Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-31 Thread David Kupka
On 26/08/15 09:42, Jan Cholasta wrote: On 25.8.2015 21:00, Simo Sorce wrote: On Tue, 2015-08-25 at 20:45 +0200, Michael Šimáček wrote: On 2015-08-25 18:43, Robbie Harwood wrote: Jan Cholasta writes: On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38, Alexander Bokovoy wrote:

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-26 Thread Jan Cholasta
On 25.8.2015 21:00, Simo Sorce wrote: On Tue, 2015-08-25 at 20:45 +0200, Michael Šimáček wrote: On 2015-08-25 18:43, Robbie Harwood wrote: Jan Cholasta writes: On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wro

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Simo Sorce
On Tue, 2015-08-25 at 20:45 +0200, Michael Šimáček wrote: > > On 2015-08-25 18:43, Robbie Harwood wrote: > > Jan Cholasta writes: > > > >> On 25.8.2015 12:46, Michael Šimáček wrote: > >>> On 2015-08-25 12:38, Alexander Bokovoy wrote: > On Tue, 25 Aug 2015, Michael Šimáček wrote: > > On 2

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Michael Šimáček
On 2015-08-25 18:43, Robbie Harwood wrote: Jan Cholasta writes: On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-24 17:49, S

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Robbie Harwood
Jan Cholasta writes: > On 25.8.2015 12:46, Michael Šimáček wrote: >> On 2015-08-25 12:38, Alexander Bokovoy wrote: >>> On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: > Michael Šimáček writes: >> On 2015-08-24 17:49, Simo Sorce wrote: >>> O

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Alexander Bokovoy
On Tue, 25 Aug 2015, Petr Viktorin wrote: On 08/25/2015 12:38 PM, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šim

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Jan Cholasta
On 25.8.2015 12:46, Michael Šimáček wrote: On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šim

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Petr Viktorin
On 08/25/2015 12:38 PM, Alexander Bokovoy wrote: > On Tue, 25 Aug 2015, Michael Šimáček wrote: >> >> >> On 2015-08-24 20:29, Robbie Harwood wrote: >>> Michael Šimáček writes: >>> On 2015-08-24 17:49, Simo Sorce wrote: > On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: >

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Jan Cholasta
On 25.8.2015 12:21, Michael Šimáček wrote: On 2015-08-25 12:13, Jan Cholasta wrote: On 24.8.2015 20:29, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Michael Šimáček
On 2015-08-25 12:38, Alexander Bokovoy wrote: On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Chola

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Alexander Bokovoy
On Tue, 25 Aug 2015, Michael Šimáček wrote: On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Michael Šimáček
On 2015-08-25 12:13, Jan Cholasta wrote: On 24.8.2015 20:29, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrot

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Michael Šimáček
On 2015-08-24 20:29, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: 3) ipa-adtrust-install fails with: a

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-25 Thread Jan Cholasta
On 24.8.2015 20:29, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: 3) ipa-adtrust-install fails with: admi

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-24 Thread Robbie Harwood
Michael Šimáček writes: > On 2015-08-24 17:49, Simo Sorce wrote: > >> On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: >> >>> On 2015-08-24 14:50, Jan Cholasta wrote: >>> On 23.8.2015 23:27, Michael Šimáček wrote: 3) ipa-adtrust-install fails with: admin password

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-24 Thread Michael Šimáček
On 2015-08-24 17:49, Simo Sorce wrote: On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček w

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-24 Thread Simo Sorce
On Mon, 2015-08-24 at 17:18 +0200, Michael Šimáček wrote: > On 2015-08-24 14:50, Jan Cholasta wrote: > > On 23.8.2015 23:27, Michael Šimáček wrote: > >> > >> > >> On 2015-08-21 15:52, Michael Šimáček wrote: > >>> > >>> > >>> On 2015-08-20 20:42, Robbie Harwood wrote: > Michael Šimáček writes:

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-24 Thread Michael Šimáček
On 2015-08-24 14:50, Jan Cholasta wrote: On 23.8.2015 23:27, Michael Šimáček wrote: On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček writes: Attaching new revis

