Re: [Freeipa-devel] [PATCH] 89 ipa-adtrust-install: allow to reset te NetBIOS domain name

2012-11-02 Thread Sumit Bose
On Fri, Nov 02, 2012 at 02:54:32PM +0100, Martin Kosek wrote: > On 11/02/2012 12:54 PM, Sumit Bose wrote: > > On Wed, Oct 31, 2012 at 04:03:14PM +0100, Martin Kosek wrote: > >> On 10/30/2012 12:16 PM, Sumit Bose wrote: > >>> Hi, > >>> > >>> this patch allows ipa-adtrust-install to reset the NetBIOS

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Simo Sorce
On Fri, 2012-11-02 at 19:02 +0100, Jakub Hrozek wrote: > On Fri, Nov 02, 2012 at 11:05:54AM -0400, Dmitri Pal wrote: > > > I have to be honest, I do like the change patchwork introduced, it makes > > > it a lot easier to me to review patches inline and allows me to easily > > > download them in a s

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Jakub Hrozek
On Fri, Nov 02, 2012 at 11:05:54AM -0400, Dmitri Pal wrote: > > I have to be honest, I do like the change patchwork introduced, it makes > > it a lot easier to me to review patches inline and allows me to easily > > download them in a separate machine with a simple wget. > > May be but there are m

Re: [Freeipa-devel] [PATCH 0086] Respect global forwarders from named.conf if they are not overridden by LDAP configuration

2012-11-02 Thread Petr Spacek
On 11/02/2012 06:52 PM, Petr Spacek wrote: On 11/02/2012 06:45 PM, Petr Spacek wrote: Hello, Respect global forwarders from named.conf if they are not overridden by LDAP configuration. Original configuration from named.conf is saved on load. Original configuration will be restored if configura

Re: [Freeipa-devel] [PATCH 0086] Respect global forwarders from named.conf if they are not overridden by LDAP configuration

2012-11-02 Thread Petr Spacek
On 11/02/2012 06:45 PM, Petr Spacek wrote: Hello, Respect global forwarders from named.conf if they are not overridden by LDAP configuration. Original configuration from named.conf is saved on load. Original configuration will be restored if configuration in LDAP is not present or is invalid.

[Freeipa-devel] [PATCH 0086] Respect global forwarders from named.conf if they are not overridden by LDAP configuration

2012-11-02 Thread Petr Spacek
Hello, Respect global forwarders from named.conf if they are not overridden by LDAP configuration. Original configuration from named.conf is saved on load. Original configuration will be restored if configuration in LDAP is not present or is invalid. Another patch for cache flushing will f

Re: [Freeipa-devel] [PATCH] 0089 Clarify trust-add help regarding multiple runs against the same domain

2012-11-02 Thread Alexander Bokovoy
On Fri, 02 Nov 2012, Martin Kosek wrote: On 11/02/2012 01:19 PM, Alexander Bokovoy wrote: On Wed, 17 Oct 2012, Martin Kosek wrote: On 10/17/2012 12:52 PM, Sumit Bose wrote: On Wed, Oct 10, 2012 at 06:05:02PM +0300, Alexander Bokovoy wrote: Hi, this patch originated from off-list discussion r

Re: [Freeipa-devel] [PATCH] 328 Process relative nameserver DNS record correctly

2012-11-02 Thread Martin Kosek
On 11/02/2012 04:35 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> On 10/25/2012 04:01 PM, Martin Kosek wrote: >>> Nameserver hostname passed to dnszone_add command was always treated >>> as FQDN even though it was a relative DNS name to the new zone. All >>> relative names were being rejected

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Simo Sorce
On Fri, 2012-11-02 at 16:35 +0100, Jan Cholasta wrote: > On 2.11.2012 15:56, Simo Sorce wrote: > > On Fri, 2012-11-02 at 09:16 -0400, Dmitri Pal wrote: > >> On 11/02/2012 07:22 AM, Petr Spacek wrote: > >>> On 11/02/2012 11:10 AM, Petr Viktorin wrote: > On 11/02/2012 10:46 AM, Martin Kosek wrot

Re: [Freeipa-devel] RFC: freeipa-asterisk plugin

2012-11-02 Thread Petr Vobornik
On 11/02/2012 03:35 PM, Dmitri Pal wrote: On 11/02/2012 10:15 AM, Petr Vobornik wrote: On 11/02/2012 02:36 PM, Dmitri Pal wrote: On 11/02/2012 12:25 AM, Loris Santamaria wrote: El jue, 01-11-2012 a las 12:47 -0400, Dmitri Pal escribió: On 11/01/2012 11:32 AM, Simo Sorce wrote: On Thu, 2012-1

Re: [Freeipa-devel] [PATCH] 0089 Clarify trust-add help regarding multiple runs against the same domain

2012-11-02 Thread Martin Kosek
On 11/02/2012 01:19 PM, Alexander Bokovoy wrote: > On Wed, 17 Oct 2012, Martin Kosek wrote: >> On 10/17/2012 12:52 PM, Sumit Bose wrote: >>> On Wed, Oct 10, 2012 at 06:05:02PM +0300, Alexander Bokovoy wrote: Hi, this patch originated from off-list discussion regarding multiple runs >

Re: [Freeipa-devel] [PATCH] 328 Process relative nameserver DNS record correctly

2012-11-02 Thread Rob Crittenden
Martin Kosek wrote: On 10/25/2012 04:01 PM, Martin Kosek wrote: Nameserver hostname passed to dnszone_add command was always treated as FQDN even though it was a relative DNS name to the new zone. All relative names were being rejected as unresolvable. Modify --name-server option processing in

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Jan Cholasta
On 2.11.2012 15:56, Simo Sorce wrote: On Fri, 2012-11-02 at 09:16 -0400, Dmitri Pal wrote: On 11/02/2012 07:22 AM, Petr Spacek wrote: On 11/02/2012 11:10 AM, Petr Viktorin wrote: On 11/02/2012 10:46 AM, Martin Kosek wrote: On 11/01/2012 07:28 PM, Simo Sorce wrote: On Thu, 2012-11-01 at 10:59

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Simo Sorce
On Fri, 2012-11-02 at 11:16 -0400, John Dennis wrote: > On 11/02/2012 10:56 AM, Simo Sorce wrote: > > I do not like the trac approach because it is not automatic, so it is > > completely inconsistent, and also because trac is extremely slow. > > Factoring out the whole patchwork issue I do have to

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread John Dennis
On 11/02/2012 10:56 AM, Simo Sorce wrote: I do not like the trac approach because it is not automatic, so it is completely inconsistent, and also because trac is extremely slow. Factoring out the whole patchwork issue I do have to agree with Simo that using trac is painful because it's so slow

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Dmitri Pal
On 11/02/2012 10:56 AM, Simo Sorce wrote: > On Fri, 2012-11-02 at 09:16 -0400, Dmitri Pal wrote: >> On 11/02/2012 07:22 AM, Petr Spacek wrote: >>> On 11/02/2012 11:10 AM, Petr Viktorin wrote: On 11/02/2012 10:46 AM, Martin Kosek wrote: > On 11/01/2012 07:28 PM, Simo Sorce wrote: >> On

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Simo Sorce
On Fri, 2012-11-02 at 09:16 -0400, Dmitri Pal wrote: > On 11/02/2012 07:22 AM, Petr Spacek wrote: > > On 11/02/2012 11:10 AM, Petr Viktorin wrote: > >> On 11/02/2012 10:46 AM, Martin Kosek wrote: > >>> On 11/01/2012 07:28 PM, Simo Sorce wrote: > On Thu, 2012-11-01 at 10:59 -0400, Rob Crittende

Re: [Freeipa-devel] [PATCH] Allow TTL to be configured during ipa-client-install

2012-11-02 Thread Dmitri Pal
On 11/02/2012 10:04 AM, James Hogarth wrote: > > > , > > > > > Was there any specific ticket on the IPA side to connect this > patch too? > > > Don't think so... I'll give a quick check to see if this exists > there yet > > > > > Apparently I had a mental blank

