Re: [Freeipa-devel] OTP Sync Client

2014-01-22 Thread Rob Crittenden
Nathaniel McCallum wrote: On Wed, 2014-01-22 at 16:03 -0500, Rob Crittenden wrote: Nathaniel McCallum wrote: In attempting to write an OTP synchronization client, I've noticed it doesn't fit into the framework very well. The job of the client is to perform the synchronization extended operation

Re: [Freeipa-devel] OTP Sync Client

2014-01-22 Thread Nathaniel McCallum
On Wed, 2014-01-22 at 16:03 -0500, Rob Crittenden wrote: > Nathaniel McCallum wrote: > > In attempting to write an OTP synchronization client, I've noticed it > > doesn't fit into the framework very well. The job of the client is to > > perform the synchronization extended operation. The format of

Re: [Freeipa-devel] OTP Sync Client

2014-01-22 Thread Rob Crittenden
Nathaniel McCallum wrote: In attempting to write an OTP synchronization client, I've noticed it doesn't fit into the framework very well. The job of the client is to perform the synchronization extended operation. The format of the request is this: OTPSyncRequestValue ::= SEQUENCE {

[Freeipa-devel] OTP Sync Client

2014-01-22 Thread Nathaniel McCallum
In attempting to write an OTP synchronization client, I've noticed it doesn't fit into the framework very well. The job of the client is to perform the synchronization extended operation. The format of the request is this: OTPSyncRequestValue ::= SEQUENCE { userDNOCTET ST

Re: [Freeipa-devel] [PATCH] 0335 ipa-replica-install: Move check for existing host before DNS resolution check

2014-01-22 Thread Rob Crittenden
Petr Viktorin wrote: On 01/14/2014 07:59 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/13/2014 05:19 PM, Rob Crittenden wrote: Petr Viktorin wrote: See commit message & ticket for details. https://fedorahosted.org/freeipa/ticket/3889 If memory serves this was done so that both the r

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-01-22 Thread Rob Crittenden
Petr Viktorin wrote: On 01/20/2014 05:21 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/17/2014 10:24 PM, Rob Crittenden wrote: Implement an IPA RESTful Foreman-compatible smart proxy. This exposes hosts and hostgroups via an unauthenticated REST API. The idea is that this service runs o

Re: [Freeipa-devel] [PATCH] 0336 rpcserver: Consolidate __call__ in xmlclient and jsonclient_kerb

2014-01-22 Thread Petr Viktorin
On 01/22/2014 05:43 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 01/13/2014 05:11 PM, Rob Crittenden wrote: Petr Viktorin wrote: See commit message & ticket. https://fedorahosted.org/freeipa/ticket/4069 Our handling of XML-RPC introspection is iffy as it is and this would remove those

Re: [Freeipa-devel] [PATCH] 0336 rpcserver: Consolidate __call__ in xmlclient and jsonclient_kerb

2014-01-22 Thread Rob Crittenden
Petr Viktorin wrote: On 01/13/2014 05:11 PM, Rob Crittenden wrote: Petr Viktorin wrote: See commit message & ticket. https://fedorahosted.org/freeipa/ticket/4069 Our handling of XML-RPC introspection is iffy as it is and this would remove those methods completely. Can you add them back into

Re: [Freeipa-devel] [PATCH] 452 httpd should destroy all CCACHEs

2014-01-22 Thread Martin Kosek
On 01/22/2014 04:42 PM, Simo Sorce wrote: > On Wed, 2014-01-22 at 16:14 +0100, Martin Kosek wrote: >> On 01/22/2014 03:39 PM, Simo Sorce wrote: >>> On Wed, 2014-01-22 at 12:42 +0100, Petr Viktorin wrote: On 01/21/2014 05:12 PM, Martin Kosek wrote: > On 01/21/2014 03:07 PM, Petr Viktorin wr

Re: [Freeipa-devel] [PATCH] 210 Allow SAN in IPA certificate profile

2014-01-22 Thread Simo Sorce
On Wed, 2014-01-22 at 16:05 +0100, Jan Cholasta wrote: > On 22.1.2014 15:34, Simo Sorce wrote: > > On Wed, 2014-01-22 at 10:40 +0100, Jan Cholasta wrote: > >> On 21.1.2014 17:12, Simo Sorce wrote: > >>> On Tue, 2014-01-21 at 14:02 +0100, Jan Cholasta wrote: > +request = None > +

