Re: [Freeipa-devel] SUDO community changed SUDO schema!!!

2011-01-31 Thread Sumit Bose
On Sun, Jan 30, 2011 at 11:53:19PM -0500, Dmitri Pal wrote: On 01/30/2011 11:23 AM, JR Aquino wrote: On 1/29/11 3:40 PM, Dmitri Pal d...@redhat.com wrote: On 01/29/2011 12:37 PM, JR Aquino wrote: On 1/29/11 9:30 AM, JR Aquino jr.aqu...@citrix.com wrote: From: Dmitri Pal

Re: [Freeipa-devel] [PATCH] 664 entitlement support

2011-01-31 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/05/2011 04:38 PM, Rob Crittenden wrote: This patch adds a plugin and tools for managing entitlements for host machines. Testing is rather complex so I've attached a script to help set up the Candlepin server. You'll need to ping me out of

Re: [Freeipa-devel] [PATCH] Provide a way to display CLI-LDAP attribute relation

2011-01-31 Thread Jan Zelený
Rob Crittenden rcrit...@redhat.com wrote: Jan Zelený wrote: Since some LDAP attributes have their cli_name value defined, so they can be more user friendly, it can be difficult for user to find out which attributes do the parameteres given to CLI really represent. This patch provides new

[Freeipa-devel] [PATCH] Allow pkinit functionality to be hidden in production version

2011-01-31 Thread Jan Zelený
This patch adds python config file ipaconfig.py, which can contain various configuration directives for ipalib and other python code. These directives can be detected at build time. The first config directive in use is enable_pkinit, which can be set by running (in 'install' subdirectory)

Re: [Freeipa-devel] [PATCH] 664 entitlement support

2011-01-31 Thread Rob Crittenden
Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/05/2011 04:38 PM, Rob Crittenden wrote: This patch adds a plugin and tools for managing entitlements for host machines. Testing is rather complex so I've attached a script to help set up the Candlepin server. You'll need

Re: [Freeipa-devel] [PATCH] Fixed permission lookup

2011-01-31 Thread Rob Crittenden
Jan Zelený wrote: Rob Crittendenrcrit...@redhat.com wrote: Jan Zelený wrote: Martin Kosekmko...@redhat.com wrote: On Fri, 2011-01-28 at 09:21 +0100, Martin Kosek wrote: On Thu, 2011-01-27 at 15:41 +0100, Jan Zelený wrote: Rob Crittendenrcrit...@redhat.com wrote: Jan Zelený wrote:

Re: [Freeipa-devel] SUDO community changed SUDO schema!!!

2011-01-31 Thread JR Aquino
On 1/30/11 8:53 PM, Dmitri Pal d...@redhat.com wrote: ... The main concern about the solution is the following scenario. 1) IPA releases as is without support of the order attribute. 2) Some time passes and new version of SUDO gets released into some distros we care about 3) Support for ordered

[Freeipa-devel] [PATCH] admiyo-0180-widget-unit-tests

2011-01-31 Thread Adam Young
From 62883ba8f1fcf97600efb6ad9d988bab54655978 Mon Sep 17 00:00:00 2001 From: Adam Young ayo...@redhat.com Date: Mon, 31 Jan 2011 09:09:26 -0500 Subject: [PATCH] widget unit tests unit test for basic functionality, text, and checkbox widgets --- install/ui/test/aci_tests.html|2 +-

Re: [Freeipa-devel] [PATCH] 695 rename permissions and privileges

2011-01-31 Thread Martin Kosek
On Mon, 2011-01-31 at 11:03 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-01-28 at 18:48 -0500, Rob Crittenden wrote: Rob Crittenden wrote: Rename permissions and privileges to more human-readable names. I'm also dropping description from permissions since it seems

[Freeipa-devel] [PATCH] 696 fix modifying delegation

2011-01-31 Thread Rob Crittenden
Modifying membergroup in a delegation was failing because of an inconsnstent use of the cli name and the attribute name and also because the aci plugin was not always treating memberof as a special kind of filter. ticket 869 rob From 3300a4cc0273c0fe5e949482e523510c7cb62051 Mon Sep 17

[Freeipa-devel] [PATCH] 697 Add new schema to store information about permissions.

