Re: [Freeipa-devel] [PATCH] 762 Let the framework be able to override the hostname

2011-05-26 Thread Martin Kosek
On Wed, 2011-05-25 at 11:29 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-04-01 at 11:47 -0400, Rob Crittenden wrote: The hostname is passed in during the server installation. We should use this hostname for the resulting server as well. It was being discarded and we

[Freeipa-devel] [PATCH] 069 Improve interactive mode for DNS plugin

2011-05-26 Thread Martin Kosek
Interactive mode for commands manipulating with DNS records (dnsrecord-add, dnsrecord-del) is not usable. This patch enhances the server framework with new callback for interactive mode, which can be used by commands to inject their own interactive handling. The callback is then used to improve

Re: [Freeipa-devel] [PATCH] 0227-2-automount-UI

2011-05-26 Thread Endi Sukma Dewata
On 5/25/2011 7:58 PM, Adam Young wrote: 17. The adder dialog boxes for map and key don't have a title. The titles should be defined in internal.py and the ipa_init.json needs to be regenerated. Fixed The ipa_init.json doesn't seem to be updated yet. More changes in this patch. I combined

Re: [Freeipa-devel] [PATCH] 790 document problems re-adding a replication

2011-05-26 Thread Rob Crittenden
Simo Sorce wrote: On Wed, 2011-05-25 at 12:39 -0400, Rob Crittenden wrote: Simo Sorce wrote: On Wed, 2011-05-25 at 09:09 -0400, Rob Crittenden wrote: Dmitri Pal wrote: On 05/24/2011 04:21 PM, Rob Crittenden wrote: If you create a replica, remove it, then re-add it and try to

[Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Adam Young
There are four cases where we've discussed using sessions for optimizations. During today's phone discussion we analysed them. 1. Avoiding the negotiate round trip. Requesting a page protected by Kerberos requires two round trips to the server: 1 for the initializ request, which gets

Re: [Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Simo Sorce
On Thu, 2011-05-26 at 12:53 -0400, Adam Young wrote: There are four cases where we've discussed using sessions for optimizations. During today's phone discussion we analysed them. 1. Avoiding the negotiate round trip. Requesting a page protected by Kerberos requires two round trips to

Re: [Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Dmitri Pal
On 05/26/2011 02:01 PM, Simo Sorce wrote: On Thu, 2011-05-26 at 12:53 -0400, Adam Young wrote: There are four cases where we've discussed using sessions for optimizations. During today's phone discussion we analysed them. 1. Avoiding the negotiate round trip. Requesting a page protected

Re: [Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Simo Sorce
On Thu, 2011-05-26 at 14:19 -0400, Dmitri Pal wrote: On 05/26/2011 02:01 PM, Simo Sorce wrote: On Thu, 2011-05-26 at 12:53 -0400, Adam Young wrote: There are four cases where we've discussed using sessions for optimizations. During today's phone discussion we analysed them. 1.

Re: [Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Adam Young
On 05/26/2011 02:19 PM, Dmitri Pal wrote: On 05/26/2011 02:01 PM, Simo Sorce wrote: On Thu, 2011-05-26 at 12:53 -0400, Adam Young wrote: There are four cases where we've discussed using sessions for optimizations. During today's phone discussion we analysed them. 1. Avoiding the negotiate

Re: [Freeipa-devel] [PATCH] 0227-2-automount-UI

2011-05-26 Thread Adam Young
On 05/26/2011 09:30 AM, Endi Sukma Dewata wrote: On 5/25/2011 7:58 PM, Adam Young wrote: 17. The adder dialog boxes for map and key don't have a title. The titles should be defined in internal.py and the ipa_init.json needs to be regenerated. Fixed The ipa_init.json doesn't seem to be

Re: [Freeipa-devel] [PATCH] 069 Improve interactive mode for DNS plugin

2011-05-26 Thread Jan Cholasta
On 26.5.2011 14:32, Martin Kosek wrote: Interactive mode for commands manipulating with DNS records (dnsrecord-add, dnsrecord-del) is not usable. This patch enhances the server framework with new callback for interactive mode, which can be used by commands to inject their own interactive

[Freeipa-devel] [PATCH] 791 don't add IP address when creating zone

2011-05-26 Thread Rob Crittenden
When creating a DNS zone if an IP address was passed in that address was added to the record of the IPA server. This was causing problems when creating new reverse zones for different subnets with ipa-replica-prepare. If you padded in --ip_address then a new reverse DNS zone would be created

Re: [Freeipa-devel] [PATCH] 768 fix migration between v2 servers

2011-05-26 Thread Rob Crittenden
Martin Kosek wrote: On Fri, 2011-04-08 at 10:24 -0400, Rob Crittenden wrote: Migration from a v2 server would fail because of our fake memberofindirect attribute. This isn't in any objectclass so would cause entries to fail to migrate. We can safely just remove it. Also remove any limits on

