Re: [Freeipa-devel] Finishing the Community Portal

2015-07-15 Thread Drew Erny
Right now, I'm focusing on deployment of the application. I'm running out of time on my internship, so we'll see if I find time in the last couple of weeks to add that feature. On 07/15/2015 04:37 PM, Gabe Alford wrote: On Wed, Jul 15, 2015 at 2:32 PM, Nathaniel McCallum mailto:npmccal...@redh

Re: [Freeipa-devel] Finishing the Community Portal

2015-07-15 Thread Drew Erny
app that I built so that it can be deployed quickly to a server? Someone off-list, I think, mentioned making it deployable to OpenShift? Basically, what do I have to do to call this application Finished? The code is located at github.com/dperny/freeipa-communityportal Thanks, Drew Erny -- Manage y

[Freeipa-devel] Finishing the Community Portal

2015-07-14 Thread Drew Erny
d at github.com/dperny/freeipa-communityportal Thanks, Drew Erny -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [RFC] Community Portal Captcha

2015-07-10 Thread Drew Erny
is captcha method is secure. http://www.freeipa.org/page/V4/Community_Portal_Captcha Thanks, Drew Erny -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] [RFC] Community Portal - Where to go next?

2015-07-02 Thread Drew Erny
is best. Or, if deployment isn't important yet at this stage in the prototype, what should I focus my efforts on now? Thanks, Drew Erny -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Drew Erny
On 06/25/2015 03:13 PM, Drew Erny wrote: On 06/25/2015 03:07 PM, Simo Sorce wrote: On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset I ea

Re: [Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Drew Erny
On 06/25/2015 03:07 PM, Simo Sorce wrote: On Thu, 2015-06-25 at 14:40 -0400, Drew Erny wrote: Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset I eagerly await your explanations of why this

[Freeipa-devel] [RFC] Self-service Password Reset

2015-06-25 Thread Drew Erny
Hi, All, FreeIPA's most requested feature just got a proposal. Check it out at http://www.freeipa.org/page/V4/Self_Service_Password_Reset I eagerly await your explanations of why this is a terrible idea. Thanks, Drew Erny -- Manage your subscription for the Freeipa-devel mailing list:

Re: [Freeipa-devel] IPA Python API

2015-06-25 Thread Drew Erny
If I add the lines if not api.Backend.rpcclient.isconnected(): api.Backend.rpcclient.connect() before I call the api, the code works. Problem (pretty much) solved. On 06/23/2015 04:36 PM, Drew Erny wrote: Resurrecting this thread, because the problem is getting me again. If I go through

Re: [Freeipa-devel] IPA Python API

2015-06-23 Thread Drew Erny
Resurrecting this thread, because the problem is getting me again. If I go through the python interpreter and import the code that calls the ipalib, and then manually call it myself the way the webserver does, the code works. If the same code is run in the course of the web server process, I g

[Freeipa-devel] [RFC] Community Portal

2015-06-18 Thread Drew Erny
Hi, all, More email about the community portal. This time, I have a design proposal for you: http://www.freeipa.org/page/V4/Community_Portal Tell me what you think. Thanks, Drew Erny -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo

Re: [Freeipa-devel] Community Portal Prototype

2015-06-18 Thread Drew Erny
On 06/18/2015 03:53 AM, Petr Spacek wrote: On 17.6.2015 21:21, Drew Erny wrote: Hello, all, I've built a prototype of the community portal, and I'd like a quick sanity check on it. If someone would look over the architecture of this code and make sure that the design is sensibl

[Freeipa-devel] Community Portal Prototype

2015-06-17 Thread Drew Erny
Hello, all, I've built a prototype of the community portal, and I'd like a quick sanity check on it. If someone would look over the architecture of this code and make sure that the design is sensible before I proceed any further, that would be very helpful. The source code can be found here:

Re: [Freeipa-devel] IPA Python API

2015-06-17 Thread Drew Erny
On 06/17/2015 01:24 AM, Jan Cholasta wrote: Dne 16.6.2015 v 20:29 Drew Erny napsal(a): Hi, All, ... Call api.Backend.rpcclient.connect(ccache=krbV.default_context().default_ccache()) to make the problem go away. This doesn't work. The Flask application runs (as I mentioned

