Re: [Freeipa-devel] [PATCH] 19-21 Use exop instead of kadmin.local

2012-06-11 Thread Alexander Bokovoy
On Fri, 08 Jun 2012, Sumit Bose wrote: On Thu, Jun 07, 2012 at 12:09:32PM +0200, Sumit Bose wrote: now with patches :-) On Thu, Jun 07, 2012 at 12:07:13PM +0200, Sumit Bose wrote: Hi, this patch fixes https://fedorahosted.org/freeipa/ticket/2513 and as a consequence makes

Re: [Freeipa-devel] [PATCH] 1024 add client session support

2012-06-11 Thread Martin Kosek
On Thu, 2012-06-07 at 22:55 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: This adds client session support. The session key is stored in the kernel key ring. Your first request should go to /ipa/session/xml where it should be rejected with a 401. The next

Re: [Freeipa-devel] [PATCH] 274 Password change capability for form-based auth

2012-06-11 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2012-06-11 at 10:36 +0200, Martin Kosek wrote: On Thu, 2012-06-07 at 23:07 -0400, Simo Sorce wrote: On Thu, 2012-06-07 at 22:28 -0400, Rob Crittenden wrote: Martin Kosek wrote: You can use the attached script (changepw.py) to test the PW change interface from

Re: [Freeipa-devel] [PATCH] 0059 Fix update plugin order

2012-06-11 Thread Rob Crittenden
Petr Viktorin wrote: On 06/08/2012 12:31 PM, Petr Viktorin wrote: On 06/08/2012 04:39 AM, Rob Crittenden wrote: Petr Viktorin wrote: While messing with the ipa-ldap-updater, I found the order method was using an algorithm that could give incorrect results. I'm submitting a fix in an extra

Re: [Freeipa-devel] [PATCH] 272-273 Add service membership to host objects

2012-06-11 Thread Rob Crittenden
Martin Kosek wrote: On Wed, 2012-06-06 at 09:11 +0200, Petr Vobornik wrote: On 06/06/2012 08:01 AM, Martin Kosek wrote: On Tue, 2012-06-05 at 17:35 -0400, Rob Crittenden wrote: Martin Kosek wrote: This set of patches 1) Adds a support for uni-directional remote membership to baseldap plugin

[Freeipa-devel] [PATCH] 1025 set fixed primary IPA server in client

2012-06-11 Thread Rob Crittenden
Add --fixed-primary flag to control the order of ipa_server in sssd.conf. When set the discovered (or passed) server will be set first rather than _srv_. The default is to have _srv_ set first. rob From 1c6b016e681502008bf202523e132336f214 Mon Sep 17 00:00:00 2001 From: Rob Crittenden

Re: [Freeipa-devel] [PATCH] 1025 set fixed primary IPA server in client

2012-06-11 Thread Dmitri Pal
On 06/11/2012 03:45 PM, Rob Crittenden wrote: Add --fixed-primary flag to control the order of ipa_server in sssd.conf. When set the discovered (or passed) server will be set first rather than _srv_. The default is to have _srv_ set first. rob

[Freeipa-devel] ipa-client-install patch

2012-06-11 Thread Lance Dillon
This small set of patches adds a --fixed option to ipa-client-install.  This specifies that dns server discovery is basically turned of in /etc/sssd/sssd.conf (by removing _srv_ entry from ipa_server). This has been helpful to me because we are in a shared dns domain with a windows domain, and