Re: [Freeipa-devel] [PATCH] 984 fix anonlimits dn

2012-03-13 Thread Martin Kosek
On Mon, 2012-03-12 at 17:58 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2012-03-07 at 18:02 -0500, Rob Crittenden wrote: The value of nsslapd-anonlimitsdn wasn't being set properly because it wasn't quoted. This will fix it, replacing whatever is there with a correct value.

Re: [Freeipa-devel] [PATCH] 227-228 Add last missing bits in new bind-dyndb-ldap

2012-03-13 Thread Petr Spacek
On 03/12/2012 07:10 PM, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2012-03-01 at 13:19 +0100, Martin Kosek wrote: These 2 patches changes the DNS API to support the last missing bits in new bind-dyndb-ldap: 1) Both global and per-zone forwarders now support a conditional custom port

Re: [Freeipa-devel] [PATCH] 982 tweak to no_init patch

2012-03-13 Thread Martin Kosek
On Wed, 2012-03-07 at 16:50 -0500, Rob Crittenden wrote: I discovered today that cert-request was failing with an untrusted CA error. The problem had to do with the NSS no_init patch. We were setting dbdir in the connection object too soon so it was comparing itself to itself and always

Re: [Freeipa-devel] [PATCH] 0021 Add CLI tests

2012-03-13 Thread Petr Viktorin
On 03/12/2012 09:18 PM, Rob Crittenden wrote: Petr Viktorin wrote: Most of the tests we have check if the server does the right thing with XML-RPC calls. How the commandline is converted to command arguments, including interactive prompting, is untested. This patch adds some tests in this area.

Re: [Freeipa-devel] [PATCH] 0022 Use ipauniqueid for the RDN of sudo commands (rebased)

2012-03-13 Thread Petr Viktorin
On 03/12/2012 06:10 PM, Martin Kosek wrote: On Mon, 2012-03-12 at 17:12 +0100, Petr Viktorin wrote: On 03/12/2012 04:01 PM, Martin Kosek wrote: On Mon, 2012-03-12 at 14:38 +0100, Petr Viktorin wrote: On 03/12/2012 01:26 PM, Martin Kosek wrote: On Thu, 2012-03-08 at 16:57 +0100, Petr Viktorin

Re: [Freeipa-devel] [PATCH] [WIP] Cross-realm trusts with AD

2012-03-13 Thread Dmitri Pal
On 03/13/2012 07:26 AM, Alexander Bokovoy wrote: Hi, at http://fedorapeople.org/gitweb?p=abbra/public_git/freeipa.git;a=shortlog;h=refs/heads/adwork one can find current state of AD trusts work. This tree introduces 'ipa trust-*' family of commands and freeipa-server-trust-ad package

Re: [Freeipa-devel] [PATCH] [WIP] Cross-realm trusts with AD

2012-03-13 Thread Alexander Bokovoy
On Tue, 13 Mar 2012, Dmitri Pal wrote: On 03/13/2012 07:26 AM, Alexander Bokovoy wrote: Hi, at http://fedorapeople.org/gitweb?p=abbra/public_git/freeipa.git;a=shortlog;h=refs/heads/adwork one can find current state of AD trusts work. This tree introduces 'ipa trust-*' family of

Re: [Freeipa-devel] [PATCH] [WIP] Cross-realm trusts with AD

2012-03-13 Thread Simo Sorce
On Tue, 2012-03-13 at 13:26 +0200, Alexander Bokovoy wrote: Hi, at http://fedorapeople.org/gitweb?p=abbra/public_git/freeipa.git;a=shortlog;h=refs/heads/adwork one can find current state of AD trusts work. This tree introduces 'ipa trust-*' family of commands and

Re: [Freeipa-devel] [PATCH] 0022 Use ipauniqueid for the RDN of sudo commands (rebased)

2012-03-13 Thread Martin Kosek
On Tue, 2012-03-13 at 13:43 +0100, Petr Viktorin wrote: On 03/12/2012 06:10 PM, Martin Kosek wrote: On Mon, 2012-03-12 at 17:12 +0100, Petr Viktorin wrote: On 03/12/2012 04:01 PM, Martin Kosek wrote: On Mon, 2012-03-12 at 14:38 +0100, Petr Viktorin wrote: On 03/12/2012 01:26 PM, Martin

Re: [Freeipa-devel] [PATCH] 0022 Use ipauniqueid for the RDN of sudo commands (rebased)

2012-03-13 Thread Petr Viktorin
On 03/12/2012 04:44 PM, Martin Kosek wrote: On Mon, 2012-03-12 at 16:01 +0100, Martin Kosek wrote: On Mon, 2012-03-12 at 14:38 +0100, Petr Viktorin wrote: On 03/12/2012 01:26 PM, Martin Kosek wrote: On Thu, 2012-03-08 at 16:57 +0100, Petr Viktorin wrote: Since sudo commands are

Re: [Freeipa-devel] [PATCH] 0022 Use ipauniqueid for the RDN of sudo commands (rebased)

2012-03-13 Thread Martin Kosek
On Tue, 2012-03-13 at 18:17 +0100, Petr Viktorin wrote: On 03/12/2012 04:44 PM, Martin Kosek wrote: On Mon, 2012-03-12 at 16:01 +0100, Martin Kosek wrote: On Mon, 2012-03-12 at 14:38 +0100, Petr Viktorin wrote: On 03/12/2012 01:26 PM, Martin Kosek wrote: On Thu, 2012-03-08 at 16:57 +0100,

Re: [Freeipa-devel] [PATCH] 233 Fix ipa-replica-manage TLS connection error

2012-03-13 Thread Rob Crittenden
Rich Megginson wrote: On 03/08/2012 05:33 AM, Martin Kosek wrote: New version of openldap (openldap-2.4.26-6.fc16.x86_64) changed its ABI and broke our TLS connection in ipa-replica-manage. This makes it impossible to connect for example to Active Directory to set up a winsync replication. We

Re: [Freeipa-devel] [PATCH] 107 Content is no more overwritten by error message

2012-03-13 Thread Endi Sukma Dewata
On 3/9/2012 7:16 AM, Petr Vobornik wrote: When an error which caused calling of report_error occur, the content of a facet got replaced by error message. There was no way how to force the facet to recreate its content and the facet became unusable. This patch creates a container for an error

Re: [Freeipa-devel] [PATCH] 924 display both hex and decimal serial numbers

2012-03-13 Thread Rob Crittenden
Jan Cholasta wrote: On 7.3.2012 17:12, Rob Crittenden wrote: Petr Vobornik wrote: On 03/06/2012 09:56 PM, Rob Crittenden wrote: Rob Crittenden wrote: Jan Cholasta wrote: Dne 18.1.2012 00:04, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 16.1.2012 22:02, Rob Crittenden napsal(a): Rob