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-24 Thread Jan Cholasta
On 23.8.2015 23:27, Michael Šimáček wrote: On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček writes: Attaching new revision of the patch. Changes from the previou

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-23 Thread Michael Šimáček
On 2015-08-21 15:52, Michael Šimáček wrote: On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind ty

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-21 Thread Simo Sorce
On Fri, 2015-08-21 at 15:52 +0200, Michael Šimáček wrote: > > On 2015-08-20 20:42, Robbie Harwood wrote: > > Michael Šimáček writes: > > > >> On 2015-08-20 12:32, Michael Šimáček wrote: > >> > >> Michael Šimáček writes: > >> > >>> Attaching new revision of the patch. Changes from the

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-21 Thread Michael Šimáček
On 2015-08-20 20:42, Robbie Harwood wrote: Michael Šimáček writes: On 2015-08-20 12:32, Michael Šimáček wrote: Michael Šimáček writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap - get_default_realm u

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-20 Thread Robbie Harwood
Simo Sorce writes: > On Thu, 2015-08-20 at 14:42 -0400, Robbie Harwood wrote: >> Michael Šimáček writes: >> >>> On 2015-08-20 12:32, Michael Šimáček wrote: >>> >>> Michael Šimáček writes: >>> Attaching new revision of the patch. Changes from the previous: - ldap2's co

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-20 Thread Simo Sorce
On Thu, 2015-08-20 at 14:42 -0400, Robbie Harwood wrote: > Michael Šimáček writes: > > > On 2015-08-20 12:32, Michael Šimáček wrote: > > > > Michael Šimáček writes: > > > >> Attaching new revision of the patch. Changes from the previous: > >> - ldap2's connect now chooses the bin

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-20 Thread Robbie Harwood
Michael Šimáček writes: > On 2015-08-20 12:32, Michael Šimáček wrote: > > Michael Šimáček writes: > >> Attaching new revision of the patch. Changes from the previous: >> - ldap2's connect now chooses the bind type same way as in ipaldap >> - get_default_realm usages replaced

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-20 Thread Michael Šimáček
On 2015-08-20 12:32, Michael Šimáček wrote: On 2015-08-19 11:26, Alexander Bokovoy wrote: On Tue, 18 Aug 2015, Michael Šimáček wrote: On 2015-08-17 21:10, Robbie Harwood wrote: Michael Šimáček writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now ch

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-20 Thread Michael Šimáček
On 2015-08-19 11:26, Alexander Bokovoy wrote: On Tue, 18 Aug 2015, Michael Šimáček wrote: On 2015-08-17 21:10, Robbie Harwood wrote: Michael Šimáček writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap -

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-19 Thread Alexander Bokovoy
On Tue, 18 Aug 2015, Michael Šimáček wrote: On 2015-08-17 21:10, Robbie Harwood wrote: Michael Šimáček writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap - get_default_realm usages replaced by api.env.real

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-18 Thread Michael Šimáček
On 2015-08-17 21:10, Robbie Harwood wrote: Michael Šimáček writes: Attaching new revision of the patch. Changes from the previous: - ldap2's connect now chooses the bind type same way as in ipaldap - get_default_realm usages replaced by api.env.realm - fixed missing third kinit attempt in trus

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-17 Thread Robbie Harwood
Michael Šimáček writes: > Attaching new revision of the patch. Changes from the previous: > - ldap2's connect now chooses the bind type same way as in ipaldap > - get_default_realm usages replaced by api.env.realm > - fixed missing third kinit attempt in trust-fetch-domains > - removed rewrapping

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-13 Thread Michael Šimáček
On 2015-08-03 09:25, Jan Cholasta wrote: Dne 31.7.2015 v 20:20 Simo Sorce napsal(a): On Fri, 2015-07-31 at 16:41 +0200, Michael Šimáček wrote: On 2015-07-31 07:52, Jan Cholasta wrote: Hi Michael, Dne 29.7.2015 v 10:09 Michael Šimáček napsal(a): Hi, this is the first attempt to port FreeIPA

