Re: [Freeipa-devel] [PATCH] 937 configure /etc/openldap/ldap.conf

2012-02-01 Thread Martin Kosek
On Tue, 2012-01-31 at 23:25 -0500, Rob Crittenden wrote: Configure the openldap configuration file with the basics for IPA. This is mostly to make querying with StartTLS easier but it does make ldapsearch a lot nicer in general. I got a little carried away with the man page. I wanted to

Re: [Freeipa-devel] [PATCH] 937 configure /etc/openldap/ldap.conf

2012-02-01 Thread Simo Sorce
On Tue, 2012-01-31 at 23:25 -0500, Rob Crittenden wrote: Configure the openldap configuration file with the basics for IPA. This is mostly to make querying with StartTLS easier but it does make ldapsearch a lot nicer in general. I got a little carried away with the man page. I wanted to

Re: [Freeipa-devel] [PATCH] 344 Added icons for status column.

2012-02-01 Thread Petr Vobornik
On 01/31/2012 05:29 PM, Endi Sukma Dewata wrote: The status formatter was modified to show enabled/disabled icon before the status text. The format classes were renamed to formatter to avoid confusion with the format() method. A new parameter 'type' was added to the formatter to determine the

Re: [Freeipa-devel] [PATCH] 345 Hide Add/Delete buttons in self-service mode.

2012-02-01 Thread Petr Vobornik
On 01/31/2012 06:50 PM, Endi Sukma Dewata wrote: Users do not have add/delete permission in self-service mode, so the search facet was modified to hide the Add/Delete buttons. Ticket #2188 ACK, pushed to master, ipa-2-2 -- Petr Vobornik ___

Re: [Freeipa-devel] [PATCH] 346 Use fixed font when displaying certificate.

2012-02-01 Thread Petr Vobornik
On 01/31/2012 06:51 PM, Endi Sukma Dewata wrote: The textareas used to display certificates were modified to use fixed font. Ticket #2017 ACK, pushed to master, ipa-2-2 -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 347 Show password expiration date.

2012-02-01 Thread Petr Vobornik
On 01/31/2012 09:45 PM, Endi Sukma Dewata wrote: The user details page was modified to show the password expiration date next to the existing password field. Fixed problem resetting password in self-service mode. The JSON interface for the passwd command requires the username to be specified

[Freeipa-devel] [PATCH] 204 Improve netgroup-add error messages

2012-02-01 Thread Martin Kosek
These two situations in netgroup-add need to be distinguished: 1) Netgroup cannot be added because a hostgroup with the same name created a colliding managed netgroup 2) Another native netgroup with the same name exists This patch checks the colliding netgroup and raise appropriate error

[Freeipa-devel] [PATCH] 205 Remove UDP checks from conncheck

2012-02-01 Thread Martin Kosek
UDP port checks in ipa-replica-conncheck always returns OK even if they are closed by firewall. They cannot be reliably checked in the same way as TCP ports as there is no session management as in TCP protocol. We cannot guarantee a response on the checked side without our own echo server bound to

Re: [Freeipa-devel] Adding a new DNA plugin configuration in IPAv3

2012-02-01 Thread Dmitri Pal
On 01/31/2012 06:45 AM, Sumit Bose wrote: Hi, for the IPAv3 trust feature we have to add the objectclass ipaNTUserAttrs/ipaNTGroupAttrs to every user/group which should be visible on the Windows side of the trust. The only MUST attribute of both objectclasses is ipaNTSecurityIdentifier the

Re: [Freeipa-devel] Adding a new DNA plugin configuration in IPAv3

2012-02-01 Thread Rob Crittenden
Sumit Bose wrote: Hi, for the IPAv3 trust feature we have to add the objectclass ipaNTUserAttrs/ipaNTGroupAttrs to every user/group which should be visible on the Windows side of the trust. The only MUST attribute of both objectclasses is ipaNTSecurityIdentifier the SID or the user or group. We

Re: [Freeipa-devel] Adding a new DNA plugin configuration in IPAv3

2012-02-01 Thread Simo Sorce
On Wed, 2012-02-01 at 12:00 -0500, Dmitri Pal wrote: On 01/31/2012 06:45 AM, Sumit Bose wrote: Hi, for the IPAv3 trust feature we have to add the objectclass ipaNTUserAttrs/ipaNTGroupAttrs to every user/group which should be visible on the Windows side of the trust. The only MUST

Re: [Freeipa-devel] Adding a new DNA plugin configuration in IPAv3

2012-02-01 Thread Simo Sorce
On Wed, 2012-02-01 at 13:39 -0500, Rob Crittenden wrote: Sumit Bose wrote: Hi, for the IPAv3 trust feature we have to add the objectclass ipaNTUserAttrs/ipaNTGroupAttrs to every user/group which should be visible on the Windows side of the trust. The only MUST attribute of both

Re: [Freeipa-devel] [PATCH] 072 Navigation and redirection to various facets

2012-02-01 Thread Endi Sukma Dewata
On 1/27/2012 10:49 AM, Petr Vobornik wrote: In current implementation target facet of navigation(from menu) and redirection is always one exact facet per entity. There isn't a way to navigate to different facet from menu or redirect to different facets from various facets. This patch adds: *

[Freeipa-devel] [PATCH] 938 consolidate external member code

2012-02-01 Thread Rob Crittenden
We had code all over the place to handle adding and removing external members from a variety of attributes. I consolidated these all into two functions in baseldap.py. This obsoletes my patch 920 but this patch includes the improved error reporting that was present. rob From