[Freeipa-devel] [PATCH] 42 Search for users in all the naming contexts present on the directory server

2011-08-23 Thread Jan Cholasta
This patch fixes ipa-kpasswd in cases where we have more than one naming context in the directory server. https://fedorahosted.org/freeipa/ticket/1655 https://fedorahosted.org/freeipa/ticket/1656 Honza -- Jan Cholasta From aeb3b9c214a6ec82a5a9e5bbb0651b9cc3d9effb Mon Sep 17 00:00:00 2001

Re: [Freeipa-devel] [PATCH] 005 Show error in serial association

2011-08-23 Thread Petr Vobornik
On 08/22/2011 07:05 PM, Endi Sukma Dewata wrote: On 8/22/2011 10:06 AM, Petr Vobornik wrote: 'Failed' moved to command. On 'failed' success is transformed to error - can be change behaviour of serial associator in some commands (previously some commands were executed even after 'failed' of

Re: [Freeipa-devel] [PATCH] 41 Verify that the external CA certificate files are correct

2011-08-23 Thread Jan Cholasta
On 18.8.2011 17:47, Rob Crittenden wrote: Jan Cholasta wrote: On 17.8.2011 10:27, Jan Cholasta wrote: Verify that --external_cert_file and --external_ca_file are both readable, valid PEM files and that their subject/issuer is correct. Also fixes ipalib.x509.load_certificate_from_file.

[Freeipa-devel] [PATCH] 43 Add subscription-manager dependency for RHEL

2011-08-23 Thread Jan Cholasta
https://fedorahosted.org/freeipa/ticket/1664 Honza -- Jan Cholasta From ff23fde28907611ed68cc2a13a89990d5be80cce Mon Sep 17 00:00:00 2001 From: Jan Cholasta jchol...@redhat.com Date: Tue, 23 Aug 2011 14:15:27 +0200 Subject: [PATCH] Add subscription-manager dependency for RHEL. ticket 1664 ---

Re: [Freeipa-devel] [PATCH] 41 Verify that the external CA certificate files are correct

2011-08-23 Thread Rob Crittenden
Jan Cholasta wrote: On 18.8.2011 17:47, Rob Crittenden wrote: Jan Cholasta wrote: On 17.8.2011 10:27, Jan Cholasta wrote: Verify that --external_cert_file and --external_ca_file are both readable, valid PEM files and that their subject/issuer is correct. Also fixes

Re: [Freeipa-devel] [PATCH] 251 Updated add and delete association dialog titles.

2011-08-23 Thread Petr Vobornik
On 08/22/2011 08:50 PM, Endi Sukma Dewata wrote: The association table widget and facet have been modified to accept titles for the add and delete dialogs. The table and facet definitions have been modified to specify the appropriate titles. Some unused code have been removed. Ticket #1629

Re: [Freeipa-devel] [PATCH] 42 Search for users in all the naming contexts present on the directory server

2011-08-23 Thread Rob Crittenden
Jan Cholasta wrote: This patch fixes ipa-kpasswd in cases where we have more than one naming context in the directory server. https://fedorahosted.org/freeipa/ticket/1655 https://fedorahosted.org/freeipa/ticket/1656 Honza Ack, pushed to master and ipa-2-1. I tested by enabling the retro

Re: [Freeipa-devel] [PATCH] 43 Add subscription-manager dependency for RHEL

2011-08-23 Thread Rob Crittenden
Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/1664 Honza nack, this requires only needs to be on freeipa-server. rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 251 Updated add and delete association dialog titles.

2011-08-23 Thread Endi Sukma Dewata
On 8/23/2011 8:56 AM, Petr Vobornik wrote: On 08/22/2011 08:50 PM, Endi Sukma Dewata wrote: The association table widget and facet have been modified to accept titles for the add and delete dialogs. The table and facet definitions have been modified to specify the appropriate titles. Some

Re: [Freeipa-devel] [PATCH] 252 Removed unnecessary HBAC/sudo rule category modification.

