Re: [Freeipa-devel] [PATCH] 1031 run cleanallruv task

2012-07-10 Thread Martin Kosek
On 07/05/2012 08:39 PM, Rob Crittenden wrote: Martin Kosek wrote: On 07/03/2012 04:41 PM, Rob Crittenden wrote: Deleting a replica can leave a replication vector (RUV) on the other servers. This can confuse things if the replica is re-added, and it also causes the server to calculate

Re: [Freeipa-devel] DN patch and documentation

2012-07-10 Thread Petr Viktorin
On 07/07/2012 08:45 PM, John Dennis wrote: The DN work I was doing on master is ready for review and testing. It's been a long haul and I've been working relentlessly to get this work completed. I am on PTO for a week starting today (I know bad timing) but I spent yesterday and my first day of

Re: [Freeipa-devel] [PATCH] 1032 allow multiple --server in client install, don't always set _srv_

2012-07-10 Thread Martin Kosek
On 07/05/2012 09:18 PM, Rob Crittenden wrote: Martin Kosek wrote: On 07/04/2012 12:12 AM, Rob Crittenden wrote: If you pass in --server and --fixed-primary then don't add _srv_ to ipa_server in sssd.conf. This necessitates the desire to be able to provide multiple servers so make

Re: [Freeipa-devel] [PATCH] 165 Display loginas information only after login

2012-07-10 Thread Petr Vobornik
On 07/10/2012 07:40 AM, Endi Sukma Dewata wrote: On 7/4/2012 8:08 AM, Petr Vobornik wrote: On 07/02/2012 05:49 PM, Endi Sukma Dewata wrote: ACK. Some more comments below. Feel free to fix before push or later separately. Implemented most of the issues, look bellow. Update patch attached.

Re: [Freeipa-devel] [PATCH] 168 Password policy measurement units

2012-07-10 Thread Petr Vobornik
On 07/10/2012 07:41 AM, Endi Sukma Dewata wrote: On 7/9/2012 10:21 AM, Petr Vobornik wrote: Note: I think we should improve handling of measurement units in server plugins. Label and measurement unit should be separated and send in metadata. Client - Web UI or CLI would then decide when and

Re: [Freeipa-devel] [PATCH] 169 Web UI: kerberos ticket policy measurement units

2012-07-10 Thread Petr Vobornik
On 07/10/2012 07:41 AM, Endi Sukma Dewata wrote: On 7/9/2012 10:32 AM, Petr Vobornik wrote: Added measurement units for kerberos ticket policy. https://fedorahosted.org/freeipa/ticket/2444 Note: patch depends on pvoborni-0168. ACK. Pushed to master. -- Petr Vobornik

[Freeipa-devel] [PATCH 0024] Add debug message to ldap_cache_addrdatalist()

2012-07-10 Thread Petr Spacek
Hello, this patch adds an debug message to ldap_cache_addrdatalist(). It is very useful for persistent search debugging. Petr^2 Spacek From 29a95bb7480802bfd9f10ccdffca6158eedf4581 Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Thu, 28 Jun 2012 13:52:38 +0200 Subject:

[Freeipa-devel] [PATCH] 0025-0028 Implement SOA serial number increments for external changes

2012-07-10 Thread Petr Spacek
Hello, these patches provides SOA serial auto-increment feature for external changes. Related ticket: https://fedorahosted.org/bind-dyndb-ldap/ticket/67 It is necessary to set psearch AND serial_autoincrement to yes in /etc/named.conf to enable this feature. In replicated environment

[Freeipa-devel] [PATCH] 0089 Fix batch command error reporting

2012-07-10 Thread Petr Viktorin
There are a few problems with Batch plugin error reporting: - It reports the text of all errors, not only PublicError. In the normal (non-batch) RPC interface, we hide non-public errors under a generic internal error message. - Errors are not localized properly

[Freeipa-devel] [PATCH] 285 Add automount map/key update permissions

2012-07-10 Thread Martin Kosek
Add missing permissions that can be used to delegate write access to existing automount maps or keys. Since automount key RDN has been changed in the past from automountkey to description and there can be LDAP entries with both RDNs, structure of relevant ACI need to be changed to different

[Freeipa-devel] [PATCH] Improve performance of get_group_sids()

2012-07-10 Thread Sumit Bose
Hi, the following two patches are the first step to fix https://fedorahosted.org/freeipa/ticket/2881. Unit tests with time measurements are added and the performance of the get_group_sids() function is improved by an order of magnitude. The caching of the LDAP results is still missing. I will