openlmi-devel September 2014

openlmi-devel@lists.fedorahosted.org

9 participants
41 discussions

Polkit-based authorization in OpenLMI providers
by Jan Safranek 16 Feb '15

16 Feb '15

Hello, I've been working on reusing polkit authorization for OpenLMI providers, which use a DBus service (e.g. NetworkManager, PackageKit, realmd, systemd, ...). I've documented the architecture on our wiki [1] and I submitted review in our review-board. I won't push the patches until we get to an agreement that it's the way to go and also the implementation is secure - please review carefully. There are *no* changes needed in our provider code and/or in the DBus services we work with. 1: https://fedorahosted.org/openlmi/wiki/PolkitAuthorization 2: https://reviewboard-openlmi.rhcloud.com/users/jsafrane/ In short, the concept is similar to Cockpit's reauthorization [3], we just don't play tricks with user passwords - we don't have one on CIM provider level. Instead, we register a polkit agent, which bluntly authenticates every request from polkit in its PAM session. 3: https://github.com/cockpit-project/cockpit/blob/master/doc/reauthorize.md [Kudos to Cockpit guys, I used their code to implement polkit agent and helper.] Just a side note: right now, users with remote CIM access must be members of 'pegasus' group, otherwise they cannot start a provider. Is it good or bad? Should _any_ user be able to use CIM by default and let polkit decide? It's trivial to fix, just set different file/directory permissions in tog-pegasus.rpm. And there is /etc/Pegasus/access.conf, which can control access properly if sysadmin wishes, so the question is just about the default setting. Jan

3 7

OpenLMI GUI
by Martin Hatina 23 Oct '14

23 Oct '14

Hello, I developed GUI for OpenLMI (+ account and service provider) as part of my bachelor thesis. Now as an intern I continue working on it. It is capable of generating scripts for LMIShell as well as execute these changes. It can also discover computers on network using SLP. For those of you, who might be interested, follow this link: https://github.com/mhatina/openlmi_gui Martin Hatina

1 3

Documentation overhaul
by Jan Safranek 07 Oct '14

07 Oct '14

We've been busy last weeks with reworking all OpenLMI documentation. Initially I wanted to post this announcement when the new docs are finished, but with each version I'm finding new problems and tiny glitches which need some attention and the finished version is further and further ahead. So, the work-in-progress version is available at http://openlmi-test-doc.readthedocs.org/en/latest/. The ultimate goal is: - to have it generated by readthedocs.org, as it has nice style (few tweaks were needed though and their build system is... hard to tackle with) - to have it hosted on doc.openlmi.org, if possible - have all documentation (providers, storage, networking, tools, scripts) together on one place and linked together (e.g. links from providers to appropriate lmi metacommand and back, not done yet) - still have possibility to ship the documentation as part of our packages (some people prefer offline docs), we'll see if we can achieve this. - be more newbie-friendly, especially in the overview pages (again, not there yet, but 'Storage provider' front page is the first attempt. - obsolete some pages on openlmi.org. We'd like all the _documentation_ to be on doc.openlmi.org, and leave openlmi.org just for overview, some tutorials (QuickStart) and integration with other projects (Pegasus SSL setup, IPA, ...). All text related to providers, shell or metacommand will be removed from there, as it is inconsistent, redundant and often completely wrong. What's ready for review: - overall style (colors, fonts, ...). We believe readthedocs.org has done great job in this, I have just added support for four levels of the navigation menu on the left - overall structure (= the navigation menu) - some chapters have weird name, I know about" - OpenLMI Networking Provider documentation should be just "Networking provider" - OpenLMI Tools documentation should be "OpenLMI client tools and utilities" or something like that, as it covers lmi metacommand, lmishell and OpenLMI scripts. - most of OpenLMI providers - except networking - storage should not include "CIM classes" chapter - all providers need better front pages with overview, link to appropriate lmi metacommand reference. See storage as example. I'm tuning client utilities chapters, adding python API reference, individual metacommand, adjusting chapter names etc. You can see there is lot of work ahead. You can contribute, best by patches to individual git repos (openlmi-providers, -networking, -storage and -tools; use reviewboard as usual) or by feedback here on openlmi-devel. For better docs! Jan

