Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-26 Thread Martin Kosek
On Sun, 2011-09-25 at 23:05 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-09-23 at 14:12 -0400, Rob Crittenden wrote: Always require SSL in the Kerberos authorization block. This also corrects a slight bug where if add is True then we always re-update the file. rob

Re: [Freeipa-devel] [PATCH] #1839 Fix password expiration issue for service principals

2011-09-26 Thread Jan Cholasta
On 24.9.2011 01:30, Simo Sorce wrote: The patch to fix password expiration for user broke password expiration for most other principals as it was forcing to set an arbitrary date on all principals unconditionally. Moved the code as is in the right spot (only if the principal is an ipa user and

Re: [Freeipa-devel] [PATCH] 45 Check that install hostname matches the server hostname

2011-09-26 Thread Martin Kosek
On Mon, 2011-09-12 at 09:50 +0200, Jan Cholasta wrote: On 7.9.2011 15:13, Rob Crittenden wrote: Jan Cholasta wrote: On 6.9.2011 19:49, Rob Crittenden wrote: Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/1717 Honza nack, what if there are multiple interfaces and you

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-26 Thread Martin Kosek
On Mon, 2011-09-26 at 08:31 +0200, Martin Kosek wrote: On Sun, 2011-09-25 at 23:05 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-09-23 at 14:12 -0400, Rob Crittenden wrote: Always require SSL in the Kerberos authorization block. This also corrects a slight bug where

Re: [Freeipa-devel] [PATCH] 017 Fixed: Column header for attributes table should be full, width

2011-09-26 Thread Petr Vobornik
On 09/26/2011 08:15 AM, Endi Sukma Dewata wrote: On 9/23/2011 11:05 AM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/1841 The column header for the attributes table (IPA.attributes_widget) does not cover the entire width of the table. This problem appears in the adder dialog

Re: [Freeipa-devel] [PATCH] 45 Check that install hostname matches the server hostname

2011-09-26 Thread Martin Kosek
On Mon, 2011-09-26 at 11:54 +0200, Jan Cholasta wrote: On 26.9.2011 10:59, Martin Kosek wrote: On Mon, 2011-09-12 at 09:50 +0200, Jan Cholasta wrote: On 7.9.2011 15:13, Rob Crittenden wrote: Jan Cholasta wrote: On 6.9.2011 19:49, Rob Crittenden wrote: Jan Cholasta wrote:

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-26 Thread Martin Kosek
On Mon, 2011-09-26 at 08:54 -0400, Rob Crittenden wrote: Simo Sorce wrote: On Mon, 2011-09-26 at 11:22 +0200, Martin Kosek wrote: IPA server, client and replica installation and WebUI worked for me. This patch seems to defeat the purpose as we are still allowing krb auth on locations

[Freeipa-devel] [PATCH] 283 Fixed add/delete arrows position.

2011-09-26 Thread Endi Sukma Dewata
The IPA.adder_dialog has been modified such that it shows the arrow first then the arrow. Ticket #1858 Pushed to master and ipa-2-1 under one-liner/trivial rule. -- Endi S. Dewata ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 882 always require SSL in Kerberos block

2011-09-26 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2011-09-26 at 08:54 -0400, Rob Crittenden wrote: Simo Sorce wrote: On Mon, 2011-09-26 at 11:22 +0200, Martin Kosek wrote: IPA server, client and replica installation and WebUI worked for me. This patch seems to defeat the purpose as we are still allowing krb auth

[Freeipa-devel] [PATCH] 884 migration context and logging

2011-09-26 Thread Rob Crittenden
We can't assume that there will be only one naming context. Look at each one until we find an IPA one. Add logging so you can know that a migration attempt fails and why. rob From 4a3b5c99341c79279936a13c4407468d5accdd04 Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com Date: