[Freeipa-devel] [PATCH] 200 Fix issue which broke setup of Web UI unit tests

2012-08-27 Thread Petr Vobornik
Fix issue which broke setup of Web UI unit tests Web UI itself wasn't negatively affected. Issue introduced in be144da672e0634f7aaeff69d662cbc4d11aff0f (#2897). https://fedorahosted.org/freeipa/ticket/2897 -- Petr Vobornik From c2ee98f3923a1f916d078e466658cf13922514c6 Mon Sep 17 00:00:00 2001

Re: [Freeipa-devel] [PATCH] 0008 Fixes different behaviour of permission-mod and show.

2012-08-27 Thread Tomas Babej
On 08/23/2012 02:46 PM, Rob Crittenden wrote: Tomas Babej wrote: On 08/22/2012 05:15 PM, Rob Crittenden wrote: Tomas Babej wrote: Hi, Both commands now produce the same output regarding the attributelevelrights. https://fedorahosted.org/freeipa/ticket/2875 I think some unit tests would be

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-27 Thread Dmitri Pal
On 08/17/2012 12:06 PM, Rob Crittenden wrote: Ade Lee wrote: On Fri, 2012-08-17 at 09:34 -0400, Ade Lee wrote: On Thu, 2012-08-16 at 18:45 +0200, Martin Kosek wrote: On 08/16/2012 01:28 PM, Ade Lee wrote: Patch attached this time. I should know better than to do this in the middle of the

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Dmitri Pal
On 08/17/2012 10:00 AM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking about possible solutions for this problem. In a nutshell, we do not properly check

Re: [Freeipa-devel] [PATCH 0042] Flush zones and RRs cache when handling persistent search reconnection

2012-08-27 Thread Dmitri Pal
On 08/15/2012 05:18 AM, Simo Sorce wrote: - Original Message - On 08/14/2012 08:25 PM, Simo Sorce wrote: See man ldap_result, the entries return with type LDAP_RES_SEARCH_ENTRY, the last message is instead LDAP_RES_SEARCH_RESULT which tells you the searc is complete. This last

Re: [Freeipa-devel] Freeipa wiki editing

2012-08-27 Thread Dmitri Pal
On 07/26/2012 02:01 AM, Javier Ramirez wrote: Hi, As per the instructions found at http://freeipa.com/page/Contribute , I send this email to request for a freeipa wiki account . I have some amends to make to http://freeipa.com/page/ConfiguringAixClients . Javier, sorry for the delay. Was

Re: [Freeipa-devel] [PATCH] Set TTL during ipa-client-install for DNS records

2012-08-27 Thread Dmitri Pal
On 08/14/2012 10:38 AM, James Hogarth wrote: Hi, Please see attached patch to allow the TTL to be specified when an IPA client is configured. The default is to use the 1200 that is currently in place. Regardless of is it is set or not as an argument ipa_dyndns_ttl is set in sssd.conf so

Re: [Freeipa-devel] [PATCH] 194 Handle case when trusted domain user access the Web UI

2012-08-27 Thread Dmitri Pal
On 08/10/2012 07:11 AM, Petr Vobornik wrote: WebUI catches the fact that the user can't access LDAP server with a current ticket. It shows form-based auth login dialog. Previoustly an ugly error was returned on an almost empty page, and user had no recourse.

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Dmitri Pal
On 08/17/2012 10:00 AM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking about possible solutions for this problem. In a nutshell, we do not properly check

Re: [Freeipa-devel] [PATCH] Patch to allow IPA to work with dogtag 10 on f18

2012-08-27 Thread Petr Viktorin
On 08/27/2012 02:39 PM, Dmitri Pal wrote: On 08/17/2012 12:06 PM, Rob Crittenden wrote: Ade Lee wrote: On Fri, 2012-08-17 at 09:34 -0400, Ade Lee wrote: On Thu, 2012-08-16 at 18:45 +0200, Martin Kosek wrote: On 08/16/2012 01:28 PM, Ade Lee wrote: Patch attached this time. I should know

Re: [Freeipa-devel] [PATCH] 194 Handle case when trusted domain user access the Web UI

2012-08-27 Thread Petr Vobornik
On 08/14/2012 03:21 AM, Endi Sukma Dewata wrote: On 8/10/2012 6:11 AM, Petr Vobornik wrote: WebUI catches the fact that the user can't access LDAP server with a current ticket. It shows form-based auth login dialog. Previoustly an ugly error was returned on an almost empty page, and user had no

Re: [Freeipa-devel] [PATCH] Set TTL during ipa-client-install for DNS records

2012-08-27 Thread Rob Crittenden
Dmitri Pal wrote: On 08/14/2012 10:38 AM, James Hogarth wrote: Hi, Please see attached patch to allow the TTL to be specified when an IPA client is configured. The default is to use the 1200 that is currently in place. Regardless of is it is set or not as an argument ipa_dyndns_ttl is set in

Re: [Freeipa-devel] [PATCH] 0006 Removes sssd.conf after uninstall.

