Re: [Freeipa-devel] [PATCH 62] Tweak the session auth to reflect developer consensus.

2012-02-26 Thread John Dennis
On 02/26/2012 04:41 PM, Rob Crittenden wrote: John Dennis wrote: rebased patch against current ipa-2-2 branch I'm seeing two test failures with patches 62, 63 and 64 applied: == ERROR: tests.test_ipaserver.test_rpcserver.t

Re: [Freeipa-devel] [PATCH 64] Implement password based session login

2012-02-26 Thread John Dennis
On 02/26/2012 04:40 PM, Rob Crittenden wrote: John Dennis wrote: On 02/26/2012 03:54 PM, John Dennis wrote: I assume you're running the script I attached. The reason why you keep getting new sessions is because the script does not send the previous cookie back, from the server's perspective the

Re: [Freeipa-devel] [PATCH 62] Tweak the session auth to reflect developer consensus.

2012-02-26 Thread Rob Crittenden
John Dennis wrote: rebased patch against current ipa-2-2 branch I'm seeing two test failures with patches 62, 63 and 64 applied: == ERROR: tests.test_ipaserver.test_rpcserver.test_session.test_route

Re: [Freeipa-devel] [PATCH 64] Implement password based session login

2012-02-26 Thread Rob Crittenden
John Dennis wrote: On 02/26/2012 03:54 PM, John Dennis wrote: I assume you're running the script I attached. The reason why you keep getting new sessions is because the script does not send the previous cookie back, from the server's perspective these all appear to be new login requests. Session

Re: [Freeipa-devel] [PATCH 64] Implement password based session login

2012-02-26 Thread John Dennis
On 02/26/2012 03:54 PM, John Dennis wrote: I assume you're running the script I attached. The reason why you keep getting new sessions is because the script does not send the previous cookie back, from the server's perspective these all appear to be new login requests. Sessions are not tracked by

Re: [Freeipa-devel] [PATCH 64] Implement password based session login

2012-02-26 Thread John Dennis
On 02/26/2012 03:38 PM, Rob Crittenden wrote: John Dennis wrote: This patch adds support for password based session login (see detailed comments in patch) Only the server side is implemented, someone will have to add password based login to the UI, when they do they should update the unauthoriz

Re: [Freeipa-devel] [PATCH 62] Tweak the session auth to reflect developer consensus.

2012-02-26 Thread John Dennis
On 02/26/2012 03:08 PM, Rob Crittenden wrote: Can you explain this change? -key = shift_path_info(environ) +key = environ.get('PATH_INFO') Sure, previously there was an expectation that every level in the URL path would have it's own WSGI script. You would pop off the first c

Re: [Freeipa-devel] [PATCH 64] Implement password based session login

2012-02-26 Thread Rob Crittenden
John Dennis wrote: This patch adds support for password based session login (see detailed comments in patch) Only the server side is implemented, someone will have to add password based login to the UI, when they do they should update the unauthorized messges to include the new method, those mes

Re: [Freeipa-devel] [PATCH 62] Tweak the session auth to reflect developer consensus.

2012-02-26 Thread Rob Crittenden
John Dennis wrote: On 02/24/2012 09:45 AM, Petr Vobornik wrote: On 02/23/2012 10:10 PM, Rob Crittenden wrote: John Dennis wrote: This works great, particularly with patch 63. The only thing I wasn't able to test at all is logout. Is there a way to test that as-is or will the UI guys need

Re: [Freeipa-devel] Adding Debian support to the FreeIPA code

2012-02-26 Thread Alexander Bokovoy
Hi Krzysztof, first thank you for bringing up the topic of wider use of FreeIPA on different platforms. On Sun, 26 Feb 2012, Krzysztof Klimonda wrote: > Hey, > > tjaalton has pointed you as a most likely suspect for contacting > regarding adding some support for Debian to the FreeIPA. We're b

[Freeipa-devel] [PATCH 64] Implement password based session login

2012-02-26 Thread John Dennis
This patch adds support for password based session login (see detailed comments in patch) Only the server side is implemented, someone will have to add password based login to the UI, when they do they should update the unauthorized messges to include the new method, those message occur in two pl