2011-01-31 Thread Rob Crittenden
There are some permissions we can't display because they are stored outside of the basedn (such as the replication permissions). We are adding a new attribute to store extra information to make this clear, in this case READONLY. ticket 853 rob From 22fafd4e5a027c66fbf21879f52338cf4895f63f

Re: [Freeipa-devel] [PATCH] admiyo-0180-widget-unit-tests

2011-01-31 Thread Endi Sukma Dewata
On 1/31/2011 11:11 AM, Adam Young wrote: ACK and pushed to master. -- Endi S. Dewata ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 695 rename permissions and privileges

2011-01-31 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2011-01-31 at 11:03 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-01-28 at 18:48 -0500, Rob Crittenden wrote: Rob Crittenden wrote: Rename permissions and privileges to more human-readable names. I'm also dropping description from permissions since

[Freeipa-devel] [PATCH] admiyo-0181-reduce-scope-of-remove-link

2011-01-31 Thread Adam Young
From 53a056d4e557618f185131360f73d7d1cad49ed1 Mon Sep 17 00:00:00 2001 From: Adam Young ayo...@redhat.com Date: Mon, 31 Jan 2011 14:15:01 -0500 Subject: [PATCH] reduce scope of remove link it was global https://fedorahosted.org/freeipa/ticket/212 --- install/ui/details.js | 72

Re: [Freeipa-devel] [PATCH] Fixed permission lookup

2011-01-31 Thread Jan Zeleny
Rob Crittenden rcrit...@redhat.com wrote: Jan Zelený wrote: Rob Crittendenrcrit...@redhat.com wrote: Jan Zelený wrote: Martin Kosekmko...@redhat.com wrote: On Fri, 2011-01-28 at 09:21 +0100, Martin Kosek wrote: On Thu, 2011-01-27 at 15:41 +0100, Jan Zelený wrote: Rob

Re: [Freeipa-devel] [PATCH] admiyo-0181-reduce-scope-of-remove-link

2011-01-31 Thread Endi Sukma Dewata
On 1/31/2011 1:18 PM, Adam Young wrote: ACK and pushed to master. -- Endi S. Dewata ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] Fixed permission lookup

2011-01-31 Thread Rob Crittenden
Jan Zeleny wrote: Rob Crittendenrcrit...@redhat.com wrote: Jan Zelený wrote: Rob Crittendenrcrit...@redhat.com wrote: Jan Zelený wrote: Martin Kosekmko...@redhat.comwrote: On Fri, 2011-01-28 at 09:21 +0100, Martin Kosek wrote: On Thu, 2011-01-27 at 15:41 +0100, Jan Zelený wrote:

[Freeipa-devel] [PATCH] Removed permission description from UI

2011-01-31 Thread Endi Sukma Dewata
https://fedorahosted.org/freeipa/ticket/877 -- Endi S. Dewata From 4dc1740295fe2a8f4be95d13413434b2e7ec36ad Mon Sep 17 00:00:00 2001 From: Endi S. Dewata edew...@redhat.com Date: Mon, 31 Jan 2011 13:34:02 -0600 Subject: [PATCH] Removed permission description from UI

Re: [Freeipa-devel] [PATCH] Removed permission description from UI

2011-01-31 Thread Adam Young
On 01/31/2011 03:00 PM, Endi Sukma Dewata wrote: https://fedorahosted.org/freeipa/ticket/877 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel ACK and pushed to master

Re: [Freeipa-devel] [PATCH] 0079 Use common group for DS instances

2011-01-31 Thread Rob Crittenden
Simo Sorce wrote: On Sat, 29 Jan 2011 10:28:49 -0500 Simo Sorcesso...@redhat.com wrote: On Fri, 28 Jan 2011 19:11:39 -0500 Rob Crittendenrcrit...@redhat.com wrote: Simo Sorce wrote: Use a common group named 'dirsrv' for all DS instances, as requested in ticket #851 While there also

