<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi all,<div><br></div><div><br></div><div><div>Il giorno 03/feb/2014, alle ore 11:41, Francesco Chicchiriccò <<a href="mailto:ilgrosso@apache.org">ilgrosso@apache.org</a>> ha scritto:</div><br class="Apple-interchange-newline"><blockquote type="cite">On 31/01/2014 18:57, Dmitri Pal wrote:<br><blockquote type="cite">On 01/31/2014 08:17 AM, Francesco Chicchiriccò wrote:<br><blockquote type="cite">Are you saying that we should split our development in two:<br><br>(1) smart proxy, exposing the RESTful interface, developed on the<br>basis of [8]</blockquote></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><br>(2) actual ConnId connector, dealing with the proxy above for<br>implementing its own logic<br></blockquote>Correct<br><br><blockquote type="cite">If so, could you please point to the source code of [8]?<br>Will then this eventually become part of FreeIPA?<br></blockquote>Quite soon. I would leave it to the team to suggest whether user and<br>host provisioning smart proxies should be a same smart proxy or<br>different so that they can be installed independently from each other<br>but use the same approach. IMO haveing them separately but share the<br>same code and approach will be more valuable to the project. But I am<br>open to other ideas here.<br><br><blockquote type="cite">I am actually not sure if it is "lightweight" connector could actually<br>be better than a "loaded" connector (e.g. without proxy), from a<br>deployment point of view, unless you are saying either that (a) a<br>smart proxy is already available that can be reused<br></blockquote>The idea can be reused as a starting point. IMO the easiest would be to<br>look at the patches and use same machinery but implement different commands.<br><br><blockquote type="cite">or that (b) incorporating the smart proxy that we are going to develop<br>into FreeIPA will easily happen.<br></blockquote>If done right: i.e. following process and style then yes.<br><br>Please become familiar with the coding style [9] page on the wiki and<br>other contributer guidelines [10].<br>Also having a design page created as a result of the preliminary<br>investigation would go a long way towards acceptance and quality of the<br>feature.<br><br>We will gladly guide you on the way if you have specific questions<br><br>[...]<br></blockquote><br>Ok then, we'll do it as follows.<br><br>We are currently experimenting with FreeIPA, to get familiar with technology and options; once we will be confident enough to start the actual work on the connector, we will check the status of the smart proxy patches from [11].<br><br>If the implementation status will be close to be ready and about to be included in the official distribution, we will follow the suggestions above and develop a REST-based connector.<br></blockquote><div><br></div><div>We start to implementing a FreeIPA ConnId connector for Apache Syncope. We have to implement all identity operations defined by the ConnId framework. </div><div>I would like to know the implementation status of the Smart/Proxy and if we can use it to all the identity operations.</div><div><br></div><div>Thanks</div><div>M </div><div><br></div></div><div><blockquote type="cite"><br>Otherwise, we will instead specialize the CMD connector [12] to feature the FreeIPA command-line interface (as suggested at the beginning of this thread). There will be potentially need, in this case, to include the ConnId connector server into the Syncope deployment architecture, but this is a supported pattern.<br><br>Thanks for your support.<br>Regards.<br><br><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite"><blockquote type="cite">[2] <a href="http://tirasa.github.io/ConnId/">http://tirasa.github.io/ConnId/</a><br>[3] <a href="http://java.net/projects/identityconnectors/">http://java.net/projects/identityconnectors/</a><br>[4] <a href="https://github.com/Tirasa/ConnIdFreeIPABundle">https://github.com/Tirasa/ConnIdFreeIPABundle</a><br></blockquote>[5] <a href="http://tirasa.github.io/ConnId/apidocs/base/org/identityconnectors/framework/spi/operations/package-summary.html">http://tirasa.github.io/ConnId/apidocs/base/org/identityconnectors/framework/spi/operations/package-summary.html</a><br></blockquote>[6] <a href="https://www.redhat.com/archives/freeipa-users/2013-January/msg00109.html">https://www.redhat.com/archives/freeipa-users/2013-January/msg00109.html</a><br><br>[7] <a href="http://www.freeipa.org/page/Documentation">http://www.freeipa.org/page/Documentation</a><br>[8] <a href="http://www.freeipa.org/page/V3/Smart_Proxy">http://www.freeipa.org/page/V3/Smart_Proxy</a><br></blockquote></blockquote>[1] <a href="http://syncope.apache.org/">http://syncope.apache.org/</a><br></blockquote>[9] <a href="http://www.freeipa.org/page/Coding_Style">http://www.freeipa.org/page/Coding_Style</a><br>[10] <a href="http://www.freeipa.org/page/Contribute/Code">http://www.freeipa.org/page/Contribute/Code</a><br></blockquote>[11] <a href="https://fedorahosted.org/freeipa/ticket/4128">https://fedorahosted.org/freeipa/ticket/4128</a><br>[12] <a href="https://github.com/Tirasa/ConnIdCMDBundle">https://github.com/Tirasa/ConnIdCMDBundle</a><br>[13] <a href="https://connid.atlassian.net/wiki/display/BASE/Connector+Servers">https://connid.atlassian.net/wiki/display/BASE/Connector+Servers</a><br><br>-- <br>Francesco Chicchiriccò<br><br>Tirasa - Open Source Excellence<br><a href="http://www.tirasa.net/">http://www.tirasa.net/</a><br><br>Involved at The Apache Software Foundation:<br>member, Syncope PMC chair, Cocoon PMC, Olingo PPMC<br>http://people.apache.org/~ilgrosso/<br><br>_______________________________________________<br>Freeipa-devel mailing list<br>Freeipa-devel@redhat.com<br>https://www.redhat.com/mailman/listinfo/freeipa-devel<br></blockquote></div><br><div>
-- <br>Dott. Marco Di Sabatino Di Diodoro<br>Tel. +39 3939065570<br><br>Tirasa S.r.l.<br>Viale D'Annunzio 267 - 65127 Pescara<br>Tel +39 0859116307 / FAX +39 0859111173<br><a href="http://www.tirasa.net/">http://www.tirasa.net</a><br><br>Apache Syncope PMC Member<br><a href="http://people.apache.org/~mdisabatino/">http://people.apache.org/~mdisabatino/</a>
</div>
<br></body></html>