Re: [Freeipa-devel] RFC: freeipa-asterisk plugin

2012-11-02 Thread Dmitri Pal
On 11/02/2012 10:15 AM, Petr Vobornik wrote: > On 11/02/2012 02:36 PM, Dmitri Pal wrote: >> On 11/02/2012 12:25 AM, Loris Santamaria wrote: >>> El jue, 01-11-2012 a las 12:47 -0400, Dmitri Pal escribió: On 11/01/2012 11:32 AM, Simo Sorce wrote: > On Thu, 2012-11-01 at 09:30 -0430, Loris Sa

Re: [Freeipa-devel] [PATCH] 1070 change user_u context in list

2012-11-02 Thread Rob Crittenden
Simo Sorce wrote: On Thu, 2012-11-01 at 10:34 -0400, Rob Crittenden wrote: The default user_u context in the selnux user map list didn't match what is actually the selinux default context. This could be confusing, so change it to match what systems will have. ACK. Simo. pushed to master an

Re: [Freeipa-devel] [PATCH] 88 Reword description of the --passsync option of ipa-replica-manage

2012-11-02 Thread Rob Crittenden
Jan Cholasta wrote: On 1.11.2012 19:25, Rob Crittenden wrote: Rob Crittenden wrote: Jan Cholasta wrote: Hi, this patch fixes . There are two typos, PasSync with only 2 s's. I think there should be a separate section on PassSync explaining what

Re: [Freeipa-devel] RFC: freeipa-asterisk plugin

2012-11-02 Thread Petr Vobornik
On 11/02/2012 02:36 PM, Dmitri Pal wrote: On 11/02/2012 12:25 AM, Loris Santamaria wrote: El jue, 01-11-2012 a las 12:47 -0400, Dmitri Pal escribió: On 11/01/2012 11:32 AM, Simo Sorce wrote: On Thu, 2012-11-01 at 09:30 -0430, Loris Santamaria wrote: Hi all, we plan to write a freeIPA configu

Re: [Freeipa-devel] [PATCH] Allow TTL to be configured during ipa-client-install

2012-11-02 Thread James Hogarth
, > > >> >> Was there any specific ticket on the IPA side to connect this patch too? >> > > Don't think so... I'll give a quick check to see if this exists there yet > > >> >> Apparently I had a mental blank about submitting this two months ago... The relevant ticket is https://fedorahosted.org/

Re: [Freeipa-devel] RFC: freeipa-asterisk plugin

2012-11-02 Thread Dmitri Pal
On 11/02/2012 09:53 AM, Alexander Bokovoy wrote: > On Fri, 02 Nov 2012, Dmitri Pal wrote: > How one should integrate optional components with the Web UI? Yeah this is a gray area to me to. I would love to see a clear doc on this too. Petr, is this doable? >>> >>> We hav

Re: [Freeipa-devel] [PATCH] 89 ipa-adtrust-install: allow to reset te NetBIOS domain name

2012-11-02 Thread Martin Kosek
On 11/02/2012 12:54 PM, Sumit Bose wrote: > On Wed, Oct 31, 2012 at 04:03:14PM +0100, Martin Kosek wrote: >> On 10/30/2012 12:16 PM, Sumit Bose wrote: >>> Hi, >>> >>> this patch allows ipa-adtrust-install to reset the NetBIOS domain name >>> and fixes https://fedorahosted.org/freeipa/ticket/3192 .

