Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Torsten Kurbad wrote: > At Tue, 11 Dec 2007 14:45:01 +0100 > Michael Ströder <[EMAIL PROTECTED]> wrote: > > >> Ah, ok. Interesting. Why don't you separate the krb5 module into >> another project. I guess some people might be interested in that. >> > > ME, ME, ME!!! :o) > > I tried several k

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Noah Gift wrote: > On Dec 11, 2007, at 10:02 AM, Rich Megginson wrote: > > >> Torsten Kurbad wrote: >> >>> At Tue, 11 Dec 2007 14:45:01 +0100 >>> Michael Ströder <[EMAIL PROTECTED]> wrote: >>> >>> >>> >>&g

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Michael Ströder wrote: > Rich Megginson wrote: > >> You might be interested in the freeipa.org project which uses python, >> python-ldap, turbogears, PyKerberos, and supports http authentication >> with forwardable tickets. I don't think they support SPNEGO ye

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Michael Ströder wrote: > Rich Megginson wrote: > >> You might be interested in the freeipa.org project which uses python, >> python-ldap, turbogears, PyKerberos, and supports http authentication >> with forwardable tickets. >> I don't think they support

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Michael Ströder wrote: > Rich Megginson wrote: > >> Michael Ströder wrote: >> >>> Rich Megginson wrote: >>> >>> >>>> You might be interested in the freeipa.org project which uses python, >>>> python-lda

Problem using ldaps with two different CA cert files

2008-09-10 Thread Rich Megginson
The following code does not work in a couple of different places: import sys import ldap, ldap.ldapobject ldap.set_option(ldap.OPT_DEBUG_LEVEL, 255) ldap.set_option(ldap.OPT_X_TLS_CACERTFILE, '/path/to/ca1.pem') conn1 = ldap.ldapobject.LDAPObject('ldaps://server1.domain:636') #conn1.set_option(lda

Re: Problem using ldaps with two different CA cert files

2008-09-11 Thread Rich Megginson
Michael Ströder wrote: > Rich Megginson wrote: > >> Is it possible to use two different CA certs in a single python-ldap >> app? >> > > There are two options: > > 1. Stuff all trusted CA certs into one "PEM" file and use > lda

Re: python-ldap hanging for 15 minutes under certain conditions

2011-02-03 Thread Rich Megginson
On 02/03/2011 04:34 AM, Michael Wood wrote: > Hi > > I'm trying to do a search against Samba 4's LDAP server and it works, > but the bind and search are both successful, everything hangs when I > try to unbind from the LDAP server. If anyone could enlighten me I > would be grateful. > > I've run i

Re: python-ldap hanging for 15 minutes under certain conditions

2011-02-04 Thread Rich Megginson
On 02/03/2011 11:59 PM, Michael Wood wrote: > On 4 February 2011 08:32, James Andrewartha wrote: >> On 04/02/11 03:31, Michael Ströder wrote: >>> Michael Wood wrote: >>>> On 3 February 2011 18:16, Rich Megginson wrote: >>>>> On 02/03/2011 04:34 AM,

Re: python-ldap hanging for 15 minutes under certain conditions

2011-02-04 Thread Rich Megginson
On 02/04/2011 09:15 AM, Michael Ströder wrote: > Rich Megginson wrote: >> OpenLDAP 2.4.23 supports Mozilla NSS (triple licensed >> GPLv2+/LGPLv2+/MPL) for crypto >> Fedora 14 and later use this instead of OpenSSL > I see some benefits using Mozilla NSS especially with LDAP

Re: python-ldap hanging for 15 minutes under certain conditions

2011-02-07 Thread Rich Megginson
On 02/05/2011 01:42 PM, Michael Wood wrote: > Hi > > On 4 February 2011 17:35, Rich Megginson wrote: >> On 02/03/2011 11:59 PM, Michael Wood wrote: >>> On 4 February 2011 08:32, James Andrewarthawrote: > [...] >>>> Debian uses GnuTLS because OpenSSL has

Re: 2.4.0 patches need review

2011-03-02 Thread Rich Megginson
On 02/21/2011 02:29 PM, Michael Ströder wrote: > HI! > > I've committed a larger patch contributed by Rich Megginson fixing SF#2829057 > [1] and adding generic support LDAPv3 extended operations. Many thanks to him. > > I've done some tests for [1] by successfully usin

Re: 2.4.0 patches need review

2011-03-02 Thread Rich Megginson
On 03/01/2011 01:13 PM, Michael Ströder wrote: > Rich Megginson wrote: >> About the arguments and return values to result4 - with the current code >> I have to do something like this: >> >> rtype, rdata, rmsgid, decoded_serverctrls, extop_rspoid, >> extop_rsp

Re: please review encode_assertion_control()

2011-03-03 Thread Rich Megginson
On 03/03/2011 01:28 PM, Michael Ströder wrote: > HI! > > (Sigh!) I'm not a C programmer. > > Could somebody please look what's wrong with encode_assertion_control() in > Modules/ldapcontrol.c? It seg faults. err = ldap_create_assertion_control_value(NULL,assertion_filterstr,&ctrl_val); The NU

Re: Fwd: [pyasn1-users] ANN: pyasn1-0.0.13a & pyasn1-modules-0.0.1a released

2011-03-07 Thread Rich Megginson
On 03/06/2011 06:14 PM, Chaos Eternal wrote: should we re-implement python-ldap on pyasn and get rid of depends on openldap libs? I vote no. Why would you want to do that? How would you implement TLS/SSL? How would you implement SASL/GSSAPI? How would you keep up with openldap client li

Re: Minimum version of OpenLDAP libs for python-ldap 2.4.x?

2011-03-07 Thread Rich Megginson
On 03/04/2011 12:17 PM, Michael Ströder wrote: > (Cc:-ed python-ldap-dev again) > > Chris Dukes wrote: >> On Fri, Mar 04, 2011 at 07:45:15PM +0100, Michael Ströder wrote: >>> Again it's time to think about the minimum required version of OpenLDAP libs >>> to be used for building upcoming python-lda

Re: Fwd: [pyasn1-users] ANN: pyasn1-0.0.13a & pyasn1-modules-0.0.1a released

2011-03-07 Thread Rich Megginson
On 03/07/2011 10:35 AM, Michael Ströder wrote: > Rich Megginson wrote: >>On 03/06/2011 06:14 PM, Chaos Eternal wrote: >>> should we re-implement python-ldap on pyasn and get rid of depends on >>> openldap libs? >>> >> I vote no. Why would you want t

Re: Fwd: [pyasn1-users] ANN: pyasn1-0.0.13a & pyasn1-modules-0.0.1a released

2011-03-07 Thread Rich Megginson
On 03/07/2011 11:19 AM, Michael Ströder wrote: > Rich Megginson wrote: >> RHEL does not include pyasn1. But it is extremely useful for >> extops/controls - doing BER codec by hand is not fun. > Yupp! > >> A mid-way >> approach would be to expose the liblber