Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread Dmitri Pal
On 05/28/2014 10:50 PM, Dmitri Pal wrote: On 05/28/2014 01:18 PM, Rob Crittenden wrote: Simo Sorce wrote: On Wed, 2014-05-28 at 15:56 +0200, Martin Kosek wrote: On 05/28/2014 02:48 PM, Simo Sorce wrote: On Wed, 2014-05-28 at 09:38 +0200, thierry bordaz wrote: On 05/28/2014 08:22 AM, Martin K

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread Dmitri Pal
On 05/28/2014 01:18 PM, Rob Crittenden wrote: Simo Sorce wrote: On Wed, 2014-05-28 at 15:56 +0200, Martin Kosek wrote: On 05/28/2014 02:48 PM, Simo Sorce wrote: On Wed, 2014-05-28 at 09:38 +0200, thierry bordaz wrote: On 05/28/2014 08:22 AM, Martin Kosek wrote: On 05/27/2014 08:18 PM, Simo S

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread Dmitri Pal
On 05/27/2014 12:39 PM, thierry bordaz wrote: On 05/27/2014 06:06 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 17:55 +0200, thierry bordaz wrote: On 05/27/2014 04:35 PM, Martin Kosek wrote: On 05/27/2014 04:27 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 15:21 +0200, Martin Kosek wrote: This t

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread Rob Crittenden
Simo Sorce wrote: > On Wed, 2014-05-28 at 15:56 +0200, Martin Kosek wrote: >> On 05/28/2014 02:48 PM, Simo Sorce wrote: >>> On Wed, 2014-05-28 at 09:38 +0200, thierry bordaz wrote: On 05/28/2014 08:22 AM, Martin Kosek wrote: > On 05/27/2014 08:18 PM, Simo Sorce wrote: >> On Tue, 2014-0

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread Simo Sorce
On Wed, 2014-05-28 at 15:56 +0200, Martin Kosek wrote: > On 05/28/2014 02:48 PM, Simo Sorce wrote: > > On Wed, 2014-05-28 at 09:38 +0200, thierry bordaz wrote: > >> On 05/28/2014 08:22 AM, Martin Kosek wrote: > >>> On 05/27/2014 08:18 PM, Simo Sorce wrote: > On Tue, 2014-05-27 at 21:14 +0300,

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread Jan Cholasta
On 28.5.2014 15:56, Martin Kosek wrote: On 05/28/2014 02:48 PM, Simo Sorce wrote: On Wed, 2014-05-28 at 09:38 +0200, thierry bordaz wrote: On 05/28/2014 08:22 AM, Martin Kosek wrote: On 05/27/2014 08:18 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 21:14 +0300, Alexander Bokovoy wrote: On Tue,

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread Martin Kosek
On 05/28/2014 03:06 PM, thierry bordaz wrote: > On 05/28/2014 02:55 PM, Rob Crittenden wrote: >> Simo Sorce wrote: >>> On Wed, 2014-05-28 at 09:38 +0200, thierry bordaz wrote: On 05/28/2014 08:22 AM, Martin Kosek wrote: > On 05/27/2014 08:18 PM, Simo Sorce wrote: >> On Tue, 2014-05-27

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread Martin Kosek
On 05/28/2014 02:48 PM, Simo Sorce wrote: > On Wed, 2014-05-28 at 09:38 +0200, thierry bordaz wrote: >> On 05/28/2014 08:22 AM, Martin Kosek wrote: >>> On 05/27/2014 08:18 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 21:14 +0300, Alexander Bokovoy wrote: > On Tue, 27 May 2014, Simo Sorce wr

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread thierry bordaz
On 05/28/2014 02:55 PM, Rob Crittenden wrote: Simo Sorce wrote: On Wed, 2014-05-28 at 09:38 +0200, thierry bordaz wrote: On 05/28/2014 08:22 AM, Martin Kosek wrote: On 05/27/2014 08:18 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 21:14 +0300, Alexander Bokovoy wrote: On Tue, 27 May 2014, Simo

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread Rob Crittenden
Simo Sorce wrote: > On Wed, 2014-05-28 at 09:38 +0200, thierry bordaz wrote: >> On 05/28/2014 08:22 AM, Martin Kosek wrote: >>> On 05/27/2014 08:18 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 21:14 +0300, Alexander Bokovoy wrote: > On Tue, 27 May 2014, Simo Sorce wrote: >> On Tue, 2014

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread Simo Sorce
On Wed, 2014-05-28 at 09:38 +0200, thierry bordaz wrote: > On 05/28/2014 08:22 AM, Martin Kosek wrote: > > On 05/27/2014 08:18 PM, Simo Sorce wrote: > >> On Tue, 2014-05-27 at 21:14 +0300, Alexander Bokovoy wrote: > >>> On Tue, 27 May 2014, Simo Sorce wrote: > On Tue, 2014-05-27 at 19:59 +0200

Re: [Freeipa-devel] Supported Staged entries

2014-05-28 Thread thierry bordaz
On 05/28/2014 08:22 AM, Martin Kosek wrote: On 05/27/2014 08:18 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 21:14 +0300, Alexander Bokovoy wrote: On Tue, 27 May 2014, Simo Sorce wrote: On Tue, 2014-05-27 at 19:59 +0200, thierry bordaz wrote: On 05/27/2014 06:56 PM, Simo Sorce wrote: On Tue,

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Martin Kosek
On 05/27/2014 08:18 PM, Simo Sorce wrote: > On Tue, 2014-05-27 at 21:14 +0300, Alexander Bokovoy wrote: >> On Tue, 27 May 2014, Simo Sorce wrote: >>> On Tue, 2014-05-27 at 19:59 +0200, thierry bordaz wrote: On 05/27/2014 06:56 PM, Simo Sorce wrote: > On Tue, 2014-05-27 at 18:39 +0200, thie

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Alexander Bokovoy
On Tue, 27 May 2014, Simo Sorce wrote: On Tue, 2014-05-27 at 19:59 +0200, thierry bordaz wrote: On 05/27/2014 06:56 PM, Simo Sorce wrote: > On Tue, 2014-05-27 at 18:39 +0200, thierry bordaz wrote: >> On 05/27/2014 06:06 PM, Simo Sorce wrote: >>> We just need to care about the 'uid' attribute in

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Simo Sorce
On Tue, 2014-05-27 at 21:14 +0300, Alexander Bokovoy wrote: > On Tue, 27 May 2014, Simo Sorce wrote: > >On Tue, 2014-05-27 at 19:59 +0200, thierry bordaz wrote: > >> On 05/27/2014 06:56 PM, Simo Sorce wrote: > >> > On Tue, 2014-05-27 at 18:39 +0200, thierry bordaz wrote: > >> >> On 05/27/2014 06:06

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Simo Sorce
On Tue, 2014-05-27 at 19:59 +0200, thierry bordaz wrote: > On 05/27/2014 06:56 PM, Simo Sorce wrote: > > On Tue, 2014-05-27 at 18:39 +0200, thierry bordaz wrote: > >> On 05/27/2014 06:06 PM, Simo Sorce wrote: > >>> We just need to care about the 'uid' attribute in the staged entry, and > >>> pick t

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread thierry bordaz
On 05/27/2014 06:56 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 18:39 +0200, thierry bordaz wrote: On 05/27/2014 06:06 PM, Simo Sorce wrote: We just need to care about the 'uid' attribute in the staged entry, and pick that to generate the RDN of the user in the active tree. If there are conflic

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Simo Sorce
On Tue, 2014-05-27 at 18:39 +0200, thierry bordaz wrote: > On 05/27/2014 06:06 PM, Simo Sorce wrote: > > We just need to care about the 'uid' attribute in the staged entry, and > > pick that to generate the RDN of the user in the active tree. If there > > are conflicts the 'unstage' will fail clea

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread thierry bordaz
On 05/27/2014 06:06 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 17:55 +0200, thierry bordaz wrote: On 05/27/2014 04:35 PM, Martin Kosek wrote: On 05/27/2014 04:27 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 15:21 +0200, Martin Kosek wrote: This topic was already discussed in the past, see fol

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Simo Sorce
On Tue, 2014-05-27 at 17:55 +0200, thierry bordaz wrote: > On 05/27/2014 04:35 PM, Martin Kosek wrote: > > On 05/27/2014 04:27 PM, Simo Sorce wrote: > >> On Tue, 2014-05-27 at 15:21 +0200, Martin Kosek wrote: > >>> This topic was already discussed in the past, see following part of > >>> the design

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread thierry bordaz
On 05/27/2014 04:35 PM, Martin Kosek wrote: On 05/27/2014 04:27 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 15:21 +0200, Martin Kosek wrote: This topic was already discussed in the past, see following part of the design: http://www.freeipa.org/page/V4/User_Life-Cycle_Management#Renaming_vs._Mo

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Martin Kosek
On 05/27/2014 04:27 PM, Simo Sorce wrote: > On Tue, 2014-05-27 at 15:21 +0200, Martin Kosek wrote: >> This topic was already discussed in the past, see following part of >> the design: >> >> http://www.freeipa.org/page/V4/User_Life-Cycle_Management#Renaming_vs._Moving_Users_in_LDAP >> >> One of the

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Simo Sorce
On Tue, 2014-05-27 at 15:21 +0200, Martin Kosek wrote: > This topic was already discussed in the past, see following part of > the design: > > http://www.freeipa.org/page/V4/User_Life-Cycle_Management#Renaming_vs._Moving_Users_in_LDAP > > One of the biggest concern was that to allow operator unst

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread thierry bordaz
On 05/27/2014 03:08 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 14:40 +0200, thierry bordaz wrote: On 05/27/2014 02:32 PM, Jan Cholasta wrote: On 27.5.2014 14:22, Simo Sorce wrote: On Tue, 2014-05-27 at 14:19 +0200, Martin Kosek wrote: On 05/27/2014 02:16 PM, Simo Sorce wrote: On Tue, 2014-0