Re: [Freeipa-devel] RFC: freeipa-asterisk plugin

2012-11-02 Thread Alexander Bokovoy
On Fri, 02 Nov 2012, Dmitri Pal wrote: How one should integrate optional components with the Web UI? Yeah this is a gray area to me to. I would love to see a clear doc on this too. Petr, is this doable? We have this guide, which has a UI component: http://abbra.fedorapeople.org/guide.html r

Re: [Freeipa-devel] [PATCH] Allow TTL to be configured during ipa-client-install

2012-11-02 Thread James Hogarth
Hi Dimitri, > > Was there any specific ticket on the IPA side to connect this patch too? > Don't think so... I'll give a quick check to see if this exists there yet > If not can you please open such ticket in the freeipa trac instance? > https://fedorahosted.org/freeipa/ > It would help us to

Re: [Freeipa-devel] RFC: freeipa-asterisk plugin

2012-11-02 Thread Dmitri Pal
On 11/02/2012 09:40 AM, Rob Crittenden wrote: > Dmitri Pal wrote: >> On 11/02/2012 12:25 AM, Loris Santamaria wrote: >>> El jue, 01-11-2012 a las 12:47 -0400, Dmitri Pal escribió: On 11/01/2012 11:32 AM, Simo Sorce wrote: > On Thu, 2012-11-01 at 09:30 -0430, Loris Santamaria wrote: >>

Re: [Freeipa-devel] RFC: freeipa-asterisk plugin

2012-11-02 Thread Rob Crittenden
Dmitri Pal wrote: On 11/02/2012 12:25 AM, Loris Santamaria wrote: El jue, 01-11-2012 a las 12:47 -0400, Dmitri Pal escribió: On 11/01/2012 11:32 AM, Simo Sorce wrote: On Thu, 2012-11-01 at 09:30 -0430, Loris Santamaria wrote: Hi all, we plan to write a freeIPA configuration plugin for Asteri

Re: [Freeipa-devel] RFC: freeipa-asterisk plugin

2012-11-02 Thread Dmitri Pal
On 11/02/2012 12:25 AM, Loris Santamaria wrote: > El jue, 01-11-2012 a las 12:47 -0400, Dmitri Pal escribió: >> On 11/01/2012 11:32 AM, Simo Sorce wrote: >>> On Thu, 2012-11-01 at 09:30 -0430, Loris Santamaria wrote: Hi all, we plan to write a freeIPA configuration plugin for Asteris

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Dmitri Pal
On 11/02/2012 07:22 AM, Petr Spacek wrote: > On 11/02/2012 11:10 AM, Petr Viktorin wrote: >> On 11/02/2012 10:46 AM, Martin Kosek wrote: >>> On 11/01/2012 07:28 PM, Simo Sorce wrote: On Thu, 2012-11-01 at 10:59 -0400, Rob Crittenden wrote: > Rob Crittenden wrote: >> Simo Sorce wrote: >

[Freeipa-devel] [PATCH] 225 Web UI: disable global forwarding per zone

2012-11-02 Thread Petr Vobornik
Web UI part of 'disable global forwarding per zone' effort. Option "Forwarding disabled" was added to 'DNS global config' and 'DNS zone' forwarding policy. It corresponds to 'none' value of idnsforwardpolicy. https://fedorahosted.org/freeipa/ticket/3209 -- Petr Vobornik From 3590df553f396e2ff

Re: [Freeipa-devel] [PATCH] Allow TTL to be configured during ipa-client-install

2012-11-02 Thread Dmitri Pal
On 11/02/2012 06:16 AM, James Hogarth wrote: > Hi, > > Now that the mirror patch has been committed to SSSD 1.10 I thought it > sensible to submit this patch to FreeIPA to allow ipa-client-install > to configure this SSSD action... > > I was holding back for a full TTL rework but that's taking long

Re: [Freeipa-devel] [PATCH] 0089 Clarify trust-add help regarding multiple runs against the same domain

2012-11-02 Thread Alexander Bokovoy
On Wed, 17 Oct 2012, Martin Kosek wrote: On 10/17/2012 12:52 PM, Sumit Bose wrote: On Wed, Oct 10, 2012 at 06:05:02PM +0300, Alexander Bokovoy wrote: Hi, this patch originated from off-list discussion regarding multiple runs of ipa trust-add against the same domain. Since trust-add re-establi

[Freeipa-devel] [TIP] Making sense of parallel Git branches

2012-11-02 Thread Petr Viktorin
Hi, We had some discussion about finding changes pushed to one Git branch but not another. This command might be also useful to other maintainers: git log --oneline --cherry-pick --left-right origin/master...origin/ipa-3-0 This will show patches that are only in one branch or the other. It als