Re: [Freeipa-devel] [PATCH] 0079 Use common group for DS instances

2011-01-31 Thread Simo Sorce
On Mon, 31 Jan 2011 15:46:37 -0500 Rob Crittenden rcrit...@redhat.com wrote: Simo Sorce wrote: On Sat, 29 Jan 2011 10:28:49 -0500 Simo Sorcesso...@redhat.com wrote: On Fri, 28 Jan 2011 19:11:39 -0500 Rob Crittendenrcrit...@redhat.com wrote: Simo Sorce wrote: Use a common

Re: [Freeipa-devel] [PATCH] 0079 Use common group for DS instances

2011-01-31 Thread Rob Crittenden
Simo Sorce wrote: On Mon, 31 Jan 2011 15:46:37 -0500 Rob Crittendenrcrit...@redhat.com wrote: Simo Sorce wrote: On Sat, 29 Jan 2011 10:28:49 -0500 Simo Sorcesso...@redhat.com wrote: On Fri, 28 Jan 2011 19:11:39 -0500 Rob Crittendenrcrit...@redhat.com wrote: Simo Sorce wrote: Use a

Re: [Freeipa-devel] [PATCH] 0079 Use common group for DS instances

2011-01-31 Thread Simo Sorce
On Mon, 31 Jan 2011 16:32:47 -0500 Rob Crittenden rcrit...@redhat.com wrote: Simo Sorce wrote: On Mon, 31 Jan 2011 15:46:37 -0500 Rob Crittendenrcrit...@redhat.com wrote: Simo Sorce wrote: On Sat, 29 Jan 2011 10:28:49 -0500 Simo Sorcesso...@redhat.com wrote: On Fri, 28 Jan

[Freeipa-devel] [PATCH] 047 Add an address for a nameserver when a new zone is created during install

2011-01-31 Thread Jakub Hrozek
https://fedorahosted.org/freeipa/ticket/881 We've run into a chicken-and-egg problem during installation. If the hostname of the IPA server is not resolvable with DNS during installation, we'd add it as a NS server for a zone in both the SOA entry and a NS record -- but no records from the new

Re: [Freeipa-devel] [PATCH] 047 Add an address for a nameserver when a new zone is created during install

2011-01-31 Thread Simo Sorce
On Mon, 31 Jan 2011 22:44:43 +0100 Jakub Hrozek jhro...@redhat.com wrote: https://fedorahosted.org/freeipa/ticket/881 We've run into a chicken-and-egg problem during installation. If the hostname of the IPA server is not resolvable with DNS during installation, we'd add it as a NS server

Re: [Freeipa-devel] [PATCH] 047 Add an address for a nameserver when a new zone is created during install

2011-01-31 Thread Jakub Hrozek
On Mon, Jan 31, 2011 at 05:52:08PM -0500, Simo Sorce wrote: On Mon, 31 Jan 2011 22:44:43 +0100 Jakub Hrozek jhro...@redhat.com wrote: https://fedorahosted.org/freeipa/ticket/881 We've run into a chicken-and-egg problem during installation. If the hostname of the IPA server is not

Re: [Freeipa-devel] [PATCH] 047 Add an address for a nameserver when a new zone is created during install

2011-01-31 Thread Michael Gregg
Jakub Hrozek wrote: On Mon, Jan 31, 2011 at 05:52:08PM -0500, Simo Sorce wrote: On Mon, 31 Jan 2011 22:44:43 +0100 Jakub Hrozek jhro...@redhat.com wrote: https://fedorahosted.org/freeipa/ticket/881 We've run into a chicken-and-egg problem during installation. If the hostname of the

[Freeipa-devel] [PATCH] 0080 Sync in both direction before changing replication agreement in replica

2011-01-31 Thread Simo Sorce
See also ticket #887 Simo. -- Simo Sorce * Red Hat, Inc * New York ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 0080 Sync in both direction before changing replication agreement in replica

2011-01-31 Thread Simo Sorce
On Mon, 31 Jan 2011 18:38:47 -0500 Simo Sorce sso...@redhat.com wrote: See also ticket #887 Simo. With a patch file it works better I guess :-) Simo. -- Simo Sorce * Red Hat, Inc * New York From 87efe64a3f0c3a68e258c4703e0f507ff1620265 Mon Sep 17 00:00:00 2001 From: Simo Sorce