2011-08-23 Thread Petr Vobornik
On 08/22/2011 11:37 PM, Endi Sukma Dewata wrote: Since the Add/Delete links in the association table are disabled when the category is set to 'all', it's no longer necessary to check the category before showing the add/delete dialogs and modify the category before adding entries. Thus, the

[Freeipa-devel] [PATCH] 39 Improve sudorule documentation

2011-08-23 Thread JR Aquino
https://fedorahosted.org/freeipa/ticket/1657 Added brief explanations for the various Sudo components in the top level doc. Added doc entries for RunAs User and RunAs Group. freeipa-jraquino-0039-Improve-sudorule-documentation.patch Description:

Re: [Freeipa-devel] [PATCH] 39 Improve sudorule documentation

2011-08-23 Thread Rob Crittenden
JR Aquino wrote: https://fedorahosted.org/freeipa/ticket/1657 Added brief explanations for the various Sudo components in the top level doc. Added doc entries for RunAs User and RunAs Group. Deon suggested a minor grammar correction and I modified the commit message a little. ack, pushed to

Re: [Freeipa-devel] [PATCH] 43 Add subscription-manager dependency for RHEL

2011-08-23 Thread Rob Crittenden
Jan Cholasta wrote: On 23.8.2011 16:22, Rob Crittenden wrote: Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/1664 Honza nack, this requires only needs to be on freeipa-server. rob OK, I thought I'd put it in the package where entitle.py is located. Updated patch attached.

Re: [Freeipa-devel] [PATCH] 41 Verify that the external CA certificate files are correct

2011-08-23 Thread Rob Crittenden
Jan Cholasta wrote: On 23.8.2011 15:36, Rob Crittenden wrote: Jan Cholasta wrote: On 18.8.2011 17:47, Rob Crittenden wrote: Jan Cholasta wrote: On 17.8.2011 10:27, Jan Cholasta wrote: Verify that --external_cert_file and --external_ca_file are both readable, valid PEM files and that their

Re: [Freeipa-devel] [PATCH] 005 Show error in serial association

2011-08-23 Thread Endi Sukma Dewata
On 8/23/2011 6:34 AM, Petr Vobornik wrote: On 08/22/2011 07:05 PM, Endi Sukma Dewata wrote: One more issue, a command could return multiple error messages in each failure, but right now the get_failed() only reads the first message in each failure. Try adding several users into a group, but

Re: [Freeipa-devel] [PATCH] 34 Create FreeIPA CLI Plugin for the 389 Auto Membership plugin

2011-08-23 Thread Rob Crittenden
JR Aquino wrote: On Aug 19, 2011, at 2:16 AM, Martin Kosek wrote: Hi JR, I get to your plugin again. You can see my findings below. On Tue, 2011-08-09 at 22:41 +, JR Aquino wrote: ... Ok New Patch attached. I believe this addresses the above. 1. Requires(pre): 389-ds-base= 1.2.9.5-1

Re: [Freeipa-devel] [PATCH] 0283-enable-proxy-for-dogtag

2011-08-23 Thread Adam Young
NACK. Replicate uses the install code, which grabs the local constants. Need to extend it to use the local constants for a base install, but the remote constants for the replica installs. On 08/19/2011 01:57 PM, Dmitri Pal wrote: On 08/19/2011 01:19 PM, Adam Young wrote: The complete

[Freeipa-devel] [PATCH] 254 Fixed default map type in automount map adder dialog.

2011-08-23 Thread Endi Sukma Dewata
The adder dialog for automount map has been modified to select the direct map by default. Ticket #1698 -- Endi S. Dewata From 8ec68b3e841e7cb3beb3bed4a82726acc9d0d530 Mon Sep 17 00:00:00 2001 From: Endi S. Dewata edew...@redhat.com Date: Tue, 23 Aug 2011 20:45:06 -0500 Subject: [PATCH] Fixed