[Freeipa-devel] [PATCH] Jumbo patch to add kerberos auth, do other stuff

Rob Crittenden rcritten at redhat.com
Thu Aug 9 21:59:14 UTC 2007


Simo Sorce wrote:
> On Thu, 2007-08-09 at 16:48 -0400, Rob Crittenden wrote:
>> Kevin McCarthy wrote:
>>> Rob Crittenden wrote:
>>>> Kevin, some things of note for you:
>>>>
>>>> 1. I removed the userPassword question. Would have required another ACI to 
>>>> allow it and I just didn't feel like messing with it.
>>>> 2. You want to import ipaclient now and invoke things like this:
>>>>
>>>>     client = ipaclient.IPAClient(True)
>>>>     client.set_principal("test at REALM")
>>>>     users = client.add_user (kw)
>>> I can report success with the patch.  I had to filter out the 'submit'
>>> button from the kw list, but after that was able to successfully add a
>>> user.
>>>
>>> I think we should change client.add_user() should take a User object,
>>> but otherwise it looks great.
>>>
>> I looked at this a bit today. The problem is I need to provide a single 
>> API. Data passing in through the XML-RPC interface will end up as a dict 
>> (the way it is now). If we start using objects in the GUI we end up with 
>> two APIs.
> 
> Isn't dict case sensitive? How do you handle the fact the attribute
> names are not ?

The ipaldap.py code handles that on the server (it uses ldap.cidict 
which is not case-sensitive for attributes). It is up the the client to 
do it for their own purposes.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070809/a5c45ebd/attachment.bin>


More information about the Freeipa-devel mailing list