Re: [Freeipa-devel] DESIGN: Recover DNA Ranges

2013-02-25 Thread Petr Viktorin
On 02/22/2013 09:19 PM, Rob Crittenden wrote: Design to allow one to recover DNA ranges when deleting a replica or just for normal range management. http://freeipa.org/page/V3/Recover_DNA_Ranges Supporting ticket https://fedorahosted.org/freeipa/ticket/3321 rob I wonder if it would be

Re: [Freeipa-devel] DESIGN: Recover DNA Ranges

2013-02-25 Thread Martin Kosek
On 02/25/2013 01:44 PM, Petr Viktorin wrote: On 02/22/2013 09:19 PM, Rob Crittenden wrote: Design to allow one to recover DNA ranges when deleting a replica or just for normal range management. http://freeipa.org/page/V3/Recover_DNA_Ranges Supporting ticket

Re: [Freeipa-devel] [PATCHES 0024-0025] Improvements to idrange.py

2013-02-25 Thread Tomas Babej
On Fri 22 Feb 2013 04:34:55 PM CET, Martin Kosek wrote: On 02/22/2013 03:01 PM, Tomas Babej wrote: On 02/21/2013 02:22 PM, Martin Kosek wrote: On 02/20/2013 03:19 PM, Tomas Babej wrote: On Wed 20 Feb 2013 02:24:03 PM CET, Alexander Bokovoy wrote: On Wed, 20 Feb 2013, Tomas Babej wrote: On

Re: [Freeipa-devel] DESIGN: Recover DNA Ranges

2013-02-25 Thread Rob Crittenden
Martin Kosek wrote: On 02/25/2013 01:44 PM, Petr Viktorin wrote: On 02/22/2013 09:19 PM, Rob Crittenden wrote: Design to allow one to recover DNA ranges when deleting a replica or just for normal range management. http://freeipa.org/page/V3/Recover_DNA_Ranges Supporting ticket

Re: [Freeipa-devel] DESIGN: Recover DNA Ranges

2013-02-25 Thread Martin Kosek
On 02/25/2013 03:09 PM, Rob Crittenden wrote: Martin Kosek wrote: ... 4) What does NOTE: We will need to be clear that this range has nothing to do with Trust ranges. actually mean? AFAIU, IPA should have all local ranges covered with a local idrange range(s). IPA ranges is completely

[Freeipa-devel] [PATCH 0116] Fix crash caused by invalid wildcard in update policy string

2013-02-25 Thread Petr Spacek
Hello, Fix crash caused by invalid wildcard in update policy string. https://fedorahosted.org/bind-dyndb-ldap/ticket/108 Question: What we should do if update policy string contains an error? Should we disable all updates? Or let the old policy in place? I vote for disallowing all

Re: [Freeipa-devel] [PATCH] 0005 Add list of domains associated to our realm to cn=etc

2013-02-25 Thread Jan Cholasta
Hi, On 12.2.2013 17:27, Ana Krivokapic wrote: Add new LDAP container to store the list of domains associated with IPA realm. Add two new ipa commands (ipa realmdomains-show and ipa realmdomains-mod) to allow manipulation of the list of realm domains. Unit test file covering these new commands

Re: [Freeipa-devel] DESIGN: Recover DNA Ranges

2013-02-25 Thread Rich Megginson
On 02/25/2013 06:09 AM, Martin Kosek wrote: On 02/25/2013 01:44 PM, Petr Viktorin wrote: On 02/22/2013 09:19 PM, Rob Crittenden wrote: Design to allow one to recover DNA ranges when deleting a replica or just for normal range management. http://freeipa.org/page/V3/Recover_DNA_Ranges

Re: [Freeipa-devel] [PATCH] 0005 Add list of domains associated to our realm to cn=etc

2013-02-25 Thread Ana Krivokapic
On 02/25/2013 04:10 PM, Jan Cholasta wrote: Hi, On 12.2.2013 17:27, Ana Krivokapic wrote: Add new LDAP container to store the list of domains associated with IPA realm. Add two new ipa commands (ipa realmdomains-show and ipa realmdomains-mod) to allow manipulation of the list of realm

Re: [Freeipa-devel] [PATCH] 0005 Add list of domains associated to our realm to cn=etc

2013-02-25 Thread Jan Cholasta
On 25.2.2013 16:29, Ana Krivokapic wrote: On 02/25/2013 04:10 PM, Jan Cholasta wrote: Hi, On 12.2.2013 17:27, Ana Krivokapic wrote: Add new LDAP container to store the list of domains associated with IPA realm. Add two new ipa commands (ipa realmdomains-show and ipa realmdomains-mod) to allow

Re: [Freeipa-devel] [PATCHES] 94-99 Read and use per-service PAC type

2013-02-25 Thread Martin Kosek
On 02/21/2013 04:24 PM, Sumit Bose wrote: Hi, this series of patches fix https://fedorahosted.org/freeipa/ticket/2960 The related design page is http://freeipa.org/page/V3/Read_and_use_per_service_pac_type . It was agreed while discussing the design page that the currently hardcoded

Re: [Freeipa-devel] DESIGN: Recover DNA Ranges

2013-02-25 Thread Rob Crittenden
Rich Megginson wrote: On 02/25/2013 06:09 AM, Martin Kosek wrote: On 02/25/2013 01:44 PM, Petr Viktorin wrote: On 02/22/2013 09:19 PM, Rob Crittenden wrote: Design to allow one to recover DNA ranges when deleting a replica or just for normal range management.

Re: [Freeipa-devel] DESIGN: Recover DNA Ranges

2013-02-25 Thread Rich Megginson
On 02/25/2013 09:23 AM, Rob Crittenden wrote: Rich Megginson wrote: On 02/25/2013 06:09 AM, Martin Kosek wrote: On 02/25/2013 01:44 PM, Petr Viktorin wrote: On 02/22/2013 09:19 PM, Rob Crittenden wrote: Design to allow one to recover DNA ranges when deleting a replica or just for normal

Re: [Freeipa-devel] [PATCHES] 146-164 LDAP code refactoring (Part 4)

2013-02-25 Thread Jan Cholasta
On 20.2.2013 13:03, Petr Viktorin wrote: On 02/19/2013 03:10 PM, Jan Cholasta wrote: On 1.2.2013 15:38, Petr Viktorin wrote: Alright, I renamed get_single to single_value(). I also rebased to current master. Patch 152: +def single_value(self, name, default=_missing): +values =

[Freeipa-devel] What about desktop policies?

2013-02-25 Thread Loris Santamaria
Hi all, some customers of ours are interested in managing desktop policies for their linux workstations, really nothing fancy, corporate background and proxy settings are the most common requests. In the past I created Gnome desktop profiles using Sabayon, distributed them using puppet and

Re: [Freeipa-devel] [PATCHES] 137-144 LDAP code refactoring (Part 3)

2013-02-25 Thread Jan Cholasta
On 19.2.2013 16:56, Petr Viktorin wrote: On 02/19/2013 02:17 PM, Jan Cholasta wrote: On 29.1.2013 10:21, Jan Cholasta wrote: A patch from this patchset (part 3) causes some of the dns plugin tests to fail (idnsallowdynupdate is missing in dnszone_add output). Honza Patch 143: +