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread thierry bordaz
On 05/27/2014 03:10 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 14:59 +0200, thierry bordaz wrote: Now if an entry was not created by FreeIPA CLI ('ipa user-add --stage') it could be impossible to update/unstage the entry with FreeIPA CLI . For example with those two entries. 'ipa user-mod TestU

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Martin Kosek
On 05/27/2014 03:08 PM, Simo Sorce wrote: > On Tue, 2014-05-27 at 14:40 +0200, thierry bordaz wrote: >> On 05/27/2014 02:32 PM, Jan Cholasta wrote: >>> On 27.5.2014 14:22, Simo Sorce wrote: On Tue, 2014-05-27 at 14:19 +0200, Martin Kosek wrote: > On 05/27/2014 02:16 PM, Simo Sorce wrote: >

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Simo Sorce
On Tue, 2014-05-27 at 14:59 +0200, thierry bordaz wrote: > Now if an entry was not created by FreeIPA CLI ('ipa user-add > --stage') it could be impossible to update/unstage the entry with > FreeIPA CLI . > For example with those two entries. 'ipa user-mod TestUser --stage' or > 'ipa user-unstage T

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Simo Sorce
On Tue, 2014-05-27 at 14:40 +0200, thierry bordaz wrote: > On 05/27/2014 02:32 PM, Jan Cholasta wrote: > > On 27.5.2014 14:22, Simo Sorce wrote: > >> On Tue, 2014-05-27 at 14:19 +0200, Martin Kosek wrote: > >>> On 05/27/2014 02:16 PM, Simo Sorce wrote: > On Tue, 2014-05-27 at 13:01 +0200, Mart

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread thierry bordaz
On 05/27/2014 02:19 PM, Martin Kosek wrote: On 05/27/2014 02:16 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 13:01 +0200, Martin Kosek wrote: On 05/27/2014 11:53 AM, Jan Cholasta wrote: On 27.5.2014 11:14, thierry bordaz wrote: Hello, Me again !!! Thanks to all your inputs, the dis

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread thierry bordaz
On 05/27/2014 02:32 PM, Jan Cholasta wrote: On 27.5.2014 14:22, Simo Sorce wrote: On Tue, 2014-05-27 at 14:19 +0200, Martin Kosek wrote: On 05/27/2014 02:16 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 13:01 +0200, Martin Kosek wrote: On 05/27/2014 11:53 AM, Jan Cholasta wrote: On 27.5.2014 1

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Jan Cholasta
On 27.5.2014 14:22, Simo Sorce wrote: On Tue, 2014-05-27 at 14:19 +0200, Martin Kosek wrote: On 05/27/2014 02:16 PM, Simo Sorce wrote: On Tue, 2014-05-27 at 13:01 +0200, Martin Kosek wrote: On 05/27/2014 11:53 AM, Jan Cholasta wrote: On 27.5.2014 11:14, thierry bordaz wrote: Hello, Me

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Simo Sorce
On Tue, 2014-05-27 at 14:19 +0200, Martin Kosek wrote: > On 05/27/2014 02:16 PM, Simo Sorce wrote: > > On Tue, 2014-05-27 at 13:01 +0200, Martin Kosek wrote: > >> On 05/27/2014 11:53 AM, Jan Cholasta wrote: > >>> On 27.5.2014 11:14, thierry bordaz wrote: > Hello, > > Me again !!!

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Martin Kosek
On 05/27/2014 02:16 PM, Simo Sorce wrote: > On Tue, 2014-05-27 at 13:01 +0200, Martin Kosek wrote: >> On 05/27/2014 11:53 AM, Jan Cholasta wrote: >>> On 27.5.2014 11:14, thierry bordaz wrote: Hello, Me again !!! Thanks to all your inputs, the discussion about User_l

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Simo Sorce
On Tue, 2014-05-27 at 13:01 +0200, Martin Kosek wrote: > On 05/27/2014 11:53 AM, Jan Cholasta wrote: > > On 27.5.2014 11:14, thierry bordaz wrote: > >> Hello, > >> > >> Me again !!! > >> > >> Thanks to all your inputs, the discussion about User_life_cycle > >> clarified a lot workflow/c

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Martin Kosek
On 05/27/2014 11:53 AM, Jan Cholasta wrote: > On 27.5.2014 11:14, thierry bordaz wrote: >> Hello, >> >> Me again !!! >> >> Thanks to all your inputs, the discussion about User_life_cycle >> clarified a lot workflow/command verbs. >> >> Now I have a doubt about what would be an entry

Re: [Freeipa-devel] Supported Staged entries

2014-05-27 Thread Jan Cholasta
On 27.5.2014 11:14, thierry bordaz wrote: Hello, Me again !!! Thanks to all your inputs, the discussion about User_life_cycle clarified a lot workflow/command verbs. Now I have a doubt about what would be an entry in staging (objectclass/attribute). Also I wonder if ipa CLI