Re: [Freeipa-devel] [PATCH] 0024 - Better random ranges
Simo Sorce wrote: On Tue, 07 Dec 2010 08:21:20 -0500 Stephen Gallagher sgall...@redhat.com wrote: Something we used to do at my old job was base it on the IPv4 address of the primary network adapter in the machine. Basically, we could take the integer representation of the IP address, take the modulus 1 of it, and choose the range from that. That's not needed, if you want to force a specific range you can simply pass an option to the installer. This would also provide a guarantee that replicas on the same network would get unique ranges (instead of a 1 in 10,000 chance of doubling up). Replicas take a cut of the range from the first master, sharing the assigned initial range between them (see the DNA plugin[1] Shared config to understand how it works) These are just suggestions. The patch as it exists right now looks fine to me (though I haven't tested it). I have tested it :) Simo. [1] http://directory.fedoraproject.org/wiki/DNA_Plugin In that case: ack. Pushed to master. Simo. Did this make it into a man page or other doc anywhere, or is there a ticket to do so? Also, s/arent't/aren't/ ;-) -- David O'Brien Red Hat Asia Pacific Pty Ltd +61 7 3514 8189 He who asks is a fool for five minutes, but he who does not ask remains a fool forever. ~ Chinese proverb ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Updated SUDO spec
Dmitri Pal wrote: Dmitri Pal wrote: Changes were made to the command section of the details screen. And now with the file This body part will be downloaded on demand. I'm still strongly of the opinion that we should be replacing (e.g.) User(s) with Users, and Command(s) with Commands, etc. If we maintain this format, why do we not also use Sudo Rule(s) and Sudo Command(s), etc? I don't see the benefit of indicating the availability of multiple objects by (s). What happens when you encounter more complex examples? Identity(ies)? That's just messy. In ECS our policy is If it can be plural, write in plural; if it can only be singular, write in singular. Is this not possible in the UI? -- David O'Brien Red Hat Asia Pacific Pty Ltd +61 7 3514 8189 He who asks is a fool for five minutes, but he who does not ask remains a fool forever. ~ Chinese proverb ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] [PATCH] 632 add migration cmd docs
Rob Crittenden wrote: Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/07/2010 05:50 PM, Rob Crittenden wrote: Add some documentation to the migrate-ds command. rob Ack pushed to master Apologies for the late review; I've been off sick for a week. If you get the opportunity you might like to fix this: + The simplest migration, acceptinging all defaults: -- David O'Brien Red Hat Asia Pacific Pty Ltd +61 7 3514 8189 He who asks is a fool for five minutes, but he who does not ask remains a fool forever. ~ Chinese proverb ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] UI seems to be completely broken
Adam Young wrote: On 12/11/2010 10:41 AM, Dmitri Pal wrote: Adam Young wrote: On 12/10/2010 02:01 PM, Dmitri Pal wrote: Hi, I installed today build. I can get to the static frame with green line and rigt user name which indicates that I actually connected and authenticated but for admin the rest of the screen was balnk. When I added myself as an ordinary user and restarted FF I got the same but now it showed dpal as logged in user and there were two links identity and Users both not clickable. OK, I don't get that, it worksfor me. Was this a live server or the lite server? I seem to be having some problems with the lite server. It was a problem with the standard UI. Install on a machine Run kinit Start FF Do cert magic (cleanup and accept) Point to UI on the localhost Expected: Get the functioning UI Actual: Got a skeleton of the first page. I will retry tomorrow if have time. Is this on a machine that I can connect to? Can you provide the URL and login info? I've just installed ipa-server (ipa-1.91-0.2010121117gitbe3c8e8.fc13) on a VM (after ipa-server-install --uninstall), I'm using --no-host-dns, I ran kinit admin and opened up FF and got what appears to be the normal webUI. I'm using jdennis' repo. Links are clickable and all seems to be working. I don't know what the lite server is; first I've heard of it. Anyway, WFM. -- David O'Brien Red Hat Asia Pacific Pty Ltd +61 7 3514 8189 He who asks is a fool for five minutes, but he who does not ask remains a fool forever. ~ Chinese proverb ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