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-08-03 Thread Jan Cholasta
Dne 31.7.2015 v 20:20 Simo Sorce napsal(a): On Fri, 2015-07-31 at 16:41 +0200, Michael Šimáček wrote: On 2015-07-31 07:52, Jan Cholasta wrote: Hi Michael, Dne 29.7.2015 v 10:09 Michael Šimáček napsal(a): Hi, this is the first attempt to port FreeIPA from deprecated python3-incompatible pytho

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-31 Thread Simo Sorce
On Fri, 2015-07-31 at 16:41 +0200, Michael Šimáček wrote: > On 2015-07-31 07:52, Jan Cholasta wrote: > > Hi Michael, > > > > Dne 29.7.2015 v 10:09 Michael Šimáček napsal(a): > >> Hi, > >> > >> this is the first attempt to port FreeIPA from deprecated > >> python3-incompatible python-krbV library to

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-31 Thread Michael Šimáček
On 2015-07-31 07:52, Jan Cholasta wrote: Hi Michael, Dne 29.7.2015 v 10:09 Michael Šimáček napsal(a): Hi, this is the first attempt to port FreeIPA from deprecated python3-incompatible python-krbV library to python-gssapi. The patch depends on python-kerberos->python-gssapi patch [1] to apply

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-30 Thread Jan Cholasta
Hi Michael, Dne 29.7.2015 v 10:09 Michael Šimáček napsal(a): Hi, this is the first attempt to port FreeIPA from deprecated python3-incompatible python-krbV library to python-gssapi. The patch depends on python-kerberos->python-gssapi patch [1] to apply cleanly, but the overlap is small, so I th

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-30 Thread Robbie Harwood
Michael Šimáček writes: > On 2015-07-29 19:20, Robbie Harwood wrote: > >> Michael Šimáček writes: >> >>> -# The keytab may have stale key material (from older trust-add run) >>> -if not os.path.isfile(oneway_ccache_name): >>> -oneway_ccache = kinit_keytab(oneway_principal, oneway

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-30 Thread Michael Šimáček
On 2015-07-29 19:20, Robbie Harwood wrote: Michael Šimáček writes: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be adjusted for this - th

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-30 Thread Christian Heimes
On 2015-07-30 15:06, Michael Šimáček wrote: > I didn't use ctypes, because it was advised against on this list: > https://www.redhat.com/archives/freeipa-devel/2012-February/msg00268.html > For the tests it's probably fine, but so is using klist. > It would actually help a lot with getting the defa

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-30 Thread Michael Šimáček
On 2015-07-29 11:56, Christian Heimes wrote: On 2015-07-29 10:09, Michael Šimáček wrote: GSSAPI doesn't provide any method (that I'm aware of) to get default ccache name. In most cases this is not needed as we can simply not pass any name and it will use the default. The ldap plugin had to be ad

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-29 Thread Robbie Harwood
Michael Šimáček writes: > GSSAPI doesn't provide any method (that I'm aware of) to get default > ccache name. In most cases this is not needed as we can simply not > pass any name and it will use the default. The ldap plugin had to be > adjusted for this - the connect method now takes new use_gss

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-29 Thread Petr Viktorin
On 07/29/2015 11:56 AM, Christian Heimes wrote: > On 2015-07-29 10:09, Michael Šimáček wrote: >> GSSAPI doesn't provide any method (that I'm aware of) to get default >> ccache name. In most cases this is not needed as we can simply not pass >> any name and it will use the default. The ldap plugin h

Re: [Freeipa-devel] [PATCH 0002] Port from python-krbV to python-gssapi

2015-07-29 Thread Christian Heimes
On 2015-07-29 10:09, Michael Šimáček wrote: > GSSAPI doesn't provide any method (that I'm aware of) to get default > ccache name. In most cases this is not needed as we can simply not pass > any name and it will use the default. The ldap plugin had to be adjusted > for this - the connect method now