Re: [Freeipa-devel] [PATCH] 478 better startup error handling

2010-07-12 Thread Rob Crittenden
Adam Young wrote: On 06/25/2010 01:52 PM, Rob Crittenden wrote: This patch will limit the amount of output in the Apache error log by default. It should suppress the traceback and just display the exception. This is mostly to handle LDAP connection issues during startup where we retrieve the

Re: [Freeipa-devel] [PATCH] 476 fix bad API call in selfsign

2010-07-12 Thread Pavel Zuna
On 06/25/2010 03:46 PM, Rob Crittenden wrote: Use newer API in selfsign plugin. Fix missing import when running in the in-tree lite-server. rob Maybe we should remove the comment as well, if it's not valid anymore. Other than that: ACK. Pavel

[Freeipa-devel] [PATCH] 480 new search attribute

2010-07-12 Thread Rob Crittenden
Add a new optional calss variable to store the attributes to search on. They might differ from the default attributes you want to display. Also link in any search attributes defined in cn=ipaconfig. Thesese are a comma-separated list of attributes. We only have user and group defined

[Freeipa-devel] [PATCH] 482 test cert storage

2010-07-12 Thread Rob Crittenden
Verify that we're storing the same certificate that is being issued. Doesn't hurt to be a little extra paranoid. rob freeipa-482-cert.patch Description: application/mbox ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

[Freeipa-devel] [PATCH] 483 disable service/host

2010-07-12 Thread Rob Crittenden
This patch supercedes patch 479 which is now defunct. It relies on patch 481. Add API to delete a service principal key, service-disable and host-disable. This is so an admin can essentially revoke a service principal without deleting it (a host stores its own host service principal). I

[Freeipa-devel] [PATCH] 484 add framework for testing other cmdlines

2010-07-12 Thread Rob Crittenden
In order to test service-disable I needed a way to get a keytab. For this we need to run ipa-getkeytab so I added some framework to be able to run the non-ipa command-line utilities. Right now I'm just testing the very basics of ipa-getkeytab but it's a start. rob freeipa-484-tests.patch