Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Martin Kosek
On Wed, 2011-12-14 at 15:31 -0500, Dmitri Pal wrote: > > The whole point of this work to decompose things and make them simpler. > One command with dozens of options is much harder to use. > I stand on my own point but we should ask community. Lets see what the community would say about the API b

[Freeipa-devel] Optionistic approach for new DNS API

2011-12-14 Thread Martin Kosek
Hello all, we just had a good discussion with Rob and Endi about different approach to the new DNS API. Current DNS API proposal (patches 174-176) introduced new API based on different commands, e.g. for MX RR type: ipa dnsrecord-mx-add ZONE NAME --preference=0 --exchanger=server1.example.com. ip

[Freeipa-devel] [PATCH 60] Implement session support in server, Manage sessions in WSGI

2011-12-14 Thread John Dennis
This patch adds the ipalib/session.py file which implements a cookie based session cache using memcached. It also invokes the session cookie support when a HTTP request is received and stores the session data in the per-thread context object. -- John Dennis Looking to carve out IT costs? ww

[Freeipa-devel] [PATCH 59] Modify spec file to add ipa_memcached service Install &, control ipa_memcached instance

2011-12-14 Thread John Dennis
This patch adds an ipa memcached service, it does the following: * adds SysV initscript for ipa_memcached * adds systemd service file for ipa_memcached * adds tmpfiles.d configuration file for /var/run/ipa_memcached * adds configuration file for ipa_memcached * adds memcacheinstance.py file t

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Martin Kosek
On Wed, 2011-12-14 at 12:43 -0600, Endi Sukma Dewata wrote: > On 12/14/2011 12:53 AM, Martin Kosek wrote: > >> I found this works ok and adding records is definitely clearer but it > >> seems odd to add with one command and delete/find with another. I could > >> get used to it I suppose. > > > > Hm

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Dmitri Pal
On 12/14/2011 03:02 PM, Simo Sorce wrote: > > - Original Message - >> On 12/14/2011 01:43 PM, Endi Sukma Dewata wrote: >>> On 12/14/2011 12:53 AM, Martin Kosek wrote: > I found this works ok and adding records is definitely clearer > but it > seems odd to add with one command an

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Simo Sorce
- Original Message - > On 12/14/2011 01:43 PM, Endi Sukma Dewata wrote: > > On 12/14/2011 12:53 AM, Martin Kosek wrote: > >>> I found this works ok and adding records is definitely clearer > >>> but it > >>> seems odd to add with one command and delete/find with another. I > >>> could > >

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
- Original Message - > On 12/14/2011 10:58 AM, Simo Sorce wrote: > > - Original Message - > > We can also generate the SID algorithmically from the > > uidNumber/gidNumber > Do you mean the SID of the trusted domain user? > >>> No I meant the SID of users and groups.

Re: [Freeipa-devel] [PATCH] s4u2proxy support

2011-12-14 Thread Alexander Bokovoy
On Wed, 14 Dec 2011, Rob Crittenden wrote: > Dmitri Pal wrote: > >On 12/12/2011 07:15 PM, Simo Sorce wrote: > >>On Mon, 2011-12-12 at 15:22 -0500, Rob Crittenden wrote: > >>>This patch adds support for s4u2proxy. This means that the Apache > >>>server > >>>will obtain the ldap service ticket on be

Re: [Freeipa-devel] [PATCH] s4u2proxy support

2011-12-14 Thread Rob Crittenden
Dmitri Pal wrote: On 12/12/2011 07:15 PM, Simo Sorce wrote: On Mon, 2011-12-12 at 15:22 -0500, Rob Crittenden wrote: This patch adds support for s4u2proxy. This means that the Apache server will obtain the ldap service ticket on behalf of the user rather than the using having to send their TGT.

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Dmitri Pal
On 12/14/2011 10:58 AM, Simo Sorce wrote: > - Original Message - > We can also generate the SID algorithmically from the > uidNumber/gidNumber Do you mean the SID of the trusted domain user? >>> No I meant the SID of users and groups. >> ok, I would very much favor this approac

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Dmitri Pal
On 12/14/2011 01:43 PM, Endi Sukma Dewata wrote: > On 12/14/2011 12:53 AM, Martin Kosek wrote: >>> I found this works ok and adding records is definitely clearer but it >>> seems odd to add with one command and delete/find with another. I could >>> get used to it I suppose. >> >> Hm, we could add d

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Endi Sukma Dewata
On 12/14/2011 12:53 AM, Martin Kosek wrote: I found this works ok and adding records is definitely clearer but it seems odd to add with one command and delete/find with another. I could get used to it I suppose. Hm, we could add dnsrecord--del ZONE RECORD VALUE command, but this would increase

