Re: ldap.modlist.modifyModlist() bug?

2007-12-11 Thread Michael Ströder
Craig Balfour wrote: > I've just noticed, however, that when the old and new entry consist of > the same characters but in a different order (as occurs when initials > are swapped around, for example) ldap_compare_s() returns > COMPARE_FALSE but modifyModlist() returns an empty list - the result >

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Michael Ströder
Geert Jansen wrote: > Michael Ströder wrote: > >> I saw that kinit is started as a shell sub-process. > > Actually Python-AD comes with a C module that wraps the required > Kerberos functions (see lib/ad/protocol/krb5.c). What you probably saw > is the use of kinit in the test suite, where I use

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Torsten Kurbad
At Tue, 11 Dec 2007 14:45:01 +0100 Michael Ströder <[EMAIL PROTECTED]> wrote: > Ah, ok. Interesting. Why don't you separate the krb5 module into > another project. I guess some people might be interested in that. ME, ME, ME!!! :o) I tried several krb5 modules lying around in the net so far - and

Re: [ANNOUNCE] python-ad

2007-12-11 Thread David Leonard
Michael Ströder wrote: Geert Jansen wrote: Michael Ströder wrote: I saw that kinit is started as a shell sub-process. Actually Python-AD comes with a C module that wraps the required Kerberos functions (see lib/ad/protocol/krb5.c). What you probably saw is the use of kinit in

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Torsten Kurbad wrote: > At Tue, 11 Dec 2007 14:45:01 +0100 > Michael Ströder <[EMAIL PROTECTED]> wrote: > > >> Ah, ok. Interesting. Why don't you separate the krb5 module into >> another project. I guess some people might be interested in that. >> > > ME, ME, ME!!! :o) > > I tried several k

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Noah Gift wrote: > On Dec 11, 2007, at 10:02 AM, Rich Megginson wrote: > > >> Torsten Kurbad wrote: >> >>> At Tue, 11 Dec 2007 14:45:01 +0100 >>> Michael Ströder <[EMAIL PROTECTED]> wrote: >>> >>> >>> Ah, ok. Interesting. Why don't you separate the krb5 module into another

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Noah Gift
On Dec 11, 2007, at 10:31 AM, Rich Megginson wrote: > Noah Gift wrote: >> On Dec 11, 2007, at 10:02 AM, Rich Megginson wrote: >> >> >>> Torsten Kurbad wrote: >>> At Tue, 11 Dec 2007 14:45:01 +0100 Michael Ströder <[EMAIL PROTECTED]> wrote: > Ah, ok. Interesting. Why d

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Noah Gift
On Dec 11, 2007, at 10:02 AM, Rich Megginson wrote: > Torsten Kurbad wrote: >> At Tue, 11 Dec 2007 14:45:01 +0100 >> Michael Ströder <[EMAIL PROTECTED]> wrote: >> >> >>> Ah, ok. Interesting. Why don't you separate the krb5 module into >>> another project. I guess some people might be interested i

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Michael Ströder
David Leonard wrote: > > I am interested in a better GSSAPI binding for Python.. and have some > incomplete code locally if anyone else is interested. Well, how about contributing your code to another project? Or how about creating a new project? > To do credential forwarding, the gss is current

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Michael Ströder
Rich Megginson wrote: > You might be interested in the freeipa.org project which uses python, > python-ldap, turbogears, PyKerberos, and supports http authentication > with forwardable tickets. I don't think they support SPNEGO yet but > patches are welcome :-) Well, glancing over the code I w

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Michael Ströder wrote: > Rich Megginson wrote: > >> You might be interested in the freeipa.org project which uses python, >> python-ldap, turbogears, PyKerberos, and supports http authentication >> with forwardable tickets. I don't think they support SPNEGO yet but >> patches are welcome :-)

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Michael Ströder
Rich Megginson wrote: > You might be interested in the freeipa.org project which uses python, > python-ldap, turbogears, PyKerberos, and supports http authentication > with forwardable tickets. > I don't think they support SPNEGO yet but patches are welcome :-) How does the browser send the tick

STRONG_AUTH_REQUIRED

2007-12-11 Thread Fernando Ribeiro
Hi, How to fix STRONG_AUTH_REQUIRED error? (My ldapserver is master) I'm receiving this error while using modify(dn, modlist) I have a bind with rootdn and rootpw right. My modlist [(0, 'employeeType', ['1']), (0, 'l', ['GETEC']), (0, 'stateOrProvinceName', ['DF'])]

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Michael Ströder wrote: > Rich Megginson wrote: > >> You might be interested in the freeipa.org project which uses python, >> python-ldap, turbogears, PyKerberos, and supports http authentication >> with forwardable tickets. >> I don't think they support SPNEGO yet but patches are welcome :-) >

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Michael Ströder
Rich Megginson wrote: > Michael Ströder wrote: >> Rich Megginson wrote: >> >>> You might be interested in the freeipa.org project which uses python, >>> python-ldap, turbogears, PyKerberos, and supports http authentication >>> with forwardable tickets. >>> I don't think they support SPNEGO yet bu

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Michael Ströder wrote: > Rich Megginson wrote: > >> Michael Ströder wrote: >> >>> Rich Megginson wrote: >>> >>> You might be interested in the freeipa.org project which uses python, python-ldap, turbogears, PyKerberos, and supports http authentication with forwardabl

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Geert Jansen
Michael Ströder wrote: > Ah, ok. Interesting. Why don't you separate the krb5 module into another > project. I guess some people might be interested in that. > > Especially my dream would be to support HTTP-Authentication based on > SPNEGO/GSSAPI in web2ldap. But not only authenticating the user a

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Geert Jansen
Torsten Kurbad wrote: > ME, ME, ME!!! :o) > > I tried several krb5 modules lying around in the net so far - and none > really worked! In fact, most of the implementations require an external > kinit call, which is NOT what I intend to let my users do... > > So, I'd very much appreciate, if you thi

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Geert Jansen
Michael Ströder wrote: > > Well, setting an env var is not really a good choice when running within > a multi-threaded web application... :-/ > I was thinking how one could solve the problem of per-thread credentials in python-ldap (or python-ad).. I think it can be done with the keyring crede

Re: STRONG_AUTH_REQUIRED

2007-12-11 Thread James Andrewartha
On Tue, 2007-12-11 at 17:15 -0200, Fernando Ribeiro wrote: > How to fix STRONG_AUTH_REQUIRED error? (My ldapserver is master) > I'm receiving this error while using modify(dn, modlist) > I have a bind with rootdn and rootpw right. How are you connecting and binding to the server