[Freeipa-devel] [PATCH] 078 Improve DNS zone creation

2011-06-09 Thread Martin Kosek
When a new DNS zone is being created a local hostname is set as a nameserver of the new zone. However, when the zone is created during ipa-replica-prepare, the the current master/replica doesn't have to be an IPA server with DNS support. This would lead to DNS zones with incorrect NS records as

Re: [Freeipa-devel] [PATCH] 079 DNS installation fails when domain and host domain mismatch

2011-06-09 Thread Simo Sorce
On Thu, 2011-06-09 at 12:58 +0200, Martin Kosek wrote: This patch depends on my patch 078. A special patch for stable branch attached. ACK Simo. -- Simo Sorce * Red Hat, Inc * New York ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 078 Improve DNS zone creation

2011-06-09 Thread Simo Sorce
On Thu, 2011-06-09 at 11:31 +0200, Martin Kosek wrote: When a new DNS zone is being created a local hostname is set as a nameserver of the new zone. However, when the zone is created during ipa-replica-prepare, the the current master/replica doesn't have to be an IPA server with DNS support.

Re: [Freeipa-devel] [PATCH] 792 Update translations

2011-06-09 Thread Martin Kosek
On Mon, 2011-06-06 at 13:47 -0400, Rob Crittenden wrote: Our translation files haven't been updated for a few months, this brings things up to date. It is intended for master only. All I did to generate this patch was to run make update-po in install/po. It is otherwise untouched by human

Re: [Freeipa-devel] [PATCH] 792 Update translations

2011-06-09 Thread Dmitri Pal
On 06/09/2011 08:56 AM, Martin Kosek wrote: On Mon, 2011-06-06 at 13:47 -0400, Rob Crittenden wrote: Our translation files haven't been updated for a few months, this brings things up to date. It is intended for master only. All I did to generate this patch was to run make update-po in

Re: [Freeipa-devel] [PATCH] 794 Fix external CA installations

2011-06-09 Thread Martin Kosek
On Wed, 2011-06-08 at 16:02 -0400, Rob Crittenden wrote: External CA installations were broken when we added a separate SSL certificate for the dogtag DS instance so that replication is done over SSL. We need to initialize the CADS instance with a bit more information so the certificate can

[Freeipa-devel] [PATCH] 795 Remove root autobind search restriction, fix upgrade logging error handling.

2011-06-09 Thread Rob Crittenden
There was no point in limiting autobind root to just search cn=config since it could always just modify its way out of the box, so remove the restriction. The upgrade log wasn't being created. Clearing all other loggers before we calling logging.basicConfig() fixes this. Add a global

Re: [Freeipa-devel] [PATCH] 788 remove automountinformation from automount dns

2011-06-09 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2011-05-23 at 14:38 -0400, Rob Crittenden wrote: In an attempt to support multiple direct maps we always included the automountinformation in the key dn. This makes showing keys impossible a bit of a catch-22. You want to get the mount info but to get it you need the

Re: [Freeipa-devel] [PATCH] 073 IPA installation with --no-host-dns fails

2011-06-09 Thread Rob Crittenden
Martin Kosek wrote: Patch for both master and ipa-2-0 branch attached. --- --no-host-dns option should allow installing IPA server on a host without a DNS resolvable name. Update parse_ip_address and verify_ip_address functions has been changed not to return None and print error messages in

Re: [Freeipa-devel] [PATCH] 074 Handle LDAP search references

2011-06-09 Thread Rob Crittenden
Martin Kosek wrote: LDAP search operation may return a search reference pointing to an LDAP resource. As the framework does not handle search references, skip these results to prevent result processing failures. Migrate operation crashed when the migrated DS contained search references. Now, it

Re: [Freeipa-devel] [PATCH] 075 Add ignore lists to migrate-ds command

2011-06-09 Thread Rob Crittenden
Martin Kosek wrote: How to test: 1) Create a custom DS instance with for example 60radius.ldif schema present (as in the original report in ticket #1266) 2) Populate DS with users/groups with custom unsupported object class/attribute 3) Try to migrate these users and groups to IPAv2. Only the

Re: [Freeipa-devel] [PATCH] 795 Remove root autobind search restriction, fix upgrade logging error handling.

2011-06-09 Thread Rob Crittenden
Rob Crittenden wrote: There was no point in limiting autobind root to just search cn=config since it could always just modify its way out of the box, so remove the restriction. The upgrade log wasn't being created. Clearing all other loggers before we calling logging.basicConfig() fixes this.

[Freeipa-devel] [PATCH] 175 Entitlement status.

2011-06-09 Thread Endi Sukma Dewata
A new facet has been added to show entitlement status and download the registration certificate. -- Endi S. Dewata From 34b60284da66082b7d7a954ed02b545665fd1d16 Mon Sep 17 00:00:00 2001 From: Endi S. Dewata edew...@redhat.com Date: Wed, 27 Apr 2011 12:17:13 -0500 Subject: [PATCH] Entitlement