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
- Original Message - > > > > We can also generate the SID algorithmically from the > > > > uidNumber/gidNumber > > > > > > Do you mean the SID of the trusted domain user? > > > > No I meant the SID of users and groups. > > ok, I would very much favor this approach it will make things muc

Re: [Freeipa-devel] [PATCH] 056 Added facet tabs coloring

2011-12-14 Thread Endi Sukma Dewata
On 12/13/2011 3:49 AM, Petr Vobornik wrote: 1. The original code uses different background images for active/inactive tabs. I think the mockup in the ticket is also showing different backgrounds. The new code uses the same background. Fixed, using the background from mockup - but honestly I don

Re: [Freeipa-devel] [PATCH] 918, 919 update sudo schema

2011-12-14 Thread Rob Crittenden
Jan Cholasta wrote: Dne 14.12.2011 15:23, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 14.12.2011 05:20, Rob Crittenden napsal(a): The sudo schema now defines sudoOrder, sudoNotBefore and sudoNotAfter but these weren't available in the sudorule plugin. I've added support for these. sudoO

Re: [Freeipa-devel] [PATCH] 918, 919 update sudo schema

2011-12-14 Thread Jan Cholasta
Dne 14.12.2011 15:23, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 14.12.2011 05:20, Rob Crittenden napsal(a): The sudo schema now defines sudoOrder, sudoNotBefore and sudoNotAfter but these weren't available in the sudorule plugin. I've added support for these. sudoOrder enforces uniquen

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Sumit Bose
On Wed, Dec 14, 2011 at 08:31:57AM -0500, Simo Sorce wrote: > On Wed, 2011-12-14 at 14:12 +0100, Sumit Bose wrote: > > On Wed, Dec 14, 2011 at 07:45:53AM -0500, Simo Sorce wrote: > > > On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: > > > > On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander B

Re: [Freeipa-devel] [PATCH] 918, 919 update sudo schema

2011-12-14 Thread Rob Crittenden
Jan Cholasta wrote: Dne 14.12.2011 05:20, Rob Crittenden napsal(a): The sudo schema now defines sudoOrder, sudoNotBefore and sudoNotAfter but these weren't available in the sudorule plugin. I've added support for these. sudoOrder enforces uniqueness because duplicates are undefined. I also add

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
On Wed, 2011-12-14 at 14:12 +0100, Sumit Bose wrote: > On Wed, Dec 14, 2011 at 07:45:53AM -0500, Simo Sorce wrote: > > On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: > > > On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: > > > > On Tue, 13 Dec 2011, Simo Sorce wrote: > > > >

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Sumit Bose
On Wed, Dec 14, 2011 at 07:45:53AM -0500, Simo Sorce wrote: > On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: > > On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: > > > On Tue, 13 Dec 2011, Simo Sorce wrote: > > > > On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote:

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Simo Sorce
On Wed, 2011-12-14 at 10:23 +0100, Sumit Bose wrote: > On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: > > On Tue, 13 Dec 2011, Simo Sorce wrote: > > > On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: > > > > On Mon, 12 Dec 2011, Sumit Bose wrote: > > > > > > --passwor

Re: [Freeipa-devel] [PATCH] 918, 919 update sudo schema

2011-12-14 Thread Jan Cholasta
Dne 14.12.2011 05:20, Rob Crittenden napsal(a): The sudo schema now defines sudoOrder, sudoNotBefore and sudoNotAfter but these weren't available in the sudorule plugin. I've added support for these. sudoOrder enforces uniqueness because duplicates are undefined. I also added support for a Gene

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Alexander Bokovoy
On Wed, 14 Dec 2011, Sumit Bose wrote: > On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: > > On Tue, 13 Dec 2011, Simo Sorce wrote: > > > On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: > > > > On Mon, 12 Dec 2011, Sumit Bose wrote: > > > > > > --password [type-spec

Re: [Freeipa-devel] [PATCH] [WIP] 172+173+175 Create per-type DNS API

2011-12-14 Thread Jan Cholasta
Dne 14.12.2011 07:53, Martin Kosek napsal(a): On Fri, 2011-12-09 at 15:55 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-12-01 at 17:18 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Mon, 2011-11-28 at 17:35 +0100, Martin Kosek wrote: I have prepared a working prototype o

Re: [Freeipa-devel] WIP: ipa trust command

2011-12-14 Thread Sumit Bose
On Tue, Dec 13, 2011 at 07:08:24PM +0200, Alexander Bokovoy wrote: > On Tue, 13 Dec 2011, Simo Sorce wrote: > > On Mon, 2011-12-12 at 22:27 +0200, Alexander Bokovoy wrote: > > > On Mon, 12 Dec 2011, Sumit Bose wrote: > > > > > --password [type-specific parameters] > > > > > > > > > > Creates a tr