiusproxy-show --all, because it is >> > not blocked by LDAP ACIs. Is that intended? > Yes. But I'm torn as to whether or not this is a good idea. Regular > users can't see radius proxy servers at all. Admins

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-21 Thread Nathaniel McCallum
On Fri, 2013-11-15 at 12:34 +0100, Petr Viktorin wrote: > On 11/12/2013 12:17 AM, Nathaniel McCallum wrote: > > On Fri, 2013-11-08 at 13:26 +0100, Petr Viktorin wrote: > >> >On 09/25/2013 10:56 PM, Nathaniel McCallum wrote: > >>> > >On Fri, 2013-09-20 at 12:38 -0400, Nathaniel McCallum wrote: > >>>

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-18 Thread Petr Viktorin
On 11/15/2013 12:34 PM, Petr Viktorin wrote: On 11/12/2013 12:17 AM, Nathaniel McCallum wrote: On Fri, 2013-11-08 at 13:26 +0100, Petr Viktorin wrote: >We've since decided that we'll carry LDAP "content" updates only in >update files, so you can leave indices.ldif & referint-conf.ldif unchang

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-15 Thread Petr Viktorin
On 11/12/2013 12:17 AM, Nathaniel McCallum wrote: On Fri, 2013-11-08 at 13:26 +0100, Petr Viktorin wrote: >On 09/25/2013 10:56 PM, Nathaniel McCallum wrote: > >On Fri, 2013-09-20 at 12:38 -0400, Nathaniel McCallum wrote: > >>On Thu, 2013-09-12 at 16:48 -0400, Nathaniel McCallum wrote: > >>>On

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-11 Thread Nathaniel McCallum
On Fri, 2013-11-08 at 13:26 +0100, Petr Viktorin wrote: > On 09/25/2013 10:56 PM, Nathaniel McCallum wrote: > > On Fri, 2013-09-20 at 12:38 -0400, Nathaniel McCallum wrote: > >> On Thu, 2013-09-12 at 16:48 -0400, Nathaniel McCallum wrote: > >>> On Thu, 2013-09-05 at 00:06 -0400, Nathaniel McCallum

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-11-08 Thread Petr Viktorin
On 09/25/2013 10:56 PM, Nathaniel McCallum wrote: On Fri, 2013-09-20 at 12:38 -0400, Nathaniel McCallum wrote: On Thu, 2013-09-12 at 16:48 -0400, Nathaniel McCallum wrote: On Thu, 2013-09-05 at 00:06 -0400, Nathaniel McCallum wrote: patch attached Update for ./makeapi attached. Version 3.

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-09-25 Thread Nathaniel McCallum
On Fri, 2013-09-20 at 12:38 -0400, Nathaniel McCallum wrote: > On Thu, 2013-09-12 at 16:48 -0400, Nathaniel McCallum wrote: > > On Thu, 2013-09-05 at 00:06 -0400, Nathaniel McCallum wrote: > > > patch attached > > > > Update for ./makeapi attached. > > Version 3. This should fix all the current r

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-09-24 Thread Nathan Kinder
On 09/20/2013 09:38 AM, Nathaniel McCallum wrote: On Thu, 2013-09-12 at 16:48 -0400, Nathaniel McCallum wrote: On Thu, 2013-09-05 at 00:06 -0400, Nathaniel McCallum wrote: patch attached Update for ./makeapi attached. Version 3. This should fix all the current review issues, including the use

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-09-20 Thread Nathaniel McCallum
On Thu, 2013-09-12 at 16:48 -0400, Nathaniel McCallum wrote: > On Thu, 2013-09-05 at 00:06 -0400, Nathaniel McCallum wrote: > > patch attached > > Update for ./makeapi attached. Version 3. This should fix all the current review issues, including the use of the referential integrity plugin. I had

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-09-13 Thread Jan Cholasta
On 13.9.2013 09:21, Jan Cholasta wrote: Hi, On 12.9.2013 22:48, Nathaniel McCallum wrote: On Thu, 2013-09-05 at 00:06 -0400, Nathaniel McCallum wrote: patch attached Update for ./makeapi attached. +if 'ipatokenradiusconfiglink' in entry_attrs: +cl = entry_attrs['ipatok

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-09-13 Thread Jan Cholasta
Hi, On 12.9.2013 22:48, Nathaniel McCallum wrote: On Thu, 2013-09-05 at 00:06 -0400, Nathaniel McCallum wrote: patch attached Update for ./makeapi attached. +if 'ipatokenradiusconfiglink' in entry_attrs: +cl = entry_attrs['ipatokenradiusconfiglink'] +if not

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-09-12 Thread Nathaniel McCallum
On Thu, 2013-09-05 at 00:06 -0400, Nathaniel McCallum wrote: > patch attached Update for ./makeapi attached. >From 8add59e470606caec4fe5ef87f5261a2b7f7f52f Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum Date: Wed, 4 Sep 2013 23:45:00 -0400 Subject: [PATCH] Add RADIUS proxy support to ipalib CL

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-09-05 Thread Dmitri Pal
On 09/05/2013 12:29 AM, Nathaniel McCallum wrote: > I forgot to mention that this code ignores the design page in one area: > radius-show does not list the users attached to this server. How > important is this? user-find --radius=MyRADIUSServer should find all the > users. > > Nathaniel > > __

Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-09-04 Thread Nathaniel McCallum
I forgot to mention that this code ignores the design page in one area: radius-show does not list the users attached to this server. How important is this? user-find --radius=MyRADIUSServer should find all the users. Nathaniel ___ Freeipa-devel mailing