Re: [Freeipa-users] Python Client

2013-02-13 Thread Simo Sorce
On Wed, 2013-02-13 at 09:35 -0500, Dmitri Pal wrote: > On 02/13/2013 12:47 AM, It Meme wrote: > > Could there be anyway that accounts can be provisioned to IPA, via > > LDAP, from existing IAM system? > > > > > > The newly provisioned accounts can be temporarily stored in IPA's > > 389 Director

Re: [Freeipa-users] Python Client

2013-02-13 Thread Rob Crittenden
It Meme wrote: Thank you for your reply. Could there be anyway that accounts can be provisioned to IPA, via LDAP, from existing IAM system? The newly provisioned accounts can be temporarily stored in IPA's 389 Directory Server, and subsequently an automated task can IPA-ize the accounts (i.e. v

Re: [Freeipa-users] Python Client

2013-02-13 Thread Dmitri Pal
On 02/13/2013 12:47 AM, It Meme wrote: > Thank you for your reply. > > Could there be anyway that accounts can be provisioned to IPA, via > LDAP, from existing IAM system? > > The newly provisioned accounts can be temporarily stored in IPA's 389 > Directory Server, and subsequently an automated tas

Re: [Freeipa-users] Python Client

2013-02-12 Thread It Meme
Thank you for your reply. Could there be anyway that accounts can be provisioned to IPA, via LDAP, from existing IAM system? The newly provisioned accounts can be temporarily stored in IPA's 389 Directory Server, and subsequently an automated task can IPA-ize the accounts (i.e. via the Python lib

Re: [Freeipa-users] Python Client

2013-02-12 Thread Dmitri Pal
On 02/12/2013 12:42 PM, It Meme wrote: > Yes - Dmitri is correct. > > Our purchased IAM product has LDAP connectors. It is possible to customize to > develop other connector protocols but it requires tweaking the core product > code - this adds risk and, if not careful, could break our support w

Re: [Freeipa-users] Python Client

2013-02-12 Thread It Meme
Yes - Dmitri is correct. Our purchased IAM product has LDAP connectors. It is possible to customize to develop other connector protocols but it requires tweaking the core product code - this adds risk and, if not careful, could break our support with vendor or increase operational risk to a cr

Re: [Freeipa-users] Python Client

2013-02-10 Thread Dmitri Pal
On 02/09/2013 11:53 AM, John Dennis wrote: > On 02/08/2013 05:29 PM, It Meme wrote: >> Hi: >> >> Scenario: >> >> 1) User is created via LDAP call to IPA (i.e.the 389 Directory Server) >> >> The above user will not have IPA-specific attributes. >> >> Can we use the Python Library, or CLI, to modify

Re: [Freeipa-users] Python Client

2013-02-09 Thread John Dennis
On 02/08/2013 05:29 PM, It Meme wrote: Hi: Scenario: 1) User is created via LDAP call to IPA (i.e.the 389 Directory Server) The above user will not have IPA-specific attributes. Can we use the Python Library, or CLI, to modify the account to IPA-ize it? You're really better off using the IP

Re: [Freeipa-users] Python Client

2013-02-08 Thread Dmitri Pal
On 02/08/2013 06:33 PM, It Meme wrote: > Hi Dmitri: > > Yes, we are evaluating ways of provisioning users and their group > memberships for Joiner, Mover, Leaver (JML) events. > > We were thinking of your suggestion as an option and your reply was > very helpful. > > Our expected real-time scenario

Re: [Freeipa-users] Python Client

2013-02-08 Thread It Meme
Hi Dmitri: Yes, we are evaluating ways of provisioning users and their group memberships for Joiner, Mover, Leaver (JML) events. We were thinking of your suggestion as an option and your reply was very helpful. Our expected real-time scenarios is probably 5 mins latency. Is it viable to explore

Re: [Freeipa-users] Python Client

2013-02-08 Thread Dmitri Pal
On 02/08/2013 05:29 PM, It Meme wrote: > Hi: > > Scenario: > > 1) User is created via LDAP call to IPA (i.e.the 389 Directory Server) > > The above user will not have IPA-specific attributes. > > Can we use the Python Library, or CLI, to modify the account to > IPA-ize it? Is this an integration w

[Freeipa-users] Python Client

2013-02-08 Thread It Meme
Hi: Scenario: 1) User is created via LDAP call to IPA (i.e.the 389 Directory Server) The above user will not have IPA-specific attributes. Can we use the Python Library, or CLI, to modify the account to IPA-ize it? Thanks. ___ Freeipa-users mailing l