Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-02-14 Thread Martin Kosek
On Thu, 2012-02-09 at 18:18 +0100, Jan Cholasta wrote: On 8.2.2012 16:35, Rob Crittenden wrote: Jan Cholasta wrote: Patch 62: need a failsafe to remove CCACHE_FILE in case something goes wrong. I should note too that this won't work on platforms prior to Python 2.6 (RHEL-5 is one). This

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-02-14 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2012-02-09 at 18:18 +0100, Jan Cholasta wrote: On 8.2.2012 16:35, Rob Crittenden wrote: Jan Cholasta wrote: Patch 62: need a failsafe to remove CCACHE_FILE in case something goes wrong. I should note too that this won't work on platforms prior to Python 2.6 (RHEL-5

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-02-14 Thread Martin Kosek
On Tue, 2012-02-14 at 15:33 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2012-02-09 at 18:18 +0100, Jan Cholasta wrote: On 8.2.2012 16:35, Rob Crittenden wrote: Jan Cholasta wrote: Patch 62: need a failsafe to remove CCACHE_FILE in case something goes wrong. I should note

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-02-09 Thread Rob Townley
Are host private keys generated on the local machine and never leave the machine? Are user private keys kept in a secure area of FreeIPA so they have the same keyring when logging in from different machines? ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-02-09 Thread Rob Crittenden
Rob Townley wrote: Are host private keys generated on the local machine and never leave the machine? Are user private keys kept in a secure area of FreeIPA so they have the same keyring when logging in from different machines? IPA only stores public keys, not private keys, in all cases,

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-02-08 Thread Jan Cholasta
On 8.2.2012 04:23, Rob Crittenden wrote: Jan Cholasta wrote: Dne 7.2.2012 00:04, Rob Crittenden napsal(a): Jan Cholasta wrote: Updated rebased the patches. I have also attached a patch that Rob made: [PATCH] Don't use sets when calculating the modlist so order is preserved. This is for

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-02-07 Thread Rob Crittenden
Jan Cholasta wrote: Dne 7.2.2012 00:04, Rob Crittenden napsal(a): Jan Cholasta wrote: Updated rebased the patches. I have also attached a patch that Rob made: [PATCH] Don't use sets when calculating the modlist so order is preserved. This is for the LDAP updater in particular. When adding

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-02-06 Thread Rob Crittenden
Jan Cholasta wrote: Updated rebased the patches. I have also attached a patch that Rob made: [PATCH] Don't use sets when calculating the modlist so order is preserved. This is for the LDAP updater in particular. When adding new schema order can be important when one objectclass depends on

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-01-25 Thread Jan Cholasta
Dne 24.1.2012 23:11, Rob Crittenden napsal(a): Jan Cholasta wrote: I have updated and rebased the patches: [PATCH] 59 Add LDAP schema for SSH public keys. No changes. [PATCH] 60 Add LDAP ACIs for SSH public key schema. Requires patch 59. No changes. [PATCH] 61 Add support for SSH public

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-01-25 Thread Rob Crittenden
Jan Cholasta wrote: Dne 24.1.2012 23:11, Rob Crittenden napsal(a): Jan Cholasta wrote: I have updated and rebased the patches: [PATCH] 59 Add LDAP schema for SSH public keys. No changes. [PATCH] 60 Add LDAP ACIs for SSH public key schema. Requires patch 59. No changes. [PATCH] 61 Add

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-01-24 Thread Rob Crittenden
Jan Cholasta wrote: I have updated and rebased the patches: [PATCH] 59 Add LDAP schema for SSH public keys. No changes. [PATCH] 60 Add LDAP ACIs for SSH public key schema. Requires patch 59. No changes. [PATCH] 61 Add support for SSH public keys to user and host objects. Requires patch 59

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-01-02 Thread Jan Cholasta
Dne 15.12.2011 22:03, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 7.12.2011 17:28, Jan Cholasta napsal(a): [PATCH] 65 Configure ssh and sshd during ipa-client-install. For ssh, VerifyHostKeyDNS option is enabled. For sshd, KerberosAuthentication, GSSAPIAuthentication and UsePAM options

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2011-12-15 Thread Rob Crittenden
Jan Cholasta wrote: Dne 7.12.2011 17:28, Jan Cholasta napsal(a): [PATCH] 65 Configure ssh and sshd during ipa-client-install. For ssh, VerifyHostKeyDNS option is enabled. For sshd, KerberosAuthentication, GSSAPIAuthentication and UsePAM options are enabled (this can be disabled using