Re: [Freeipa-devel] [PATCH] 788 remove automountinformation from automount dns

2011-05-26 Thread Adam Young
On 05/23/2011 02:38 PM, Rob Crittenden wrote: In an attempt to support multiple direct maps we always included the automountinformation in the key dn. This makes showing keys impossible a bit of a catch-22. You want to get the mount info but to get it you need the mount info. This patch

Re: [Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Dmitri Pal
On 05/26/2011 02:43 PM, Simo Sorce wrote: We need to extract the ticket first. You do not have direct access to the credential cache from within the browser so you wouldn't be able to do that for the WebUI anyway. I was talking about the server side. -- Thank you, Dmitri Pal Sr. Engineering

Re: [Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Dmitri Pal
On 05/26/2011 02:43 PM, Simo Sorce wrote: You can limit it to have one cursor open per session at a time so you can use it as session global. Dangerous. I have seen Adam's response. This functionality is easily extensible. You can start with one and then add hash. I do not see a use case in

Re: [Freeipa-devel] [PATCH] 788 remove automountinformation from automount dns

2011-05-26 Thread Dmitri Pal
On 05/26/2011 04:51 PM, Adam Young wrote: On 05/23/2011 02:38 PM, Rob Crittenden wrote: In an attempt to support multiple direct maps we always included the automountinformation in the key dn. This makes showing keys impossible a bit of a catch-22. You want to get the mount info but to get it

Re: [Freeipa-devel] [PATCH] 788 remove automountinformation from automount dns

2011-05-26 Thread Adam Young
On 05/26/2011 05:01 PM, Dmitri Pal wrote: On 05/26/2011 04:51 PM, Adam Young wrote: On 05/23/2011 02:38 PM, Rob Crittenden wrote: In an attempt to support multiple direct maps we always included the automountinformation in the key dn. This makes showing keys impossible a bit of a catch-22.

Re: [Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Adam Young
On 05/26/2011 04:56 PM, Dmitri Pal wrote: On 05/26/2011 02:43 PM, Simo Sorce wrote: You can limit it to have one cursor open per session at a time so you can use it as session global. Dangerous. I have seen Adam's response. This functionality is easily extensible. You can start with one and

Re: [Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Dmitri Pal
On 05/26/2011 05:19 PM, Adam Young wrote: The term Session global is a little weird. If you mean that multiple requests in the same session can talk to the same cursor, then yes. Global implies multiple people can talk to it at once, and I do not mean that. One cursor per session. The

Re: [Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Adam Young
On 05/26/2011 05:23 PM, Dmitri Pal wrote: On 05/26/2011 05:19 PM, Adam Young wrote: The term Session global is a little weird. If you mean that multiple requests in the same session can talk to the same cursor, then yes. Global implies multiple people can talk to it at once, and I do not mean

Re: [Freeipa-devel] Summary of Session discussion

2011-05-26 Thread Rob Crittenden
Dmitri Pal wrote: On 05/26/2011 05:19 PM, Adam Young wrote: The term Session global is a little weird. If you mean that multiple requests in the same session can talk to the same cursor, then yes. Global implies multiple people can talk to it at once, and I do not mean that. One cursor per

[Freeipa-devel] [PATCH] 166 Fixed URL parameter parsing.

2011-05-26 Thread Endi Sukma Dewata
The $.bbq.getState() invocations have been modified not to coerce URL parameter values to avoid parsing error. Ticket #1208 -- Endi S. Dewata From 0543036b5d59cb8769ee1857737fddf582613a13 Mon Sep 17 00:00:00 2001 From: Endi S. Dewata edew...@redhat.com Date: Mon, 23 May 2011 17:48:37 -0500

Re: [Freeipa-devel] [PATCH] 166 Fixed URL parameter parsing.

2011-05-26 Thread Adam Young
On 05/26/2011 06:24 PM, Endi Sukma Dewata wrote: The $.bbq.getState() invocations have been modified not to coerce URL parameter values to avoid parsing error. Ticket #1208 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 166 Fixed URL parameter parsing.

2011-05-26 Thread Adam Young
On 05/26/2011 08:30 PM, Adam Young wrote: On 05/26/2011 06:24 PM, Endi Sukma Dewata wrote: The $.bbq.getState() invocations have been modified not to coerce URL parameter values to avoid parsing error. Ticket #1208 ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH] 166 Fixed URL parameter parsing.

2011-05-26 Thread Adam Young
On 05/26/2011 08:30 PM, Adam Young wrote: On 05/26/2011 06:24 PM, Endi Sukma Dewata wrote: The $.bbq.getState() invocations have been modified not to coerce URL parameter values to avoid parsing error. Ticket #1208 ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH] 069 Improve interactive mode for DNS plugin

2011-05-26 Thread Rob Crittenden
Martin Kosek wrote: Interactive mode for commands manipulating with DNS records (dnsrecord-add, dnsrecord-del) is not usable. This patch enhances the server framework with new callback for interactive mode, which can be used by commands to inject their own interactive handling. The callback is