2 6

openlmi-reviews Digest, Vol 17, Issue 29
by openlmi-reviews-request＠lists.fedorahosted.org 29 Sep '14

29 Sep '14

Send openlmi-reviews mailing list submissions to openlmi-reviews(a)lists.fedorahosted.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.fedorahosted.org/mailman/listinfo/openlmi-reviews or, via email, send a message with subject or body 'help' to openlmi-reviews-request(a)lists.fedorahosted.org You can reach the person managing the list at openlmi-reviews-owner(a)lists.fedorahosted.org When replying, please edit your Subject line so it is more specific than "Re: Contents of openlmi-reviews digest..." Today's Topics: 1. buildbot failure in OpenLMI on providers-rhel7 (openlmiproject(a)gmail.com) 2. buildbot failure in OpenLMI on networking-rhel7 (openlmiproject(a)gmail.com) 3. buildbot failure in OpenLMI on providers-rhel6 (openlmiproject(a)gmail.com) 4. buildbot failure in OpenLMI on networking-rhel6 (openlmiproject(a)gmail.com) 5. buildbot failure in OpenLMI on storage-rhel6 (openlmiproject(a)gmail.com) 6. buildbot failure in OpenLMI on storage-rhel7stable (openlmiproject(a)gmail.com) 7. buildbot failure in OpenLMI on networking-rhel7stable (openlmiproject(a)gmail.com) 8. buildbot failure in OpenLMI on storage-rhel7 (openlmiproject(a)gmail.com) 9. buildbot failure in OpenLMI on providers-rhel7stable (openlmiproject(a)gmail.com) 10. Re: Review Request 2076: Add SELinux note and build deps to README (Michal Minar) 11. Re: Review Request 1955: Add missing gcc to build dependencies list (Michal Minar) 12. Re: Review Request 2073: networking [1/3] Use ERR_NOT_FOUND instead of ERR_FAILED when non-existing object is used (Michal Minar) 13. Re: Review Request 2074: networking [2/3] Return proper error message from the methods (Michal Minar) 14. Re: Review Request 2075: networking [3/3] mof: describe return values of LMI_CreateIPSettings method (Michal Minar) 15. Re: Review Request 2066: [5/10] openlmi-storage doc: Add connection to all use cases. (Michal Minar) 16. Re: Review Request 2066: [5/10] openlmi-storage doc: Add connection to all use cases. (Michal Minar) 17. buildbot failure in OpenLMI on networking-rawhide (openlmiproject(a)gmail.com) 18. buildbot failure in OpenLMI on storage-rawhide (openlmiproject(a)gmail.com) 19. Re: Review Request 2073: networking [1/3] Use ERR_NOT_FOUND instead of ERR_FAILED when non-existing object is used (Radek Novacek) 20. Re: Review Request 2075: networking [3/3] mof: describe return values of LMI_CreateIPSettings method (Radek Novacek) 21. buildbot failure in OpenLMI on networking-rhel6 (openlmiproject(a)gmail.com) 22. buildbot failure in OpenLMI on networking-rhel7 (openlmiproject(a)gmail.com) 23. buildbot failure in OpenLMI on networking-rawhide (openlmiproject(a)gmail.com) 24. Re: Review Request 2074: networking [2/3] Return proper error message from the methods (Radek Novacek) 25. Re: Review Request 2062: [1/10] openlmi-storage doc: Update documentation. (Radek Novacek) 26. Re: Review Request 2062: [1/10] openlmi-storage doc: Update documentation. (Tomas Smetana) 27. buildbot failure in OpenLMI on providers-rhel6 (openlmiproject(a)gmail.com) 28. buildbot failure in OpenLMI on providers-rhel7 (openlmiproject(a)gmail.com) 29. Review Request 2077: openlmi-networking [1/2] doc: Rename chapters to match the rest of OpenLMI docs. (Jan Safranek) 30. Review Request 2078: openlmi-networking [2/2] doc: Added readthedocs.org theme. (Jan Safranek) 31. Re: Review Request 2055: [1/7] doc: Shorten chapter names. (Jan Safranek) 32. Re: Review Request 2056: [2/7] doc: Added readthedocs.org theme. (Jan Safranek) 33. Re: Review Request 2057: [3/7] doc: Split journald index.rst into overview and caveats. (Jan Safranek) 34. Re: Review Request 2058: [4/7] doc: Rename usage chapters. (Jan Safranek) 35. Re: Review Request 2059: [5/7] doc: Update logicalfile configuration docs. (Jan Safranek) 36. Re: Review Request 2060: [6/7] doc: Merge Power Management usage and concepts. (Jan Safranek) 37. Re: Review Request 2077: openlmi-networking [1/2] doc: Rename chapters to match the rest of OpenLMI docs. (Radek Novacek) 38. Re: Review Request 2078: openlmi-networking [2/2] doc: Added readthedocs.org theme. (Radek Novacek) 39. Review Request 2079: openlmi-storage doc: Update spec file to pull the right theme. (Jan Safranek) 40. Re: Review Request 2079: openlmi-storage doc: Update spec file to pull the right theme. (Radek Novacek) 41. Re: Review Request 2077: openlmi-networking [1/2] doc: Rename chapters to match the rest of OpenLMI docs. (Jan Safranek) 42. Re: Review Request 2078: openlmi-networking [2/2] doc: Added readthedocs.org theme. (Jan Safranek) 43. buildbot failure in OpenLMI on networking-rhel6 (openlmiproject(a)gmail.com) 44. buildbot failure in OpenLMI on networking-rhel7 (openlmiproject(a)gmail.com) 45. buildbot failure in OpenLMI on storage-rhel6 (openlmiproject(a)gmail.com) 46. buildbot failure in OpenLMI on storage-rhel7 (openlmiproject(a)gmail.com) 47. Re: Review Request 2062: [1/10] openlmi-storage doc: Update documentation. (Jan Safranek) 48. Re: Review Request 2063: [2/10] openlmi-storage doc: Use readthedocs theme. (Jan Safranek) 49. Re: Review Request 2072: providers - tests: fixed one assert (Radek Novacek) 50. Re: Review Request 2064: [3/10] openlmi-storage doc: Add links to original .svg files. (Jan Safranek) 51. Re: Review Request 2065: [4/10] openlmi-storage doc: Make the information about block devices more newbie-frienly. (Jan Safranek) 52. Re: Review Request 2067: [6/10] openlmi-storage doc: Add some examples to the top page. (Jan Safranek) 53. Re: Review Request 2066: [5/10] openlmi-storage doc: Add connection to all use cases. (Jan Safranek) 54. Re: Review Request 2068: [7/10] openlmi-storage doc: Don't use sections in index.rst (Jan Safranek) 55. Re: Review Request 2069: [8/10] openlmi-storage doc: Update configuration docs. (Jan Safranek) 56. Re: Review Request 2071: [10/10] openlmi-storage doc: Added class reference as 2nd level menu item. (Jan Safranek) 57. Re: Review Request 2070: [9/10] openlmi-storage doc: Rename chapters to matche the rest of the providers. (Jan Safranek) _______________________________________________ openlmi-reviews mailing list openlmi-reviews(a)lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/openlmi-reviews

1 0

openlmi-reviews Digest, Vol 17, Issue 28
by openlmi-reviews-request＠lists.fedorahosted.org 28 Sep '14

28 Sep '14

1 0

openlmi-reviews Digest, Vol 17, Issue 27
by openlmi-reviews-request＠lists.fedorahosted.org 27 Sep '14