[Freeipa-devel] [PATCH] admiyo-0182-association-fixes

2011-01-31 Thread Adam Young
This is necessary, but not sure if it is suffcieint. THere is at least one problem still: group-users doesn't allow enrollment. Need to fix that, but should be in a follow on patch. From a8080d963dac0d7769d32dfc74efbec99bbb7125 Mon Sep 17 00:00:00 2001 From: Adam Young ayo...@redhat.com Date:

Re: [Freeipa-devel] [PATCH] admiyo-0182-association-fixes

2011-01-31 Thread Adam Young
On 01/31/2011 07:20 PM, Adam Young wrote: This is necessary, but not sure if it is suffcieint. THere is at least one problem still: group-users doesn't allow enrollment. Need to fix that, but should be in a follow on patch. ___ Freeipa-devel

Re: [Freeipa-devel] [PATCH] admiyo-0182-association-fixes

2011-01-31 Thread Adam Young
On 01/31/2011 07:20 PM, Adam Young wrote: This is necessary, but not sure if it is suffcieint. THere is at least one problem still: group-users doesn't allow enrollment. Need to fix that, but should be in a follow on patch. ___ Freeipa-devel

[Freeipa-devel] [PATCH] admiyo-0183-aci-association-fixes

2011-01-31 Thread Adam Young
https://fedorahosted.org/freeipa/ticket/662 From daf23fb0873796b9e479102e01e97c417ac41a44 Mon Sep 17 00:00:00 2001 From: Adam Young ayo...@redhat.com Date: Mon, 31 Jan 2011 17:24:42 -0500 Subject: [PATCH] aci association fixes declarative priv definition fixes role_add_privilege and

Re: [Freeipa-devel] [PATCH] Added undo for permission rights.

2011-01-31 Thread Adam Young
On 01/31/2011 08:48 PM, Endi Sukma Dewata wrote: https://fedorahosted.org/freeipa/ticket/884 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel NACK is_dirty is broken now on permissions.

Re: [Freeipa-devel] [PATCH] 047 Add an address for a nameserver when a new zone is created during install

2011-01-31 Thread Rob Crittenden
Jakub Hrozek wrote: On Mon, Jan 31, 2011 at 05:52:08PM -0500, Simo Sorce wrote: On Mon, 31 Jan 2011 22:44:43 +0100 Jakub Hrozekjhro...@redhat.com wrote: https://fedorahosted.org/freeipa/ticket/881 We've run into a chicken-and-egg problem during installation. If the hostname of the IPA

Re: [Freeipa-devel] [PATCH] 0080 Sync in both direction before changing replication agreement in replica

2011-01-31 Thread Rob Crittenden
Simo Sorce wrote: On Mon, 31 Jan 2011 18:38:47 -0500 Simo Sorcesso...@redhat.com wrote: See also ticket #887 Simo. With a patch file it works better I guess :-) Simo. I wasn't entirely sure how to test this so I use ipa-replica-manage re-initialize --from=master.example.com It

[Freeipa-devel] [PATCH] Fixed missing object reference.

2011-01-31 Thread Endi Sukma Dewata
Pushed under one-liner rule. -- Endi S. Dewata From 0742a9bdfa5b8570b732b8c21d51b242ac82ab5f Mon Sep 17 00:00:00 2001 From: Endi S. Dewata edew...@redhat.com Date: Mon, 31 Jan 2011 22:24:40 -0600 Subject: [PATCH] Fixed missing object reference. --- install/ui/associate.js |4 ++-- 1 files

Re: [Freeipa-devel] [PATCH] Added undo for permission rights.

2011-01-31 Thread Endi Sukma Dewata
On 1/31/2011 8:53 PM, Adam Young wrote: On 01/31/2011 08:48 PM, Endi Sukma Dewata wrote: https://fedorahosted.org/freeipa/ticket/884 NACK is_dirty is broken now on permissions. Could you describe which one is broken? I tried a number of things on permission and delegation but so far