Re: [ANNOUNCE] python-ad

2007-12-12 Thread Michael Ströder
David Leonard wrote: > Geert Jansen wrote: >> Michael Ströder wrote: >>> Well, setting an env var is not really a good choice when running within >>> a multi-threaded web application... :-/ > > yet another reason to avoid threads? :) The multi-threaded approach gives me the possibility to use p

Re: [ANNOUNCE] python-ad

2007-12-12 Thread David Leonard
Geert Jansen wrote: Michael Ströder wrote: Well, setting an env var is not really a good choice when running within a multi-threaded web application... :-/ yet another reason to avoid threads? :) I was thinking how one could solve the problem of per-thread credentials in python-

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Geert Jansen
Michael Ströder wrote: > > Well, setting an env var is not really a good choice when running within > a multi-threaded web application... :-/ > I was thinking how one could solve the problem of per-thread credentials in python-ldap (or python-ad).. I think it can be done with the keyring crede

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Geert Jansen
Torsten Kurbad wrote: > ME, ME, ME!!! :o) > > I tried several krb5 modules lying around in the net so far - and none > really worked! In fact, most of the implementations require an external > kinit call, which is NOT what I intend to let my users do... > > So, I'd very much appreciate, if you thi

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Geert Jansen
Michael Ströder wrote: > Ah, ok. Interesting. Why don't you separate the krb5 module into another > project. I guess some people might be interested in that. > > Especially my dream would be to support HTTP-Authentication based on > SPNEGO/GSSAPI in web2ldap. But not only authenticating the user a

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Michael Ströder wrote: > Rich Megginson wrote: > >> Michael Ströder wrote: >> >>> Rich Megginson wrote: >>> >>> You might be interested in the freeipa.org project which uses python, python-ldap, turbogears, PyKerberos, and supports http authentication with forwardabl

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Michael Ströder
Rich Megginson wrote: > Michael Ströder wrote: >> Rich Megginson wrote: >> >>> You might be interested in the freeipa.org project which uses python, >>> python-ldap, turbogears, PyKerberos, and supports http authentication >>> with forwardable tickets. >>> I don't think they support SPNEGO yet bu

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Michael Ströder wrote: > Rich Megginson wrote: > >> You might be interested in the freeipa.org project which uses python, >> python-ldap, turbogears, PyKerberos, and supports http authentication >> with forwardable tickets. >> I don't think they support SPNEGO yet but patches are welcome :-) >

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Michael Ströder
Rich Megginson wrote: > You might be interested in the freeipa.org project which uses python, > python-ldap, turbogears, PyKerberos, and supports http authentication > with forwardable tickets. > I don't think they support SPNEGO yet but patches are welcome :-) How does the browser send the tick

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Michael Ströder wrote: > Rich Megginson wrote: > >> You might be interested in the freeipa.org project which uses python, >> python-ldap, turbogears, PyKerberos, and supports http authentication >> with forwardable tickets. I don't think they support SPNEGO yet but >> patches are welcome :-)

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Michael Ströder
Rich Megginson wrote: > You might be interested in the freeipa.org project which uses python, > python-ldap, turbogears, PyKerberos, and supports http authentication > with forwardable tickets. I don't think they support SPNEGO yet but > patches are welcome :-) Well, glancing over the code I w

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Michael Ströder
David Leonard wrote: > > I am interested in a better GSSAPI binding for Python.. and have some > incomplete code locally if anyone else is interested. Well, how about contributing your code to another project? Or how about creating a new project? > To do credential forwarding, the gss is current

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Noah Gift
On Dec 11, 2007, at 10:02 AM, Rich Megginson wrote: > Torsten Kurbad wrote: >> At Tue, 11 Dec 2007 14:45:01 +0100 >> Michael Ströder <[EMAIL PROTECTED]> wrote: >> >> >>> Ah, ok. Interesting. Why don't you separate the krb5 module into >>> another project. I guess some people might be interested i

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Noah Gift
On Dec 11, 2007, at 10:31 AM, Rich Megginson wrote: > Noah Gift wrote: >> On Dec 11, 2007, at 10:02 AM, Rich Megginson wrote: >> >> >>> Torsten Kurbad wrote: >>> At Tue, 11 Dec 2007 14:45:01 +0100 Michael Ströder <[EMAIL PROTECTED]> wrote: > Ah, ok. Interesting. Why d

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Noah Gift wrote: > On Dec 11, 2007, at 10:02 AM, Rich Megginson wrote: > > >> Torsten Kurbad wrote: >> >>> At Tue, 11 Dec 2007 14:45:01 +0100 >>> Michael Ströder <[EMAIL PROTECTED]> wrote: >>> >>> >>> Ah, ok. Interesting. Why don't you separate the krb5 module into another

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Rich Megginson
Torsten Kurbad wrote: > At Tue, 11 Dec 2007 14:45:01 +0100 > Michael Ströder <[EMAIL PROTECTED]> wrote: > > >> Ah, ok. Interesting. Why don't you separate the krb5 module into >> another project. I guess some people might be interested in that. >> > > ME, ME, ME!!! :o) > > I tried several k

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Torsten Kurbad
At Tue, 11 Dec 2007 14:45:01 +0100 Michael Ströder <[EMAIL PROTECTED]> wrote: > Ah, ok. Interesting. Why don't you separate the krb5 module into > another project. I guess some people might be interested in that. ME, ME, ME!!! :o) I tried several krb5 modules lying around in the net so far - and

Re: [ANNOUNCE] python-ad

2007-12-11 Thread David Leonard
Michael Ströder wrote: Geert Jansen wrote: Michael Ströder wrote: I saw that kinit is started as a shell sub-process. Actually Python-AD comes with a C module that wraps the required Kerberos functions (see lib/ad/protocol/krb5.c). What you probably saw is the use of kinit in

Re: [ANNOUNCE] python-ad

2007-12-11 Thread Michael Ströder
Geert Jansen wrote: > Michael Ströder wrote: > >> I saw that kinit is started as a shell sub-process. > > Actually Python-AD comes with a C module that wraps the required > Kerberos functions (see lib/ad/protocol/krb5.c). What you probably saw > is the use of kinit in the test suite, where I use

Re: [ANNOUNCE] python-ad

2007-12-10 Thread Geert Jansen
Michael Ströder wrote: > I saw that kinit is started as a shell sub-process. Actually Python-AD comes with a C module that wraps the required Kerberos functions (see lib/ad/protocol/krb5.c). What you probably saw is the use of kinit in the test suite, where I use it to verify the credentials acqu

Re: [ANNOUNCE] python-ad

2007-12-10 Thread Michael Ströder
Geert Jansen wrote: > Mike Matz wrote: >> Will this initial release work on Mac OS X? If not, are there any >> plans in the future for Mac OS X? > > At the moment I have not tested Python-AD on OSX, but I would be happy > to support it in a future version. This requires though that someone > sends

Re: [ANNOUNCE] python-ad

2007-12-10 Thread Geert Jansen
Mike Matz wrote: > Will this initial release work on Mac OS X? If not, are there any > plans in the future for Mac OS X? At the moment I have not tested Python-AD on OSX, but I would be happy to support it in a future version. This requires though that someone sends me patches, or that I find a wa

Re: [ANNOUNCE] python-ad

2007-12-10 Thread Mike Matz
Will this initial release work on Mac OS X? If not, are there any plans in the future for Mac OS X? Thanks, Mike On Dec 8, 2007, at 11:17 AM, Geert Jansen wrote: > All, > > with this email I am announcing the first public release of python-ad. > Python-AD is a Python client for MS Active Dire