Re: [SSSD] [PATCH] Disallow all legacy operations outside domains

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 08:09 AM, Sumit Bose wrote: > On Fri, Aug 21, 2009 at 02:01:32PM +0200, Jakub Hrozek wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> On 08/21/2009 01:19 PM, Jakub Hrozek wrote: >>> On 08/21/2009 11:24 AM, Jakub Hrozek wro

Re: [SSSD] [PATCH] extended the documentation of LDAP backend

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 12:42 PM, Stephen Gallagher wrote: > On 08/20/2009 09:42 AM, Sumit Bose wrote: >> Hi, > >> this patch extends the man page of the LDAP backend and added a >> configuration example for AD. > >> bye, >> Sumit > > >>

Re: [SSSD] [PATCH] store additional LDAP attributes

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 12:38 PM, Stephen Gallagher wrote: > On 08/20/2009 08:15 AM, Sumit Bose wrote: >> Hi, > >> with this patch the LDAP backend can store two additional attributes to >> the sysdb if available. The original DN is used by the authentication >

Re: [SSSD] [PATCH] fix handling of filtersUsers in groups

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 12:10 PM, Stephen Gallagher wrote: > On 08/21/2009 11:09 AM, Sumit Bose wrote: >> Hi, > >> this patch fixes https://fedorahosted.org/sssd/ticket/108 . > >> I couldn't make up my mind if the output should contain the filtered >> user or

Re: [SSSD] [PATCH] ELAPI Shortening names

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 10:23 AM, Dmitri Pal wrote: > Sumit Bose wrote: >> On Thu, Aug 20, 2009 at 06:53:44PM -0400, Dmitri Pal wrote: >> >>> Ticket #118 >>> See patch comment. >>> >>> -- >>> Thank you, >>> Dmitri Pal >>> >>> Engineering Manager IPA project,

Re: [SSSD] [PATCH] Fix sysdb tests

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 09:41 AM, Stephen Gallagher wrote: > On 08/21/2009 09:28 AM, Jakub Hrozek wrote: >> Couple of changes to sysdb tests to reflect latest changes: >> * we're always in MPG domains, so don't set GID, let sysdb choose it >> automatically >> *

Re: [SSSD] [PATCH] use stored upn if available

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 08:16 AM, Stephen Gallagher wrote: > On 08/21/2009 06:17 AM, Sumit Bose wrote: >> Hi, > >> this is the last patch in the series to add the basic support for AD as >> a server. With this patch the kerberos backend will use the user >> pri

Re: [SSSD] [PATCH] extended the documentation of LDAP backend

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/20/2009 09:42 AM, Sumit Bose wrote: > Hi, > > this patch extends the man page of the LDAP backend and added a > configuration example for AD. > > bye, > Sumit > > > > >

Re: [SSSD] [PATCH] store additional LDAP attributes

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/20/2009 08:15 AM, Sumit Bose wrote: > Hi, > > with this patch the LDAP backend can store two additional attributes to > the sysdb if available. The original DN is used by the authentication > part of the LDAP backend to bind to the LDAP server.

Re: [SSSD] [PATCH] fix handling of filtersUsers in groups

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 11:09 AM, Sumit Bose wrote: > Hi, > > this patch fixes https://fedorahosted.org/sssd/ticket/108 . > > I couldn't make up my mind if the output should contain the filtered > user or not (wheel:x:10:root,sgallagh or wheel:x:10:sgallagh),

[SSSD] [PATCH] fix handling of filtersUsers in groups

2009-08-21 Thread Sumit Bose
Hi, this patch fixes https://fedorahosted.org/sssd/ticket/108 . I couldn't make up my mind if the output should contain the filtered user or not (wheel:x:10:root,sgallagh or wheel:x:10:sgallagh), because I think the handling of root is different from other user. With provider=files root should be

Re: [SSSD] [PATCH] ELAPI Shortening names

2009-08-21 Thread Dmitri Pal
Sumit Bose wrote: > On Thu, Aug 20, 2009 at 06:53:44PM -0400, Dmitri Pal wrote: > >> Ticket #118 >> See patch comment. >> >> -- >> Thank you, >> Dmitri Pal >> >> Engineering Manager IPA project, >> Red Hat Inc. >> >> >> --- >> Looking to carve out IT costs? >> www.re