27 Sep '14

1 0

openlmi-reviews Digest, Vol 17, Issue 26
by openlmi-reviews-request＠lists.fedorahosted.org 26 Sep '14

26 Sep '14

1 0

openlmi-reviews Digest, Vol 17, Issue 25
by openlmi-reviews-request＠lists.fedorahosted.org 25 Sep '14

25 Sep '14

Send openlmi-reviews mailing list submissions to openlmi-reviews(a)lists.fedorahosted.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.fedorahosted.org/mailman/listinfo/openlmi-reviews or, via email, send a message with subject or body 'help' to openlmi-reviews-request(a)lists.fedorahosted.org You can reach the person managing the list at openlmi-reviews-owner(a)lists.fedorahosted.org When replying, please edit your Subject line so it is more specific than "Re: Contents of openlmi-reviews digest..." Today's Topics: 1. Re: Review Request 2027: tools - doc: allow to build documentation with commands (Jan Safranek) 2. Review Request 2055: [1/7] doc: Shorten chapter names. (Jan Safranek) 3. Review Request 2056: [2/7] doc: Added readthedocs.org theme. (Jan Safranek) 4. Review Request 2059: [5/7] doc: Update logicalfile configuration docs. (Jan Safranek) 5. Review Request 2058: [4/7] doc: Rename usage chapters. (Jan Safranek) 6. Review Request 2060: [6/7] doc: Merge Power Management usage and concepts. (Jan Safranek) 7. Review Request 2057: [3/7] doc: Split journald index.rst into overview and caveats. (Jan Safranek) 8. Re: Review Request 2026: tools [1/2] fixed setup command (Michal Minar) 9. Re: Review Request 2027: tools - doc: allow to build documentation with commands (Michal Minar) 10. Re: Review Request 2055: [1/7] doc: Shorten chapter names. (Michal Minar) 11. Re: Review Request 2056: [2/7] doc: Added readthedocs.org theme. (Michal Minar) 12. Re: Review Request 2057: [3/7] doc: Split journald index.rst into overview and caveats. (Michal Minar) 13. Re: Review Request 2058: [4/7] doc: Rename usage chapters. (Michal Minar) 14. Re: Review Request 2059: [5/7] doc: Update logicalfile configuration docs. (Michal Minar) 15. Re: Review Request 2060: [6/7] doc: Merge Power Management usage and concepts. (Michal Minar) 16. Review Request 2062: [1/10] openlmi-storage doc: Update documentation. (Jan Safranek) 17. Review Request 2063: [2/10] openlmi-storage doc: Use readthedocs theme. (Jan Safranek) 18. Review Request 2064: [3/10] openlmi-storage doc: Add links to original .svg files. (Jan Safranek) 19. Review Request 2066: [5/10] openlmi-storage doc: Add connection to all use cases. (Jan Safranek) 20. Review Request 2065: [4/10] openlmi-storage doc: Make the information about block devices more newbie-frienly. (Jan Safranek) 21. Review Request 2067: [6/10] openlmi-storage doc: Add some examples to the top page. (Jan Safranek) 22. Review Request 2068: [7/10] openlmi-storage doc: Don't use sections in index.rst (Jan Safranek) 23. Review Request 2069: [8/10] openlmi-storage doc: Update configuration docs. (Jan Safranek) 24. Review Request 2071: [10/10] openlmi-storage doc: Added class reference as 2nd level menu item. (Jan Safranek) 25. Review Request 2070: [9/10] openlmi-storage doc: Rename chapters to matche the rest of the providers. (Jan Safranek) 26. Re: Review Request 2063: [2/10] openlmi-storage doc: Use readthedocs theme. (Michal Minar) 27. Re: Review Request 2064: [3/10] openlmi-storage doc: Add links to original .svg files. (Michal Minar) 28. Re: Review Request 2065: [4/10] openlmi-storage doc: Make the information about block devices more newbie-frienly. (Michal Minar) 29. Re: Review Request 2066: [5/10] openlmi-storage doc: Add connection to all use cases. (Michal Minar) 30. Re: Review Request 2067: [6/10] openlmi-storage doc: Add some examples to the top page. (Michal Minar) 31. Re: Review Request 2068: [7/10] openlmi-storage doc: Don't use sections in index.rst (Michal Minar) 32. Re: Review Request 2069: [8/10] openlmi-storage doc: Update configuration docs. (Michal Minar) 33. Re: Review Request 2070: [9/10] openlmi-storage doc: Rename chapters to matche the rest of the providers. (Michal Minar) 34. Re: Review Request 2071: [10/10] openlmi-storage doc: Added class reference as 2nd level menu item. (Michal Minar) 35. Review Request 2072: providers - tests: fixed one assert (Michal Minar) 36. buildbot failure in OpenLMI on networking-rhel6 (openlmiproject(a)gmail.com) 37. buildbot failure in OpenLMI on storage-rhel6 (openlmiproject(a)gmail.com) 38. buildbot failure in OpenLMI on networking-rhel7 (openlmiproject(a)gmail.com) 39. buildbot failure in OpenLMI on networking-rawhide (openlmiproject(a)gmail.com) 40. buildbot failure in OpenLMI on providers-rhel6 (openlmiproject(a)gmail.com) 41. buildbot failure in OpenLMI on storage-rhel7stable (openlmiproject(a)gmail.com) 42. buildbot failure in OpenLMI on storage-rhel7 (openlmiproject(a)gmail.com) 43. buildbot failure in OpenLMI on providers-rhel7 (openlmiproject(a)gmail.com) 44. buildbot failure in OpenLMI on storage-rawhide (openlmiproject(a)gmail.com) 45. buildbot failure in OpenLMI on providers-rhel7stable (openlmiproject(a)gmail.com) 46. buildbot failure in OpenLMI on networking-rhel7stable (openlmiproject(a)gmail.com) _______________________________________________ openlmi-reviews mailing list openlmi-reviews(a)lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/openlmi-reviews