Re: [Freeipa-devel] IPA Python API

2015-06-16 Thread Drew Erny
On 06/16/2015 04:17 PM, Rob Crittenden wrote: Drew Erny wrote: On 06/16/2015 02:29 PM, Drew Erny wrote: Hi, All, I'm using the IPA Python API to write the Community Portal. Most of the documentation for using the IPA Python API is targeted a plugin authors, and this isn't a plugin

Re: [Freeipa-devel] IPA Python API

2015-06-16 Thread Drew Erny
On 06/16/2015 02:29 PM, Drew Erny wrote: Hi, All, I'm using the IPA Python API to write the Community Portal. Most of the documentation for using the IPA Python API is targeted a plugin authors, and this isn't a plugin for (what I think are) good reasons. I'm doing

[Freeipa-devel] IPA Python API

2015-06-16 Thread Drew Erny
Hi, All, I'm using the IPA Python API to write the Community Portal. Most of the documentation for using the IPA Python API is targeted a plugin authors, and this isn't a plugin for (what I think are) good reasons. I'm doing # in the main program import api from ipalib api.bootstr

Re: [Freeipa-devel] Community Portal Milestone

2015-06-12 Thread Drew Erny
Hey, all, What fields, exactly, should a self-service user be able to enter? Thanks, Drew Erny -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

[Freeipa-devel] WebUI documentation

2015-06-11 Thread Drew Erny
I'm looking for documentation that provides a broader overview of the way the WebUI fits together and works. I have the source, of course, and I've been through Petr Voborni's documentation found at https://pvoborni.fedorapeople.org/doc/. That documentation explains some narrower concepts (like

Re: [Freeipa-devel] Community Portal Milestone

2015-06-10 Thread Drew Erny
On 06/10/2015 10:16 AM, Martin Kosek wrote: AFAIK, this work would form some standalone page utilizing the FreeIPA Web UI framework we have already, to get the same look and feel. Using FreeIPA API to store/manipulate user entries should be thus much easier, then taking care of separate datab

Re: [Freeipa-devel] Community Portal Milestone

2015-06-10 Thread Drew Erny
On 06/10/2015 02:52 AM, Martin Kosek wrote: On 06/10/2015 05:11 AM, Adam Young wrote: On 06/09/2015 06:34 PM, Simo Sorce wrote: On Tue, 2015-06-09 at 16:15 -0400, Drew Erny wrote: Hey, Freeipa, same thread new subtopic. So, I was bouncing some ideas around with another developer (ayoung) and

Re: [Freeipa-devel] Community Portal Milestone

2015-06-09 Thread Drew Erny
Hey, Freeipa, same thread new subtopic. So, I was bouncing some ideas around with another developer (ayoung) and I think I have a pretty good idea for self-service user registration. The idea is that I put self-service user registration into its own application that calls out to ipa user-add

[Freeipa-devel] Community Portal Milestone

2015-06-08 Thread Drew Erny
must. I need a little bit of guidance. Is working on code to let the IPA server send email to users a good place to start chipping at this? Thanks, Drew Erny de...@redhat.com -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-dev

Re: [Freeipa-devel] Password Maxlife 0 causes expiration of 90 days

2015-06-08 Thread Drew Erny
On 06/08/2015 02:42 AM, Martin Kosek wrote: On 06/05/2015 05:07 PM, Simo Sorce wrote: On Fri, 2015-06-05 at 10:37 -0400, Drew Erny wrote: On 06/04/2015 05:41 PM, Alexander Bokovoy wrote: On Thu, 04 Jun 2015, Drew Erny wrote: https://fedorahosted.org/freeipa/ticket/2795 I've tracked

Re: [Freeipa-devel] Password Maxlife 0 causes expiration of 90 days

2015-06-05 Thread Drew Erny
On 06/04/2015 05:41 PM, Alexander Bokovoy wrote: On Thu, 04 Jun 2015, Drew Erny wrote: https://fedorahosted.org/freeipa/ticket/2795 I've tracked down the source of this bug; it's nutty C stuff. So, in daemons/ipa-slapi-plugins/ipa-pwd-extop/common.c, when you update password, the

