Re: [Freeipa-devel] Kerberos implementation issues

2011-06-23 Thread Jim Meyering
Alexander Bokovoy wrote: On 22.06.2011 20:30, Simo Sorce wrote: Quick search on the internet did not reveal any. I found a Ruby GSSAPI library if this is of any help. https://github.com/zenchild/gssapi/wiki If only iwhd were written in Ruby rather than C. Maybe you can take mod_auth_kerb

Re: [Freeipa-devel] [PATCH] 762 Let the framework be able to override the hostname

2011-06-23 Thread Martin Kosek
On Wed, 2011-06-22 at 08:51 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-05-27 at 15:39 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2011-05-25 at 11:29 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-04-01 at 11:47

Re: [Freeipa-devel] [PATCH] 088 Check IPA configuration in install tools

2011-06-23 Thread Martin Kosek
On Wed, 2011-06-22 at 18:03 -0400, Rob Crittenden wrote: Martin Kosek wrote: Install tools may fail with unexpected error when IPA server is not installed on a system. Improve user experience by implementing a check to affected tools. https://fedorahosted.org/freeipa/ticket/1327

Re: [Freeipa-devel] [PATCH] 804 slight perf improvement

2011-06-23 Thread Martin Kosek
On Thu, 2011-06-16 at 11:34 -0400, Rob Crittenden wrote: This patch adds the production mode test to a few more places in the code. The speed increase is slight, a few hundred ms in my tests, but every little bit helps. ticket 1023 rob I didn't notice much of a speed up on my VM. But

Re: [Freeipa-devel] [PATCH] 805 make dogtag optionally installable on replicas

2011-06-23 Thread Martin Kosek
On Fri, 2011-06-17 at 17:06 -0400, Rob Crittenden wrote: A dogtag replica file is created as usual. When the replica is installed dogtag is optional and not installed by default. Adding the --setup-ca option will configure it when the replica is installed. A new tool ipa-ca-install will

Re: [Freeipa-devel] [PATCH] 762 Let the framework be able to override the hostname

2011-06-23 Thread Rob Crittenden
Martin Kosek wrote: On Wed, 2011-06-22 at 08:51 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Haven't had a chance to explore this one yet. It sure would be nice if dogtag would tell us what the two differing base DNs are though... This patch should resolve the remaining issues. It

Re: [Freeipa-devel] [PATCH] 805 make dogtag optionally installable on replicas

2011-06-23 Thread Rob Crittenden
Martin Kosek wrote: On Fri, 2011-06-17 at 17:06 -0400, Rob Crittenden wrote: A dogtag replica file is created as usual. When the replica is installed dogtag is optional and not installed by default. Adding the --setup-ca option will configure it when the replica is installed. A new tool

[Freeipa-devel] [PATCH] 24 Verify that the hostname is fully-qualified

2011-06-23 Thread Jan Cholasta
This patch makes ipactl fail if the hostname isn't fully-qualified. It also fixes ipa-server-install to fail gracefully in such case, instead of failing with unexpected error. https://fedorahosted.org/freeipa/ticket/1035 Honza -- Jan Cholasta From a73adeab91f294204ef8ca0d145320d7ef6aa172 Mon

Re: [Freeipa-devel] [PATCH] 762 Let the framework be able to override the hostname

2011-06-23 Thread Martin Kosek
On Thu, 2011-06-23 at 09:26 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2011-06-22 at 08:51 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Haven't had a chance to explore this one yet. It sure would be nice if dogtag would tell us what the two differing base DNs are

Re: [Freeipa-devel] [PATCH] 23 Add ability to specify DNS reverse zone name by IP network address

2011-06-23 Thread Jan Cholasta
On 21.6.2011 14:15, Jan Cholasta wrote: This patch adds a new option name_from_ip to dnszone commands. Default value of idnsname is created from this option. Honza Fixed the API version number, added usage example to dns plugin help. https://fedorahosted.org/freeipa/ticket/1045 Honza --

Re: [Freeipa-devel] [PATCH] 24 Verify that the hostname is fully-qualified

2011-06-23 Thread Martin Kosek
On Thu, 2011-06-23 at 16:33 +0200, Jan Cholasta wrote: This patch makes ipactl fail if the hostname isn't fully-qualified. It also fixes ipa-server-install to fail gracefully in such case, instead of failing with unexpected error. https://fedorahosted.org/freeipa/ticket/1035 Honza You

Re: [Freeipa-devel] Trust relationship between IPA and samba4

2011-06-23 Thread Simo Sorce
On Thu, 2011-06-23 at 12:33 -0430, Loris Santamaria wrote: El jue, 23-06-2011 a las 09:26 -0400, Simo Sorce escribió: On Thu, 2011-06-23 at 08:32 -0430, Loris Santamaria wrote: Hi, this week I tried to establish a trust relationship between freeipa v2 and a samba 4 domain. In that

[Freeipa-devel] [PATCH] 0252 Automount keys details

2011-06-23 Thread Adam Young
From 80b4d22605d66cb1133983fe2c8d753ed5a5a831 Mon Sep 17 00:00:00 2001 From: Adam Young ayo...@redhat.com Date: Wed, 22 Jun 2011 13:21:40 -0400 Subject: [PATCH] automountkey details Adds hooks for navigation to the show page due to the unusual way that keys are accessed.