1 0

openlmi-reviews Digest, Vol 17, Issue 24
by openlmi-reviews-request＠lists.fedorahosted.org 24 Sep '14

24 Sep '14

1 0

openlmi-reviews Digest, Vol 17, Issue 23
by openlmi-reviews-request＠lists.fedorahosted.org 23 Sep '14

23 Sep '14

Send openlmi-reviews mailing list submissions to openlmi-reviews(a)lists.fedorahosted.org To subscribe or unsubscribe via the World Wide Web, visit https://lists.fedorahosted.org/mailman/listinfo/openlmi-reviews or, via email, send a message with subject or body 'help' to openlmi-reviews-request(a)lists.fedorahosted.org You can reach the person managing the list at openlmi-reviews-owner(a)lists.fedorahosted.org When replying, please edit your Subject line so it is more specific than "Re: Contents of openlmi-reviews digest..." Today's Topics: 1. Review Request 2042: locale: Properly initialize list of locales. (Jan Safranek) 2. Review Request 2037: selinux: Fixed referencing uninitialized variables. (Jan Safranek) 3. Review Request 2038: selinux: Print parse_port_range() return values only when the parsing succeeds. (Jan Safranek) 4. Review Request 2039: selinux: Fixed initialization of 'error' variable. (Jan Safranek) 5. Review Request 2040: selinux: Close /etc/selinux/config on error. (Jan Safranek) 6. Review Request 2041: sssd: Fixed checking of strdup(). (Jan Safranek) 7. Re: Review Request 2041: sssd: Fixed checking of strdup(). (scanbot) 8. Re: Review Request 2040: selinux: Close /etc/selinux/config on error. (scanbot) 9. Re: Review Request 2039: selinux: Fixed initialization of 'error' variable. (scanbot) 10. Re: Review Request 2038: selinux: Print parse_port_range() return values only when the parsing succeeds. (scanbot) 11. Re: Review Request 2037: selinux: Fixed referencing uninitialized variables. (scanbot) 12. Re: Review Request 2042: locale: Properly initialize list of locales. (scanbot) 13. Re: Review Request 2041: sssd: Fixed checking of strdup(). (scanbot) 14. Re: Review Request 2040: selinux: Close /etc/selinux/config on error. (scanbot) 15. Re: Review Request 2038: selinux: Print parse_port_range() return values only when the parsing succeeds. (scanbot) 16. Re: Review Request 2039: selinux: Fixed initialization of 'error' variable. (scanbot) 17. Re: Review Request 2042: locale: Properly initialize list of locales. (scanbot) 18. Re: Review Request 2037: selinux: Fixed referencing uninitialized variables. (scanbot) 19. buildbot failure in OpenLMI on networking-rhel6 (openlmiproject(a)gmail.com) 20. buildbot failure in OpenLMI on storage-rhel6 (openlmiproject(a)gmail.com) 21. buildbot failure in OpenLMI on networking-rhel7 (openlmiproject(a)gmail.com) 22. buildbot failure in OpenLMI on networking-rhel7stable (openlmiproject(a)gmail.com) 23. buildbot failure in OpenLMI on providers-rhel6 (openlmiproject(a)gmail.com) 24. buildbot failure in OpenLMI on storage-rhel7 (openlmiproject(a)gmail.com) 25. buildbot failure in OpenLMI on providers-rhel7 (openlmiproject(a)gmail.com) 26. buildbot failure in OpenLMI on providers-rhel7stable (openlmiproject(a)gmail.com) 27. buildbot failure in OpenLMI on storage-rhel7stable (openlmiproject(a)gmail.com) 28. Re: Review Request 2040: selinux: Close /etc/selinux/config on error. (Jan Synacek) 29. Re: Review Request 2038: selinux: Print parse_port_range() return values only when the parsing succeeds. (Jan Synacek) 30. Re: Review Request 2039: selinux: Fixed initialization of 'error' variable. (Jan Synacek) 31. Re: Review Request 2037: selinux: Fixed referencing uninitialized variables. (Jan Synacek) 32. Re: Review Request 2041: sssd: Fixed checking of strdup(). (Michal Minar) 33. Re: Review Request 2042: locale: Properly initialize list of locales. (Michal Minar) 34. Re: Review Request 2042: locale: Properly initialize list of locales. (Jan Safranek) 35. Re: Review Request 2037: selinux: Fixed referencing uninitialized variables. (Jan Safranek) 36. Re: Review Request 2038: selinux: Print parse_port_range() return values only when the parsing succeeds. (Jan Safranek) 37. Re: Review Request 2039: selinux: Fixed initialization of 'error' variable. (Jan Safranek) 38. Re: Review Request 2040: selinux: Close /etc/selinux/config on error. (Jan Safranek) 39. Re: Review Request 2041: sssd: Fixed checking of strdup(). (Jan Safranek) 40. buildbot failure in OpenLMI on providers-rhel7 (openlmiproject(a)gmail.com) 41. buildbot failure in OpenLMI on providers-rhel6 (openlmiproject(a)gmail.com) 42. Review Request 2043: providers [1/1] service-dbus: fix potential memory leak found by coverity (Radek Novacek) 43. Re: Review Request 2043: providers [1/1] service-dbus: fix potential memory leak found by coverity (scanbot) 44. Re: Review Request 2043: providers [1/1] service-dbus: fix potential memory leak found by coverity (scanbot) 45. buildbot failure in OpenLMI on storage-rawhide (openlmiproject(a)gmail.com) 46. buildbot failure in OpenLMI on networking-rawhide (openlmiproject(a)gmail.com) 47. buildbot failure in OpenLMI on storage-rawhide (openlmiproject(a)gmail.com) 48. Review Request 2044: [1/1] selinux: minor documentation fixes (Vitezslav Crhonek) _______________________________________________ openlmi-reviews mailing list openlmi-reviews(a)lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/openlmi-reviews

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

openlmi-devel September 2014