Re: [SSSD] [PATCH] Fix sysdb tests

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 09:28 AM, Jakub Hrozek wrote: > Couple of changes to sysdb tests to reflect latest changes: > * we're always in MPG domains, so don't set GID, let sysdb choose it > automatically > * we're always in MPG domains, so GIDs and UIDs cannot ov

[SSSD] [PATCH] Fix sysdb tests

2009-08-21 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Couple of changes to sysdb tests to reflect latest changes: * we're always in MPG domains, so don't set GID, let sysdb choose it automatically * we're always in MPG domains, so GIDs and UIDs cannot overlap * test the difference between sysdb_add_user a

Re: [SSSD] [PATCH] COMMON Fixes to return values, errno, leaks

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 09:04 AM, Dmitri Pal wrote: > Stephen Gallagher wrote: >> On 08/20/2009 06:03 PM, Dmitri Pal wrote: >>> Steve, >> >>> I re-based my source and used the commit value of >>> 93c02400b6075f0a4784e87229102bf751f27815 in the tickets but when

Re: [SSSD] [PATCHES] python bindings for managing users in local domains

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/20/2009 06:01 PM, Jakub Hrozek wrote: > Attached are three patches. > > [PATCH 1/3] Refactor tools code > Refactores tools code while still retaining the original structure. > Move parameter parsing in tools before attempting to do anything that

Re: [SSSD] [PATCH] COMMON Fixes to return values, errno, leaks

2009-08-21 Thread Dmitri Pal
Stephen Gallagher wrote: > On 08/20/2009 06:03 PM, Dmitri Pal wrote: > > Steve, > > > I re-based my source and used the commit value of > > 93c02400b6075f0a4784e87229102bf751f27815 in the tickets but when I tried > > to follow the automatically created link the track complained that the > > commit

Re: [SSSD] [PATCH] use stored upn if available

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 06:17 AM, Sumit Bose wrote: > Hi, > > this is the last patch in the series to add the basic support for AD as > a server. With this patch the kerberos backend will use the user > principal name provided by the server to get the TGT. To m

Re: [SSSD] [PATCH] Disallow all legacy operations outside domains

2009-08-21 Thread Sumit Bose
On Fri, Aug 21, 2009 at 02:01:32PM +0200, Jakub Hrozek wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 08/21/2009 01:19 PM, Jakub Hrozek wrote: > > On 08/21/2009 11:24 AM, Jakub Hrozek wrote: > >> One of my previous patches disallowed adding users and groups outside > >> known doma

Re: [SSSD] [PATCH] Disallow all legacy operations outside domains

2009-08-21 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 01:19 PM, Jakub Hrozek wrote: > On 08/21/2009 11:24 AM, Jakub Hrozek wrote: >> One of my previous patches disallowed adding users and groups outside >> known domains but I forgot disallowing modifying, deleting, etc. > >> Fixes: ticket #

Re: [SSSD] [PATCH] COMMON Fixes to return values, errno, leaks

2009-08-21 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/20/2009 06:03 PM, Dmitri Pal wrote: > Steve, > > I re-based my source and used the commit value of > 93c02400b6075f0a4784e87229102bf751f27815 in the tickets but when I tried > to follow the automatically created link the track complained that t

Re: [SSSD] [PATCH] Disallow all legacy operations outside domains

2009-08-21 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/21/2009 11:24 AM, Jakub Hrozek wrote: > One of my previous patches disallowed adding users and groups outside > known domains but I forgot disallowing modifying, deleting, etc. > > Fixes: ticket #114 Sorry, the attached patch did not apply clea

[SSSD] [PATCH] use stored upn if available

2009-08-21 Thread Sumit Bose
Hi, this is the last patch in the series to add the basic support for AD as a server. With this patch the kerberos backend will use the user principal name provided by the server to get the TGT. To make the client side kerberos libraries happy the realm part is always made upper case. bye, Sumit

[SSSD] [PATCH] Disallow all legacy operations outside domains

2009-08-21 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 One of my previous patches disallowed adding users and groups outside known domains but I forgot disallowing modifying, deleting, etc. Fixes: ticket #114 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora

Re: [SSSD] [PATCH] ELAPI Shortening names

2009-08-21 Thread Sumit Bose
On Thu, Aug 20, 2009 at 06:53:44PM -0400, Dmitri Pal wrote: > Ticket #118 > See patch comment. > > -- > Thank you, > Dmitri Pal > > Engineering Manager IPA project, > Red Hat Inc. > > > --- > Looking to carve out IT costs? > www.redhat.com/carveoutcosts/ > > >From