Re: [Freeipa-devel] [PATCH] 186 Added navigation breadcrumb.

2011-06-23 Thread Adam Young
On 06/22/2011 11:39 PM, Endi Sukma Dewata wrote: Navigation breadcrumb has been added to the facet header. The breadcrumb will appear on details, association, and automount facets. Ticket #1323 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] Trust relationship between IPA and samba4

2011-06-23 Thread Loris Santamaria
El jue, 23-06-2011 a las 09:26 -0400, Simo Sorce escribió: On Thu, 2011-06-23 at 08:32 -0430, Loris Santamaria wrote: Hi, this week I tried to establish a trust relationship between freeipa v2 and a samba 4 domain. In that setup most workstations live in the samba 4 domain and most

Re: [Freeipa-devel] [PATCH] 0009-Tab-and-spacing-on-list

2011-06-23 Thread Endi Sukma Dewata
On 6/21/2011 12:32 PM, Kyle Baker wrote: Both of those suggestions would be great, but it will require new styles to be created 1. we need a style for facet-controls on a list page and a totally separate style for controls on the detail pages. 2. This will require a umbrella style for all

Re: [Freeipa-devel] [PATCH] 0010-Facet-icon-swap-and-tab-sizing

2011-06-23 Thread Endi Sukma Dewata
On 6/21/2011 11:13 AM, Kyle Baker wrote: Minor tweaks to the sizing of the facet tabs as well as new icons under the facets. Attached a screen shot of 0009 and 0010 results. The same screen shot is attached in 0009 as well. ACK and pushed to master. -- Endi S. Dewata

Re: [Freeipa-devel] [PATCH] 186 Added navigation breadcrumb.

2011-06-23 Thread Adam Young
On 06/23/2011 02:44 PM, Adam Young wrote: On 06/22/2011 11:39 PM, Endi Sukma Dewata wrote: Navigation breadcrumb has been added to the facet header. The breadcrumb will appear on details, association, and automount facets. Ticket #1323 ___

Re: [Freeipa-devel] [PATCH] 185 Converted entity header into facet header.

2011-06-23 Thread Adam Young
On 06/22/2011 01:27 PM, Endi Sukma Dewata wrote: On 6/22/2011 9:30 AM, Adam Young wrote: This patch requires Kyle's patch #9 and #10. Demo is available here: http://edewata.fedorapeople.org/freeipa/install/ui/index.html Close. The commonality of config and krbticket policy is that they have

Re: [Freeipa-devel] [PATCH] 805 make dogtag optionally installable on replicas

2011-06-23 Thread Rob Crittenden
Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-06-17 at 17:06 -0400, Rob Crittenden wrote: A dogtag replica file is created as usual. When the replica is installed dogtag is optional and not installed by default. Adding the --setup-ca option will configure it when the replica is

Re: [Freeipa-devel] [PATCH] 762 Let the framework be able to override the hostname

2011-06-23 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2011-06-23 at 09:26 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2011-06-22 at 08:51 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Haven't had a chance to explore this one yet. It sure would be nice if dogtag would tell us what the two differing

Re: [Freeipa-devel] [PATCH] 0252 Automount keys details

2011-06-23 Thread Adam Young
On 06/23/2011 02:20 PM, Adam Young wrote: ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel From 7f243ecbefa8e4ba0afaed13126d0de20a339998 Mon Sep 17 00:00:00 2001 From: Adam Young

Re: [Freeipa-devel] [PATCH] 0252 Automount keys details

2011-06-23 Thread Endi Sukma Dewata
On 6/23/2011 4:18 PM, Adam Young wrote: Some issues: 1. Breadcrumb is not displayed in the automount key details facet. This is because usually when an entity only has 1 facet it will not have a back link/breadcrumb. That's not the case for automount key, so it has to be explicitly

[Freeipa-devel] [PATCH] 187 Added record count into association facet tabs.

2011-06-23 Thread Endi Sukma Dewata
The details and association facets have been modified to show the number of records in each association in the corresponding facet tab. Ticket #1386 -- Endi S. Dewata From 3e6f3e2ce48b4405369006c101c0eda8b8f17b9b Mon Sep 17 00:00:00 2001 From: Endi S. Dewata edew...@redhat.com Date: Thu, 23

Re: [Freeipa-devel] [PATCH] 0252 Automount keys details

2011-06-23 Thread Adam Young
On 06/23/2011 06:09 PM, Endi Sukma Dewata wrote: On 6/23/2011 4:18 PM, Adam Young wrote: Some issues: 1. Breadcrumb is not displayed in the automount key details facet. This is because usually when an entity only has 1 facet it will not have a back link/breadcrumb. That's not the case for