[Freeipa-devel] Password Maxlife 0 causes expiration of 90 days

2015-06-04 Thread Drew Erny
https://fedorahosted.org/freeipa/ticket/2795 I've tracked down the source of this bug; it's nutty C stuff. So, in daemons/ipa-slapi-plugins/ipa-pwd-extop/common.c, when you update password, the expiration time appears to be set in the function ipapwd_CheckPolicy on line 631, which looks like

Re: [Freeipa-devel] [PATCH 0001 v2] Migrate now accepts scope as argument

2015-06-04 Thread Drew Erny
Whoops, hit the wrong "reply". On 06/04/2015 03:34 PM, Drew Erny wrote: This is the same patch sort of manually rebased on the master branch. I couldn't get it to cleanly rebase using tools, so I apply my commit line-by-line; the only changes I made were pulling the "scope

[Freeipa-devel] [PATCH 0001 v2] Migrate now accepts scope as argument

2015-06-03 Thread Drew Erny
clean solution, but if it's a code smell, feel free to suggest improvements. This should have identical behavior to the last patch, except it will autofill scope and no longer prompt interactively. Thanks, Drew Erny de...@redhat.com From 168e910aef41bd1df661317168236287b2994822 Mon Sep

Re: [Freeipa-devel] [PATCH 0001] Migrate now accepts scope as argument

2015-06-02 Thread Drew Erny
n my next patch. On 06/02/2015 04:23 PM, Drew Erny wrote: Hi, all, This is my first patch, which fixes Ticket #2547 at https://fedorahosted.org/freeipa/ticket/2547 It introduces a --scope option to "ipa migrate-ds" which allows the user to specify the search depth of a migration. The p

[Freeipa-devel] [PATCH 0001] Migrate now accepts scope as argument

2015-06-02 Thread Drew Erny
8% confident it doesn't break anything. The only thing I'm not sure about is that if you run ipa migrate-ds without --scope specified, it gives an interactive input for that option; I'm not sure if it's supposed to do that. Thanks, Drew Erny de...@redhat.com From b50522be44ade

[Freeipa-devel] Testing Migration

2015-05-28 Thread Drew Erny
n the codebase that they can tell if the thing I've done is right or wrong just by looking at it. Thanks, Drew Erny de...@redhat.com -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://

Re: [Freeipa-devel] Sudorules user validation help

2015-05-28 Thread Drew Erny
Ok, so should I write a regex that matches that broader pattern, and only allow sudorules users to be added that follow those broader restrictions? On 05/28/2015 02:09 PM, Alexander Bokovoy wrote: On Thu, 28 May 2015, Martin Kosek wrote: On 05/28/2015 04:27 PM, Drew Erny wrote: In the

Re: [Freeipa-devel] Sudorules user validation help

2015-05-28 Thread Drew Erny
15 09:40 AM, Drew Erny wrote: OK, I see now what you mean by that. That is a simpler solution. I'll do it that way. On 05/28/2015 04:44 AM, Martin Kosek wrote: On 05/27/2015 08:41 PM, Drew Erny wrote: Hey, Freeipa-devel, I'm working on ticket #3226 (https://fedorahosted.org/free

Re: [Freeipa-devel] Sudorules user validation help

2015-05-28 Thread Drew Erny
OK, I see now what you mean by that. That is a simpler solution. I'll do it that way. On 05/28/2015 04:44 AM, Martin Kosek wrote: On 05/27/2015 08:41 PM, Drew Erny wrote: Hey, Freeipa-devel, I'm working on ticket #3226 (https://fedorahosted.org/freeipa/ticket/3226) I've

[Freeipa-devel] Sudorules user validation help

2015-05-27 Thread Drew Erny
fic code in some plugin-related (either user.py or baseldap.py module, which would create unwanted coupling. Most specifically, this would be a change to the object instantiated at ipalib/plugins/user.py line 467 Thoughts and suggestions? Thanks, Drew Erny de...@redhat.com -- Manage your s