Re: [Freeipa-devel] [PATCH] 452 httpd should destroy all CCACHEs

2014-01-22 Thread Simo Sorce
On Wed, 2014-01-22 at 16:14 +0100, Martin Kosek wrote: > On 01/22/2014 03:39 PM, Simo Sorce wrote: > > On Wed, 2014-01-22 at 12:42 +0100, Petr Viktorin wrote: > >> On 01/21/2014 05:12 PM, Martin Kosek wrote: > >>> On 01/21/2014 03:07 PM, Petr Viktorin wrote: > On 01/16/2014 02:16 PM, Martin Ko

Re: [Freeipa-devel] [PATCH] 452 httpd should destroy all CCACHEs

2014-01-22 Thread Martin Kosek
On 01/22/2014 03:39 PM, Simo Sorce wrote: > On Wed, 2014-01-22 at 12:42 +0100, Petr Viktorin wrote: >> On 01/21/2014 05:12 PM, Martin Kosek wrote: >>> On 01/21/2014 03:07 PM, Petr Viktorin wrote: On 01/16/2014 02:16 PM, Martin Kosek wrote: > [freeipa-mkosek-448-add-runas-option-to-run-func

Re: [Freeipa-devel] [PATCH] 210 Allow SAN in IPA certificate profile

2014-01-22 Thread Jan Cholasta
On 22.1.2014 15:34, Simo Sorce wrote: On Wed, 2014-01-22 at 10:40 +0100, Jan Cholasta wrote: On 21.1.2014 17:12, Simo Sorce wrote: On Tue, 2014-01-21 at 14:02 +0100, Jan Cholasta wrote: +request = None +try: +request = pkcs10.load_certificate_request(csr) +

Re: [Freeipa-devel] [PATCH] 448-449 Switch httpd to use default CCACHE

2014-01-22 Thread Simo Sorce
On Wed, 2014-01-22 at 12:42 +0100, Petr Viktorin wrote: > On 01/21/2014 05:12 PM, Martin Kosek wrote: > > On 01/21/2014 03:07 PM, Petr Viktorin wrote: > >> On 01/16/2014 02:16 PM, Martin Kosek wrote: > >>> [freeipa-mkosek-448-add-runas-option-to-run-function.patch]: > >>> > >>> Run function can now

Re: [Freeipa-devel] [PATCH] 210 Allow SAN in IPA certificate profile

2014-01-22 Thread Simo Sorce
On Wed, 2014-01-22 at 10:40 +0100, Jan Cholasta wrote: > On 21.1.2014 17:12, Simo Sorce wrote: > > On Tue, 2014-01-21 at 14:02 +0100, Jan Cholasta wrote: > >> +request = None > >> +try: > >> +request = pkcs10.load_certificate_request(csr) > >> +subject = pkcs

Re: [Freeipa-devel] [PATCH] 448-449 Switch httpd to use default CCACHE

2014-01-22 Thread Petr Viktorin
On 01/21/2014 05:12 PM, Martin Kosek wrote: On 01/21/2014 03:07 PM, Petr Viktorin wrote: On 01/16/2014 02:16 PM, Martin Kosek wrote: [freeipa-mkosek-448-add-runas-option-to-run-function.patch]: Run function can now run the specified command as different user by setting the EUID and EGID for ex

Re: [Freeipa-devel] [PATCH] 210 Allow SAN in IPA certificate profile

2014-01-22 Thread Jan Cholasta
On 21.1.2014 17:12, Simo Sorce wrote: On Tue, 2014-01-21 at 14:02 +0100, Jan Cholasta wrote: +request = None +try: +request = pkcs10.load_certificate_request(csr) +subject = pkcs10.get_subject(request) +subjectaltname = pkcs10.get_subjectaltnam

Re: [Freeipa-devel] [PATCHES] 0447-0449 Add support for managed permissions

2014-01-22 Thread Petr Viktorin
On 01/08/2014 04:49 PM, Petr Viktorin wrote: Hello, This adds "managed" permissions, the framework that will make our default permissions merge IPA updates and user changes sanely. There is no updater yet, nor does this add any actual managed permissions, so there's no user-visible change (beyon