[Freeipa-devel] [PATCH] 377 Using LDAPI to setup CA and KRA agents.

[Martin Basti]

On 08/27/2015 09:41 PM, Endi Sukma Dewata wrote:
> The CA and KRA installation code has been modified to use LDAPI
> to create the CA and KRA agents directly in the CA and KRA
> database. This way it's no longer necessary to use the Directory
> Manager password or CA and KRA admin certificate.
>
> https://fedorahosted.org/freeipa/ticket/5257
>
>
>

Thank you.

1) Can you use following code instead of direct call of ldap2.ldap2()?

if not api.Backend.ldap2.is_connected():
     api.Backend.ldap2.connect(autobind=True)

conn = api.Backend.ldap2


2) Patch needs rebase to master branch.


3)
+        user_dn = DN(('uid', "ipara"), ('ou', 'People'), self.basedn)
+        conn.create(
+            dn=user_dn,

can you use add entry() instead of create()? We don't use native 
python-ldap, but rather ipaldap methods



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20150831/555854bb/attachment.htm>