Re: [Freeipa-devel] [PATCH] 490 add DNS lookup to new hosts/services

2010-08-04 Thread Dmitri Pal
Adam Young wrote: > On 07/30/2010 04:02 PM, Adam Young wrote: >> On 07/22/2010 02:25 PM, Rob Crittenden wrote: >>> Make sure that the host behind new host and service records is >>> actually a resolvable DNS A record. There is a --force flag if you >>> know what you are doing (or just feel like cha

Re: [Freeipa-devel] [PATCH] 493 skip lang test if not built

2010-08-04 Thread Adam Young
On 07/26/2010 06:01 PM, Rob Crittenden wrote: The i18n tests were failing if the language wasn't built. Skip it in this case and inform the user what to run to get the test to execute. rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com http

Re: [Freeipa-devel] Sudoers schema

2010-08-04 Thread Dmitri Pal
JR Aquino wrote: >> One was performance, memberOf isn't free. >> >> The second was complexity. Lets say you define command R and assign it >> to command groups A, B and C. The admin of group B needs to tweak the >> command a bit so he modifies R. This could have a negative impact on >> command g

Re: [Freeipa-devel] [PATCH] 492 fix env plugin

2010-08-04 Thread Adam Young
On 07/26/2010 06:00 PM, Rob Crittenden wrote: The env plugin was displaying just the number of entries in the environment, not the values. Add an --all flag to print those, on by default. rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 491 Fix replacing a certificate in a service.

2010-08-04 Thread Adam Young
On 07/22/2010 04:14 PM, Rob Crittenden wrote: Rob Crittenden wrote: When a service has a certificate and the CA backend doesn't support revocation (like selfsign) then we simply drop the old certificate in preparation for adding a new one. We weren't setting the usercertificate attribute to No

Re: [Freeipa-devel] [PATCH] 490 add DNS lookup to new hosts/services

2010-08-04 Thread Adam Young
On 07/30/2010 04:02 PM, Adam Young wrote: On 07/22/2010 02:25 PM, Rob Crittenden wrote: Make sure that the host behind new host and service records is actually a resolvable DNS A record. There is a --force flag if you know what you are doing (or just feel like charging ahead anyway). We use a

Re: [Freeipa-devel] [PATCH] 484 add framework for testing other cmdlines

2010-08-04 Thread Adam Young
On 07/12/2010 05:51 PM, Rob Crittenden wrote: In order to test service-disable I needed a way to get a keytab. For this we need to run ipa-getkeytab so I added some framework to be able to run the non-ipa command-line utilities. Right now I'm just testing the very basics of ipa-getkeytab but i

Re: [Freeipa-devel] [PATCH] 474 add missing version file

2010-08-04 Thread Adam Young
On 06/24/2010 05:30 PM, Rob Crittenden wrote: I missed adding a new file in the replication version plugin. I went ahead and pushed it to fix the build. I also updated the minimum level of 389-ds-base to 1.2.6. This is still in testing but the versioning plugin won't work without it. To pull

Re: [Freeipa-devel] [PATCH] 451 fix i18n test

2010-08-04 Thread Adam Young
On 05/27/2010 10:29 AM, Pavel Zuna wrote: On 05/21/2010 11:35 PM, Rob Crittenden wrote: Fix this test to work from source tree root It would work if you ran the test from its location in tests/test_ipalib but this isn't the most common method. If you want to run it individually you can do: $

Re: [Freeipa-devel] Sudoers schema

2010-08-04 Thread JR Aquino
> One was performance, memberOf isn't free. > > The second was complexity. Lets say you define command R and assign it > to command groups A, B and C. The admin of group B needs to tweak the > command a bit so he modifies R. This could have a negative impact on > command groups A and C. > > So

Re: [Freeipa-devel] Sudoers schema

2010-08-04 Thread Rob Crittenden
Dmitri Pal wrote: JR Aquino wrote: That was the original design, however I was told that this is not something people will be interested in. Thanks for you data point but to change it we probably need couple more data points and comments. I would be very interested as to why there was resis

Re: [Freeipa-devel] [patch] The Javascript code for the new web ui

2010-08-04 Thread Adam Young
On 08/03/2010 07:51 PM, Adam Young wrote: This code is the javascript, html and sample data code at the heart of the new web UI. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel Note that t

[Freeipa-devel] [PATCH] 500 configure nslcd and a host of other ldap files

2010-08-04 Thread Rob Crittenden
Configure nslcd and a host of possible systems that use LDAP. We will update any/all of /etc/ldap.conf, /etc/nss_ldap.conf, /etc/libnss-ldap.conf and /etc/pam_ldap.conf. nslcd is the replacement for nss_ldap. ticket 50 freeipa-500-client.patch Description: application/mbox ___

Re: [Freeipa-devel] Sudoers schema

2010-08-04 Thread Dmitri Pal
JR Aquino wrote: >> That was the original design, however I was told that this is not >> something people will be interested in. Thanks for you data point but to >> change it we probably need couple more data points and comments. >> > > I would be very interested as to why there was resistance