Re: [Freeipa-devel] [PATCH] 89 ipa-adtrust-install: allow to reset te NetBIOS domain name

2012-11-02 Thread Sumit Bose
On Wed, Oct 31, 2012 at 04:03:14PM +0100, Martin Kosek wrote: > On 10/30/2012 12:16 PM, Sumit Bose wrote: > > Hi, > > > > this patch allows ipa-adtrust-install to reset the NetBIOS domain name > > and fixes https://fedorahosted.org/freeipa/ticket/3192 . > > > > bye, > > Sumit > > > > > Hello S

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Petr Spacek
On 11/02/2012 11:10 AM, Petr Viktorin wrote: On 11/02/2012 10:46 AM, Martin Kosek wrote: On 11/01/2012 07:28 PM, Simo Sorce wrote: On Thu, 2012-11-01 at 10:59 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Simo Sorce wrote: From: Simo Sorce We check (possibly different) data from LDAP

Re: [Freeipa-devel] [PATCH] 88 Reword description of the --passsync option of ipa-replica-manage

2012-11-02 Thread Jan Cholasta
On 1.11.2012 19:25, Rob Crittenden wrote: Rob Crittenden wrote: Jan Cholasta wrote: Hi, this patch fixes . There are two typos, PasSync with only 2 s's. I think there should be a separate section on PassSync explaining what the service is and pa

[Freeipa-devel] [PATCH] Allow TTL to be configured during ipa-client-install

2012-11-02 Thread James Hogarth
Hi, Now that the mirror patch has been committed to SSSD 1.10 I thought it sensible to submit this patch to FreeIPA to allow ipa-client-install to configure this SSSD action... I was holding back for a full TTL rework but that's taking longer than I expected and would rather not miss this part no

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Petr Viktorin
On 11/02/2012 10:46 AM, Martin Kosek wrote: On 11/01/2012 07:28 PM, Simo Sorce wrote: On Thu, 2012-11-01 at 10:59 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Simo Sorce wrote: From: Simo Sorce We check (possibly different) data from LDAP only at (re)start. This way we always shutdown

Re: [Freeipa-devel] [PATCH] 330 Disable global forwarding per-zone

2012-11-02 Thread Martin Kosek
On 11/02/2012 10:51 AM, Jan Cholasta wrote: > Hi, > > On 2.11.2012 09:12, Martin Kosek wrote: >> On 11/01/2012 09:01 PM, Rob Crittenden wrote: >>> Martin Kosek wrote: bind-dyndb-ldap allows disabling global forwarder per-zone. This may be useful in a scenario when we do not want requests

Re: [Freeipa-devel] [PATCH] 330 Disable global forwarding per-zone

2012-11-02 Thread Jan Cholasta
Hi, On 2.11.2012 09:12, Martin Kosek wrote: On 11/01/2012 09:01 PM, Rob Crittenden wrote: Martin Kosek wrote: bind-dyndb-ldap allows disabling global forwarder per-zone. This may be useful in a scenario when we do not want requests to delegated sub-zones (like sub.example.com. in zone example.

Re: [Freeipa-devel] [RANT] Patchwork process

2012-11-02 Thread Martin Kosek
On 11/01/2012 07:28 PM, Simo Sorce wrote: > On Thu, 2012-11-01 at 10:59 -0400, Rob Crittenden wrote: >> Rob Crittenden wrote: >>> Simo Sorce wrote: From: Simo Sorce We check (possibly different) data from LDAP only at (re)start. This way we always shutdown exactly the services

Re: [Freeipa-devel] [PATCH] 330 Disable global forwarding per-zone

2012-11-02 Thread Martin Kosek
On 11/01/2012 09:01 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> bind-dyndb-ldap allows disabling global forwarder per-zone. This may >> be useful in a scenario when we do not want requests to delegated >> sub-zones (like sub.example.com. in zone example.com.) to be routed >> through global f