[Freeipa-devel] [freeipa PR#379][opened] Packaging: Add placeholder and IPA commands packages

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Author: tiran
Title: #379: Packaging: Add placeholder and IPA commands packages
Action: opened

PR body:
"""
The ipacommands package contains ipa-getkeytab and ipa-rmkeytab for
installation in a virtual env. The programs are compiled with distutils
/ setuptools.

The ipa and freeipa packages are placeholders to prevent PyPI squashing
attacks and reserve the names for future use. `pip install ipa` installs
ipaclient.

https://fedorahosted.org/freeipa/ticket/6484

Signed-off-by: Christian Heimes <***@redhat.com>
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/379/head:pr379
git checkout pr379

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Author: tiran
Title: #379: Packaging: Add placeholder and IPA commands packages
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/379/head:pr379
git checkout pr379

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Author: tiran
Title: #379: Packaging: Add placeholder and IPA commands packages
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/379/head:pr379
git checkout pr379

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Author: tiran
Title: #379: Packaging: Add placeholder and IPA commands packages
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/379/head:pr379
git checkout pr379

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Author: tiran
Title: #379: Packaging: Add placeholder and IPA commands packages
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/379/head:pr379
git checkout pr379

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Title: #379: Packaging: Add placeholder and IPA commands packages

tiran commented:
"""
The ```ipa``` and ```freeipa``` packages are necessary to prevent typo squatting or name squatting attacks, e.g. http://arstechnica.com/security/2016/06/college-student-schools-govs-and-mils-on-perils-of-arbitrary-code-execution/ . We want to make sure that a developer gets FreeIPA when he does ```pip install freeipa```.

I already reserved the names on PyPI. It is necessary to upload new packages for ```ipa``` and ```freeipa``` regularly. Otherwise PyPI considers our packages obsolete and may remove them. See https://www.python.org/dev/peps/pep-0541/
"""

See the full comment at https://github.com/freeipa/freeipa/pull/379#issuecomment-274478485

[pvoborni]

URL: https://github.com/freeipa/freeipa/pull/379
Title: #379: Packaging: Add placeholder and IPA commands packages

pvoborni commented:
"""
I thought that I understand why this PR is needed bud in fact I don't. Ticket #6484 is closed. Why is it attached to it?

How will the pypi packaging change if ipacommands package is not there? Would it be used for anything? How it should be used?
"""

See the full comment at https://github.com/freeipa/freeipa/pull/379#issuecomment-279753967

[MartinBasti]

URL: https://github.com/freeipa/freeipa/pull/379
Title: #379: Packaging: Add placeholder and IPA commands packages

MartinBasti commented:
"""
We need placeholder package for sure, this PR should be splitted into 2, but I'm still not endorsed to have ipa-getkeytab installable by pip
"""

See the full comment at https://github.com/freeipa/freeipa/pull/379#issuecomment-279760067

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Title: #379: Packaging: Add placeholder and IPA commands packages

tiran commented:
"""
I don't mind to maintain my own copy of ipacommands with ```ipa-getkeytab``` until we agree on a permanent solution.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/379#issuecomment-279767747

[pvoborni]

URL: https://github.com/freeipa/freeipa/pull/379
Title: #379: Packaging: Add placeholder and IPA commands packages

pvoborni commented:
"""
If there is reason it can be maintained in IPA, but what is the reason?
"""

See the full comment at https://github.com/freeipa/freeipa/pull/379#issuecomment-279768384

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Author: tiran
Title: #379: Packaging: Add placeholder and IPA commands packages
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/379/head:pr379
git checkout pr379

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Title: #379: Packaging: Add placeholder and IPA commands packages

Label: +postponed

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Title: #379: Packaging: Add placeholder and IPA commands packages

tiran commented:
"""
I have postponed the ```ipacommands``` part. Placeholders are covered by #472.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/379#issuecomment-282044669

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Author: tiran
Title: #379: Packaging: Add placeholder and IPA commands packages
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/379/head:pr379
git checkout pr379

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Author: tiran
Title: #379: Packaging: Add IPA commands package
Action: edited

Changed field: title
Original value:
"""
Packaging: Add placeholder and IPA commands packages
"""

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Title: #379: Packaging: Add IPA commands package

Label: -postponed

[tiran]

URL: https://github.com/freeipa/freeipa/pull/379
Author: tiran
Title: #379: Packaging: Add IPA commands package
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/379/head:pr379
git checkout pr379