[Freeipa-devel] [PATCH] 230 Refresh resolvers after DNS install

2012-03-06 Thread Martin Kosek
The testing instructions are attached to the ticket. --- Server framework calls acutil.res_send() to send DNS queries used for various DNS tests. However, once acutil is imported it does not change its list of configured resolvers even when /etc/resolv.conf is changed. This may lead to

[Freeipa-devel] [PATCH] 0010 Remove unnecessary mctx double checks

2012-03-06 Thread Petr Spacek
Hello, this patch removes unnecessary double checks for isc_mem, which are scattered through the code. This problem was mentioned yesterday (another) patch review: https://www.redhat.com/archives/freeipa-devel/2012-March/msg00073.html On 03/05/2012 12:32 PM, Adam Tkac wrote: +

Re: [Freeipa-devel] [PATCH] 0010 Remove unnecessary mctx double checks

2012-03-06 Thread Adam Tkac
On 03/06/2012 01:46 PM, Petr Spacek wrote: Hello, this patch removes unnecessary double checks for isc_mem, which are scattered through the code. This problem was mentioned yesterday (another) patch review: https://www.redhat.com/archives/freeipa-devel/2012-March/msg00073.html On 03/05/2012

Re: [Freeipa-devel] [PATCH] 0020 Allow removing sudo commands with special characters from command groups

2012-03-06 Thread Petr Viktorin
On 03/05/2012 04:10 PM, Petr Viktorin wrote: This patch fixes DN handling when removing LDAP entries from groups. Because they deal with commas and backslashes in a CSV param, the tests here rely on my patch 0015. ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH] 0010 Remove unnecessary mctx double checks

2012-03-06 Thread Petr Spacek
On 03/06/2012 01:49 PM, Adam Tkac wrote: On 03/06/2012 01:46 PM, Petr Spacek wrote: Hello, this patch removes unnecessary double checks for isc_mem, which are scattered through the code. This problem was mentioned yesterday (another) patch review:

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-03-06 Thread Dmitri Pal
[...] For a read-only KDC we need to investigate what's the better solution. There are many ways we can handle the issue, one of the simplest is probably to allow the RO KDC to use a special LDAP Extended operation against a full R/W server to get the user keys to sign, authenticating with

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-03-06 Thread Dmitri Pal
On 03/06/2012 10:59 AM, Simo Sorce wrote: On Tue, 2012-03-06 at 10:56 -0500, Dmitri Pal wrote: [...] For a read-only KDC we need to investigate what's the better solution. There are many ways we can handle the issue, one of the simplest is probably to allow the RO KDC to use a special LDAP

Re: [Freeipa-devel] named core dump

2012-03-06 Thread Adam Tkac
On 02/21/2012 07:55 PM, Marco Pizzoli wrote: Hi Adam, Hello Marco, thanks for information. This issue should be fixed in 1.1.0b1 release. I've just submitted update for Fedora (https://admin.fedoraproject.org/updates/bind-dyndb-ldap-1.1.0-0.9.b1.fc16) so please test it and let us know if it

[Freeipa-devel] [PATCH] 231 Ignore case in yes/no prompts

2012-03-06 Thread Martin Kosek
We did not accept answers like Yes, YES, No, etc. as valid answers to yes/no prompts (used for example in dnsrecord-del interactive mode). This could confuse users. This patch changes the behavior to ignore the answer case. https://fedorahosted.org/freeipa/ticket/2484 From

[Freeipa-devel] [PATCH] 15 Confusing default user groups

2012-03-06 Thread Ondrej Hamada
https://fedorahosted.org/freeipa/ticket/2354 There was added '(fallback)' string in the automember plugin labels referring to automember default groups to point out, that the users are already members of default group specified in IPA config, thus the default group specified in automember

Re: [Freeipa-devel] More types of replica in FreeIPA

2012-03-06 Thread Ondrej Hamada
On 03/06/2012 05:47 PM, Dmitri Pal wrote: On 03/06/2012 10:59 AM, Simo Sorce wrote: On Tue, 2012-03-06 at 10:56 -0500, Dmitri Pal wrote: [...] For a read-only KDC we need to investigate what's the better solution. There are many ways we can handle the issue, one of the simplest is probably

Re: [Freeipa-devel] [PATCH] 924 display both hex and decimal serial numbers

2012-03-06 Thread Rob Crittenden
Rob Crittenden wrote: Jan Cholasta wrote: Dne 18.1.2012 00:04, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 16.1.2012 22:02, Rob Crittenden napsal(a): Rob Crittenden wrote: Jan Cholasta wrote: Dne 13.1.2012 20:53, Rob Crittenden napsal(a): When viewing a certificate it will show the

Re: [Freeipa-devel] [PATCH] 974 minimum selinux-policy for F-17

2012-03-06 Thread Rob Crittenden
Rob Crittenden wrote: Update the minimum selinux-policy for F-17. This will enable ipa_memcached to run in Enforcing mode. Still waiting on this to be backported to at least F-16. You have to manually enable the boolean. rob F-16 package is in updates-testing, patch updated. rob From