Re: [Freeipa-devel] [PATCH 21/21] fixes CA install problem in trac ticket 682

2011-01-04 Thread Simo Sorce
On Mon, 2011-01-03 at 12:23 -0500, Dmitri Pal wrote: Rob Crittenden wrote: Simo Sorce wrote: - Original Message - Do not call status after pkisilent, it will return non-zero. Instead restart server after pkisilent so configuration changes take effect, the check the status.

Re: [Freeipa-devel] [PATCH] 659 drop CoS for activation

2011-01-04 Thread Simo Sorce
On Mon, 2011-01-03 at 15:07 -0500, Rob Crittenden wrote: Drop using a Class of Service for account activation. It added a lot of unnecessary complexity. Instead just update the nsaccountlock attribute directly. ticket 568 ACK, glad to see this one to go, although we spent a lot of time

Re: [Freeipa-devel] [PATCH] 662 start messagebus service

2011-01-04 Thread Simo Sorce
On Mon, 2011-01-03 at 16:43 -0500, Rob Crittenden wrote: Always start the messagebus service so that certmonger will work properly. There have been reports from some very minimal install that this service isn't started. ticket 528 ACK! Simo.

[Freeipa-devel] [PATCH] 0042 Fix dns install on replicas

2011-01-04 Thread Simo Sorce
DNS installation on replicas was broken. This patch fixes both the --setup-dns switch of ipa-replica-install as well as running ipa-dns-install on an existing replica. Simo. bin9azuR7b3kC.bin Description: application/mbox ___ Freeipa-devel mailing

Re: [Freeipa-devel] [Freeipa-users] [Freeipa-interest] Announcing FreeIPA v2 Server Beta 1 Release

2011-01-04 Thread Roland Kaeser
We return to this discussion once in a while... Samba 4 tries to do it and still struggles after many years of development. We definitely would look at Samba 4 again when we see it Sufficiently ready but this is not a priority for 2011. Maybe this is the reason why freeipa has that less

[Freeipa-devel] [PATCH] Improve filtering of enrollments search results.

2011-01-04 Thread Pavel Zuna
This is required for effective filtering of enrollments search results in the webUI and also gives an edge to the CLI. After this patch, each LDAPObject can define its relationships to other LDAPObjects. For now, this is used only for filtering search results by enrollments, but there are

[Freeipa-devel] [PATCH] Improvements to enrollments in the webUI.

2011-01-04 Thread Pavel Zuna
The patch is a bit bigger and more complex, so I expect this to be the first shot at it. There are some places where we need to handle localization better and be more generic when it comes to non-standard relationships like 'enrolledby' etc., but that can be done later. (I put a few TODOs in

Re: [Freeipa-devel] [Freeipa-users] [Freeipa-interest] Announcing FreeIPA v2 Server Beta 1 Release

2011-01-04 Thread JR Aquino
On 1/4/11 1:04 AM, Roland Kaeser roland.kae...@intersoft-networks.ch wrote: We return to this discussion once in a while... Samba 4 tries to do it and still struggles after many years of development. We definitely would look at Samba 4 again when we see it Sufficiently ready but this is not

Re: [Freeipa-devel] [PATCH] Improvements to enrollments in the webUI.

2011-01-04 Thread Adam Young
On 01/04/2011 10:34 AM, Pavel Zuna wrote: The patch is a bit bigger and more complex, so I expect this to be the first shot at it. There are some places where we need to handle localization better and be more generic when it comes to non-standard relationships like 'enrolledby' etc., but

[Freeipa-devel] [PATCH] 663 better keytab detection

2011-01-04 Thread Rob Crittenden
Make sure the file we're operating on is really a keytab in ipa-rmkeytab. Do this by creating a cursor into the keytab. The krb lib will return a failure if this can't be done. ticket 654 rob From f43e584b8c2667a608912b4f83b515be62d78d55 Mon Sep 17 00:00:00 2001 From: Rob Crittenden

Re: [Freeipa-devel] [PATCH] Improve filtering of enrollments search results.

2011-01-04 Thread Adam Young
On 01/04/2011 12:41 PM, Adam Young wrote: On 01/04/2011 10:30 AM, Pavel Zuna wrote: This is required for effective filtering of enrollments search results in the webUI and also gives an edge to the CLI. After this patch, each LDAPObject can define its relationships to other LDAPObjects. For

[Freeipa-devel] [PATCHES] [bind-dyndb-ldap] Two patches for minor Coverity issues

2011-01-04 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Patch 0001: Fix missing varargs cleanup The CHECK() macro may cause execution to skip down to the cleanup tag. If this happens, it would mean that we never called va_end() on backup. This patch reorganizes the code slightly to ensure that va_end()

Re: [Freeipa-devel] [PATCH] 660 set minimum uidnumber to 1

2011-01-04 Thread Rob Crittenden
Adam Young wrote: On 01/03/2011 03:13 PM, Rob Crittenden wrote: Don't allow a user's uid (uidnumber) be set to 0. The set/addattr routines call the validator rules so this is sufficient to cover both: ipa user-add --first=tim --last=user --uid=0 tuser1 and ipa user-mod --setattr

Re: [Freeipa-devel] [PATCH] 662 start messagebus service

2011-01-04 Thread Rob Crittenden
Simo Sorce wrote: On Mon, 2011-01-03 at 16:43 -0500, Rob Crittenden wrote: Always start the messagebus service so that certmonger will work properly. There have been reports from some very minimal install that this service isn't started. ticket 528 ACK! Simo. pushed to master

Re: [Freeipa-devel] [PATCH] 659 drop CoS for activation

2011-01-04 Thread Rob Crittenden
Simo Sorce wrote: On Mon, 2011-01-03 at 15:07 -0500, Rob Crittenden wrote: Drop using a Class of Service for account activation. It added a lot of unnecessary complexity. Instead just update the nsaccountlock attribute directly. ticket 568 ACK, glad to see this one to go, although we spent a

Re: [Freeipa-devel] [PATCH] Improvements to enrollments in the webUI.

2011-01-04 Thread Adam Young
On 01/04/2011 12:45 PM, Adam Young wrote: On 01/04/2011 10:34 AM, Pavel Zuna wrote: The patch is a bit bigger and more complex, so I expect this to be the first shot at it. There are some places where we need to handle localization better and be more generic when it comes to non-standard

Re: [Freeipa-devel] [PATCH] Improvements to enrollments in the webUI.

2011-01-04 Thread Adam Young
On 01/04/2011 12:45 PM, Adam Young wrote: On 01/04/2011 10:34 AM, Pavel Zuna wrote: The patch is a bit bigger and more complex, so I expect this to be the first shot at it. There are some places where we need to handle localization better and be more generic when it comes to non-standard

Re: [Freeipa-devel] [PATCH] Improve filtering of enrollments search results.

2011-01-04 Thread Adam Young
On 01/04/2011 03:24 PM, Adam Young wrote: On 01/04/2011 12:41 PM, Adam Young wrote: On 01/04/2011 10:30 AM, Pavel Zuna wrote: This is required for effective filtering of enrollments search results in the webUI and also gives an edge to the CLI. After this patch, each LDAPObject can define its

[Freeipa-devel] [PATCH] one liner to re-add in user associations

2011-01-04 Thread Adam Young
commit 3390319f4c79564ab579bfbc1e341defb5299e50 Author: Adam Young ayo...@redhat.com Date: Tue Jan 4 22:58:27 2011 -0500 user associations user associations had been removed. This adds them back in. diff --git a/install/static/user.js b/install/static/user.js index 1a2ab44..c0e6fae