Re: [Freeipa-devel] [PATCH] 291 I18n clean-up.

2011-10-03 Thread Petr Vobornik
On 10/01/2011 12:09 AM, Endi Sukma Dewata wrote: The hard-coded 'undo' and 'undo all' labels have been moved into internal.py to allow translation. Ticket #1897 ACK -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 129 migrate process cannot handle multivalued pkey attribute

2011-10-03 Thread Martin Kosek
On Sat, 2011-10-01 at 19:45 +0200, Jan Cholasta wrote: On 29.9.2011 12:01, Martin Kosek wrote: When group/user is migrated, the attribute used for RDN may be multivalued. Make sure that we pick the value used in the RDN which should be the unique one and not just the first one.

Re: [Freeipa-devel] [PATCH] 129 migrate process cannot handle multivalued pkey attribute

2011-10-03 Thread Jan Cholasta
On 3.10.2011 09:54, Martin Kosek wrote: On Sat, 2011-10-01 at 19:45 +0200, Jan Cholasta wrote: On 29.9.2011 12:01, Martin Kosek wrote: When group/user is migrated, the attribute used for RDN may be multivalued. Make sure that we pick the value used in the RDN which should be the unique one and

Re: [Freeipa-devel] [PATCH] 292 Disable sudo options Delete button if nothing selected.

2011-10-03 Thread Petr Vobornik
On 10/01/2011 12:10 AM, Endi Sukma Dewata wrote: The Delete button for sudo options in sudo rule details page now will only work if there is at least one row selected. Ticket #1896 ACK -- Petr Vobornik ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH] 129 migrate process cannot handle multivalued pkey attribute

2011-10-03 Thread Martin Kosek
On Mon, 2011-10-03 at 10:10 +0200, Jan Cholasta wrote: On 3.10.2011 09:54, Martin Kosek wrote: On Sat, 2011-10-01 at 19:45 +0200, Jan Cholasta wrote: On 29.9.2011 12:01, Martin Kosek wrote: When group/user is migrated, the attribute used for RDN may be multivalued. Make sure that we pick

[Freeipa-devel] [PATCH] 133 Be more clear about selfsign option

2011-10-03 Thread Martin Kosek
Installing IPA server --selfsign option is currently a one-way ticket to server with limited certificate capabilities. Make sure that user really want to install it by implementing the following steps: - moving the option to the bottom of certificate options section - adding a warning to

Re: [Freeipa-devel] [PATCH] 292 Disable sudo options Delete button if nothing selected.

2011-10-03 Thread Martin Kosek
On Mon, 2011-10-03 at 10:33 +0200, Petr Vobornik wrote: On 10/01/2011 12:10 AM, Endi Sukma Dewata wrote: The Delete button for sudo options in sudo rule details page now will only work if there is at least one row selected. Ticket #1896 ACK Pushed to master, ipa-2-1. Martin

Re: [Freeipa-devel] [PATCH] 291 I18n clean-up.

2011-10-03 Thread Martin Kosek
On Mon, 2011-10-03 at 09:48 +0200, Petr Vobornik wrote: On 10/01/2011 12:09 AM, Endi Sukma Dewata wrote: The hard-coded 'undo' and 'undo all' labels have been moved into internal.py to allow translation. Ticket #1897 ACK Pushed to master, ipa-2-1. Martin

[Freeipa-devel] Fedora 16 support (systemd)

2011-10-03 Thread Alexander Bokovoy
Hi, I was working for a month on systemd support for FreeIPA and now there is something you may try -- http://koji.fedoraproject.org/koji/taskinfo?taskID=3399157 Provided you have Fedora 16 + updates-testing install, provided that you get FreeIPA packages from the Koji task above, FreeIPA can

[Freeipa-devel] [PATCH] 134 Improve handling of GIDs when migrating groups

2011-10-03 Thread Martin Kosek
Since IPA v2 server already contain predefined groups that may collide with groups in migrated (IPA v1) server (for example admins, ipausers), users having colliding group as their primary group may happen to belong to an unknown group on new IPA v2 server. Implement --group-overwrite-gid option

[Freeipa-devel] HBAC Authorization Alternative to SSSD

2011-10-03 Thread JR Aquino
Attached is a pam_python module that can be used to perform FreeIPA HBAC authorization in conjunction with pam_python.so (http://ace-host.stuart.id.au/russell/files/pam_python/) I have been working on this for a while as an alternative to sssd on systems that cannot support the sssd

Re: [Freeipa-devel] [PATCH] 877 prompt for current password

2011-10-03 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2011-09-19 at 09:03 -0400, Rob Crittenden wrote: Jan Cholasta wrote: On 16.9.2011 21:16, Rob Crittenden wrote: Prompt for the current password when changing your own password using ipa passwd. I had to jump through several hoops with this: - Added a new sortorder

[Freeipa-devel] [PATCH] #1794 - Speed up replica setup

2011-10-03 Thread Simo Sorce
Newer 389ds servers have a new option to have a different set of filtered attributes from normal replication. This has been added in order to allow DS to replicate memberof attributes only during a total update so that we do not need to run a fixup memberof task on a replica at install time. This

Re: [Freeipa-devel] [PATCH] #1794 - Speed up replica setup

2011-10-03 Thread Rich Megginson
On 10/03/2011 04:39 PM, JR Aquino wrote: On Oct 3, 2011, at 3:17 PM, Simo Sorce wrote: On Mon, 2011-10-03 at 16:20 -0400, Simo Sorce wrote: Newer 389ds servers have a new option to have a different set of filtered attributes from normal replication. This has been added in order to allow DS

Re: [Freeipa-devel] [PATCH] #1794 - Speed up replica setup

2011-10-03 Thread Simo Sorce
On Mon, 2011-10-03 at 16:20 -0400, Simo Sorce wrote: Newer 389ds servers have a new option to have a different set of filtered attributes from normal replication. This has been added in order to allow DS to replicate memberof attributes only during a total update so that we do not need to

Re: [Freeipa-devel] [PATCH] #1794 - Speed up replica setup

2011-10-03 Thread JR Aquino
On Oct 3, 2011, at 3:17 PM, Simo Sorce wrote: On Mon, 2011-10-03 at 16:20 -0400, Simo Sorce wrote: Newer 389ds servers have a new option to have a different set of filtered attributes from normal replication. This has been added in order to allow DS to replicate memberof attributes only