Re: [Freeipa-devel] [PATCH] 073 IPA installation with --no-host-dns fails

2011-06-10 Thread Martin Kosek
On Thu, 2011-06-09 at 14:14 -0400, Rob Crittenden wrote: Martin Kosek wrote: Patch for both master and ipa-2-0 branch attached. --- --no-host-dns option should allow installing IPA server on a host without a DNS resolvable name. Update parse_ip_address and verify_ip_address functions

Re: [Freeipa-devel] [PATCH] 075 Add ignore lists to migrate-ds command

2011-06-10 Thread Martin Kosek
On Thu, 2011-06-09 at 15:14 -0400, Rob Crittenden wrote: Martin Kosek wrote: How to test: 1) Create a custom DS instance with for example 60radius.ldif schema present (as in the original report in ticket #1266) 2) Populate DS with users/groups with custom unsupported object

Re: [Freeipa-devel] [PATCH] 788 remove automountinformation from automount dns

2011-06-10 Thread Martin Kosek
On Thu, 2011-06-09 at 14:10 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Mon, 2011-05-23 at 14:38 -0400, Rob Crittenden wrote: In an attempt to support multiple direct maps we always included the automountinformation in the key dn. This makes showing keys impossible a bit of a

Re: [Freeipa-devel] [PATCH] 795 Remove root autobind search restriction, fix upgrade logging error handling.

2011-06-10 Thread Martin Kosek
On Thu, 2011-06-09 at 16:32 -0400, Rob Crittenden wrote: Rob Crittenden wrote: There was no point in limiting autobind root to just search cn=config since it could always just modify its way out of the box, so remove the restriction. The upgrade log wasn't being created. Clearing all

[Freeipa-devel] [PATCH] JSON-marshalling-list

2011-06-10 Thread Adam Young
Pushed under the one line rule From 6f1b62fb1ad8c4d1639a54874462c9e7204bbf4c Mon Sep 17 00:00:00 2001 From: Adam Young ayo...@redhat.com Date: Fri, 10 Jun 2011 14:02:13 -0400 Subject: [PATCH] JSON marshalling list Lists are sometimes marshalled as arrays. Before, we assumed they were CSV

[Freeipa-devel] [PATCH] 796 better detection of CA DS installation status

2011-06-10 Thread Rob Crittenden
Do better detection on status of CA DS instance when installing. The conditional used to determine if thd CA 389-ds instance was already configured was rather poor so it was possible to pass command-line arguments in to confuse it. This would cause it to not be installed at all causing the

Re: [Freeipa-devel] [PATCH] 795 Remove root autobind search restriction, fix upgrade logging error handling.

2011-06-10 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2011-06-09 at 16:32 -0400, Rob Crittenden wrote: Rob Crittenden wrote: There was no point in limiting autobind root to just search cn=config since it could always just modify its way out of the box, so remove the restriction. The upgrade log wasn't being created.

[Freeipa-devel] [PATCH] 797 fix re-initializing replica binding using GSSAPI

2011-06-10 Thread Rob Crittenden
Support initializing memberof during replication re-init using GSSAPI The last step of a replication re-initiailization is to run the memberof task. The current function would only authenticate using simple auth to monitor the task but we may be doing this using admin GSSAPI credentials so

Re: [Freeipa-devel] [PATCH] 29 Raise DuplicateEntry Error when adding a duplicate sudo option

2011-06-10 Thread JR Aquino
On Jun 9, 2011, at 10:24 AM, Rob Crittenden wrote: JR Aquino wrote: https://fedorahosted.org/freeipa/ticket/1277 Raise DuplicateEntry Error when adding a duplicate sudo option nack, this will still fail if no ipasudoopt is passed in. Also, is this case-sensitive? Yes, it is case

Re: [Freeipa-devel] [PATCH] 29 Raise DuplicateEntry Error when adding a duplicate sudo option

2011-06-10 Thread JR Aquino
On Jun 10, 2011, at 3:11 PM, JR Aquino wrote: On Jun 9, 2011, at 10:24 AM, Rob Crittenden wrote: JR Aquino wrote: https://fedorahosted.org/freeipa/ticket/1277 Raise DuplicateEntry Error when adding a duplicate sudo option nack, this will still fail if no ipasudoopt is passed in.