2012-08-27 Thread Jakub Hrozek
On Mon, Aug 27, 2012 at 02:57:44PM +0200, Martin Kosek wrote: I think that the right behavior of SSSD conf uninstall should be the following: * sssd.conf existed before IPA install + non-IPA domains in sssd.conf found: - move backed conf up sssd.conf.bkp (and inform the user) - use

Re: [Freeipa-devel] [PATCH 80] Ticket #2850 - Ipactl exception not handled well

2012-08-27 Thread Martin Kosek
On 08/22/2012 04:45 PM, Petr Viktorin wrote: From fda504233ee46a494b7ed6b85593e7e586739425 Mon Sep 17 00:00:00 2001 From: John Dennisjden...@redhat.com Date: Mon, 20 Aug 2012 16:47:52 -0400 Subject: [PATCH 80] Ticket #2850 - Ipactl exception not handled well Content-Type: text/plain;

Re: [Freeipa-devel] [PATCH] 0006 Removes sssd.conf after uninstall.

2012-08-27 Thread Martin Kosek
On 08/27/2012 03:37 PM, Jakub Hrozek wrote: On Mon, Aug 27, 2012 at 02:57:44PM +0200, Martin Kosek wrote: I think that the right behavior of SSSD conf uninstall should be the following: * sssd.conf existed before IPA install + non-IPA domains in sssd.conf found: - move backed conf up

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 06:41 AM, Dmitri Pal wrote: On 08/17/2012 10:00 AM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking about possible solutions for this problem. In a

[Freeipa-devel] [PATCH] 202 Password policy paging with proper sorting

2012-08-27 Thread Petr Vobornik
This patch adds option to disable sorting when paging. It allowed to enable paging in password policy with order of items untouched (they are sorted on server side by priority). Also fixing issue when paging is disabled and command summary = null. It displayed 'null' in facet footer.

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 09:25 AM, Rich Megginson wrote: On 08/27/2012 06:41 AM, Dmitri Pal wrote: On 08/17/2012 10:00 AM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Martin Kosek
On 08/17/2012 04:00 PM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking about possible solutions for this problem. In a nutshell, we do not properly check

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 10:24 AM, Martin Kosek wrote: On 08/17/2012 04:00 PM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking about possible solutions for this problem. In a

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread John Dennis
Just out of curiosity, I saw something this weekend while testing and I'm wondering if it's expected behavior or if referential integrity would address it. I was able to add a non-existent user to a group. Shouldn't that have been an error? Do we check for that in the ldap pre callback? Do we

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rob Crittenden
Rich Megginson wrote: On 08/27/2012 06:41 AM, Dmitri Pal wrote: On 08/17/2012 10:00 AM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866 And I am thinking about possible solutions for

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 11:12 AM, Rob Crittenden wrote: Rich Megginson wrote: On 08/27/2012 06:41 AM, Dmitri Pal wrote: On 08/17/2012 10:00 AM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Martin Kosek
On Mon, 2012-08-27 at 10:29 -0600, Rich Megginson wrote: On 08/27/2012 10:24 AM, Martin Kosek wrote: On 08/17/2012 04:00 PM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: https://fedorahosted.org/freeipa/ticket/2866

Re: [Freeipa-devel] [PATCH] 295 Fix managedBy label for DNS zone

2012-08-27 Thread Rob Crittenden
Martin Kosek wrote: Even though managedBy output parameter was only used for failed host managedBy memberships, it was defined in global baseldap.py classes. Incorrect label was then being displayed also for DNS zone per-zone permission attribute with the same name. Move managedBy output

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rob Crittenden
Rich Megginson wrote: On 08/27/2012 10:39 AM, John Dennis wrote: Just out of curiosity, I saw something this weekend while testing and I'm wondering if it's expected behavior or if referential integrity would address it. I was able to add a non-existent user to a group. Shouldn't that have

Re: [Freeipa-devel] Ticket #2866 - referential integrity in IPA

2012-08-27 Thread Rich Megginson
On 08/27/2012 02:27 PM, Martin Kosek wrote: On Mon, 2012-08-27 at 10:29 -0600, Rich Megginson wrote: On 08/27/2012 10:24 AM, Martin Kosek wrote: On 08/17/2012 04:00 PM, Rich Megginson wrote: On 08/17/2012 07:44 AM, Martin Kosek wrote: Hi guys, I am now investigating ticket #2866: