Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 26/08/15 09:42, Jan Cholasta wrote: On 25.8.2015 21:00, Simo Sorce wrote: On Tue, 2015-08-25 at 20:45 +0200, Michael Šimáček wrote: On 2015-08-25 18:43, Robbie Harwood wrote: Jan Cholasta writes: On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38,

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 25.8.2015 21:00, Simo Sorce wrote: On Tue, 2015-08-25 at 20:45 +0200, Michael Šimáček wrote: On 2015-08-25 18:43, Robbie Harwood wrote: Jan Cholasta jchol...@redhat.com writes: On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015,

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Jan Cholasta jchol...@redhat.com writes: On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On Tue, 2015-08-25 at 20:45 +0200, Michael Šimáček wrote: On 2015-08-25 18:43, Robbie Harwood wrote: Jan Cholasta jchol...@redhat.com writes: On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-25 12:13, Jan Cholasta wrote: On 24.8.2015 20:29, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27,

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 24.8.2015 20:29, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: 3)

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: 3)

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 08/25/2015 12:38 PM, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 25.8.2015 12:21, Michael Šimáček wrote: On 2015-08-25 12:13, Jan Cholasta wrote: On 24.8.2015 20:29, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On Tue, 25 Aug 2015, Petr Viktorin wrote: On 08/25/2015 12:38 PM, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 23.8.2015 23:27, Michael Šimáček wrote: On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Michael Šimáček msima...@redhat.com writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: 3) ipa-adtrust-install fails with: admin password:

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: -

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On Fri, 2015-08-21 at 15:52 +0200, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-19 11:26, Alexander Bokovoy wrote: On Tue, 18 Aug 2015, Michael Šimáček wrote: On 2015-08-17 21:10, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap - get_default_realm usages

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On Thu, 2015-08-20 at 14:42 -0400, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-20 12:32, Michael Šimáček wrote: On 2015-08-19 11:26, Alexander Bokovoy wrote: On Tue, 18 Aug 2015, Michael Šimáček wrote: On 2015-08-17 21:10, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: -

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Simo Sorce s...@redhat.com writes: On Thu, 2015-08-20 at 14:42 -0400, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous:

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On Tue, 18 Aug 2015, Michael Šimáček wrote: On 2015-08-17 21:10, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap - get_default_realm usages

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-17 21:10, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap - get_default_realm usages replaced by api.env.realm - fixed missing third

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Michael Šimáček msima...@redhat.com writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap - get_default_realm usages replaced by api.env.realm - fixed missing third kinit attempt in trust-fetch-domains -

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-08-03 09:25, Jan Cholasta wrote: Dne 31.7.2015 v 20:20 Simo Sorce napsal(a): On Fri, 2015-07-31 at 16:41 +0200, Michael Šimáček wrote: On 2015-07-31 07:52, Jan Cholasta wrote: Hi Michael, Dne 29.7.2015 v 10:09 Michael Šimáček napsal(a): Hi, this is the first attempt to port FreeIPA

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Dne 31.7.2015 v 20:20 Simo Sorce napsal(a): On Fri, 2015-07-31 at 16:41 +0200, Michael Šimáček wrote: On 2015-07-31 07:52, Jan Cholasta wrote: Hi Michael, Dne 29.7.2015 v 10:09 Michael Šimáček napsal(a): Hi, this is the first attempt to port FreeIPA from deprecated python3-incompatible

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-07-31 07:52, Jan Cholasta wrote: Hi Michael, Dne 29.7.2015 v 10:09 Michael Šimáček napsal(a): Hi, this is the first attempt to port FreeIPA from deprecated python3-incompatible python-krbV library to python-gssapi. The patch depends on python-kerberos-python-gssapi patch [1] to apply

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On Fri, 2015-07-31 at 16:41 +0200, Michael Šimáček wrote: On 2015-07-31 07:52, Jan Cholasta wrote: Hi Michael, Dne 29.7.2015 v 10:09 Michael Šimáček napsal(a): Hi, this is the first attempt to port FreeIPA from deprecated python3-incompatible python-krbV library to python-gssapi.

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-07-29 11:56, Christian Heimes wrote: On 2015-07-29 10:09, Michael Šimáček wrote: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-07-29 19:20, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-07-30 15:06, Michael Šimáček wrote: I didn't use ctypes, because it was advised against on this list: https://www.redhat.com/archives/freeipa-devel/2012-February/msg00268.html For the tests it's probably fine, but so is using klist. It would actually help a lot with getting the default

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Michael Šimáček msima...@redhat.com writes: On 2015-07-29 19:20, Robbie Harwood wrote: Michael Šimáček msima...@redhat.com writes: -# The keytab may have stale key material (from older trust-add run) -if not os.path.isfile(oneway_ccache_name): -oneway_ccache =

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 07/29/2015 11:56 AM, Christian Heimes wrote: On 2015-07-29 10:09, Michael Šimáček wrote: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Michael Šimáček msima...@redhat.com writes: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be adjusted for this - the connect method now

[Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

Hi, this is the first attempt to port FreeIPA from deprecated python3-incompatible python-krbV library to python-gssapi. The patch depends on python-kerberos-python-gssapi patch [1] to apply cleanly, but the overlap is small, so I think it can be at least partially reviewed without it.

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

On 2015-07-29 10:09, Michael Šimáček wrote: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be adjusted for this - the connect method now