Re: [Freeipa-devel] [PATCH] 267 Filter groups by type (normal, posix, external)

2013-04-04 Thread Tomas Babej
On 03/22/2013 03:03 PM, Martin Kosek wrote: On 03/21/2013 06:10 PM, Petr Vobornik wrote: On 03/21/2013 05:10 PM, Martin Kosek wrote: On 03/16/2013 03:32 AM, Endi Sukma Dewata wrote: On 3/12/2013 11:28 AM, Petr Vobornik wrote: Here's a patch for filtering groups by type. Design page:

Re: [Freeipa-devel] [PATCH] 267 Filter groups by type (normal, posix, external)

2013-04-04 Thread Martin Kosek
On 04/04/2013 11:48 AM, Tomas Babej wrote: On 03/22/2013 03:03 PM, Martin Kosek wrote: On 03/21/2013 06:10 PM, Petr Vobornik wrote: On 03/21/2013 05:10 PM, Martin Kosek wrote: On 03/16/2013 03:32 AM, Endi Sukma Dewata wrote: On 3/12/2013 11:28 AM, Petr Vobornik wrote: Here's a patch for

Re: [Freeipa-devel] [PATCH] 0011 Remove CA cert on client uninstall

2013-04-04 Thread Martin Kosek
On 04/03/2013 01:13 PM, Tomas Babej wrote: On Tue 02 Apr 2013 08:14:12 PM CEST, Ana Krivokapic wrote: Hello, The CA cert (/etc/ipa/ca.crt) was not being removed on client uninstall, causing failure on subsequent client installation in some cases. https://fedorahosted.org/freeipa/ticket/3537

Re: [Freeipa-devel] [PATCH] 273 Add ipakrbokasdelegate option to service and host Web UI pages

2013-04-04 Thread Martin Kosek
On 04/02/2013 11:24 AM, Jan Cholasta wrote: Hi, On 29.3.2013 17:23, Petr Vobornik wrote: On 03/29/2013 05:10 PM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/3329 Attaching new rebased version. It seems everything works fine, ACK. Honza Pushed to master. Martin

Re: [Freeipa-devel] [PATCH 0027] Add checks for SELinux in install scripts

2013-04-04 Thread Rob Crittenden
Tomas Babej wrote: On Tue 02 Apr 2013 10:05:06 AM CEST, Tomas Babej wrote: On Mon 01 Apr 2013 10:01:14 PM CEST, Rob Crittenden wrote: Tomas Babej wrote: On Tue 19 Feb 2013 08:37:26 PM CET, Rob Crittenden wrote: Tomas Babej wrote: On 02/04/2013 04:21 PM, Rob Crittenden wrote: Tomas Babej

[Freeipa-devel] [PATCH] 0101 specfile: detect Kerberos DAL driver ABI change from installed krb5-devel package

2013-04-04 Thread Alexander Bokovoy
Find out Kerberos middle version to infer ABI changes in DAL driver. We cannot load DAL driver into KDC with wrong ABI. This is also needed to support ipa-devel repository where krb5 1.11 is available for Fedora 18. Right now krb5 1.11 is in ipa-devel repo for Fedora 18 and FreeIPA git master

Re: [Freeipa-devel] [PATCH] 0101 specfile: detect Kerberos DAL driver ABI change from installed krb5-devel package

2013-04-04 Thread Alexander Bokovoy
On Thu, 04 Apr 2013, Alexander Bokovoy wrote: Find out Kerberos middle version to infer ABI changes in DAL driver. We cannot load DAL driver into KDC with wrong ABI. This is also needed to support ipa-devel repository where krb5 1.11 is available for Fedora 18. Right now krb5 1.11 is in

Re: [Freeipa-devel] [PATCH] 0101 specfile: detect Kerberos DAL driver ABI change from installed krb5-devel package

2013-04-04 Thread Simo Sorce
On Thu, 2013-04-04 at 20:07 +0300, Alexander Bokovoy wrote: On Thu, 04 Apr 2013, Alexander Bokovoy wrote: Find out Kerberos middle version to infer ABI changes in DAL driver. We cannot load DAL driver into KDC with wrong ABI. This is also needed to support ipa-devel repository where krb5

Re: [Freeipa-devel] [PATCH] 267 Filter groups by type (normal, posix, external)

2013-04-04 Thread Rob Crittenden
Martin Kosek wrote: On 04/04/2013 11:48 AM, Tomas Babej wrote: On 03/22/2013 03:03 PM, Martin Kosek wrote: On 03/21/2013 06:10 PM, Petr Vobornik wrote: On 03/21/2013 05:10 PM, Martin Kosek wrote: On 03/16/2013 03:32 AM, Endi Sukma Dewata wrote: On 3/12/2013 11:28 AM, Petr Vobornik wrote:

Re: [Freeipa-devel] [PATCH] 0101 specfile: detect Kerberos DAL driver ABI change from installed krb5-devel package

2013-04-04 Thread Simo Sorce
On Thu, 2013-04-04 at 13:09 -0400, Simo Sorce wrote: On Thu, 2013-04-04 at 20:07 +0300, Alexander Bokovoy wrote: On Thu, 04 Apr 2013, Alexander Bokovoy wrote: Find out Kerberos middle version to infer ABI changes in DAL driver. We cannot load DAL driver into KDC with wrong ABI. This is

Re: [Freeipa-devel] [PATCHES] 0210-0213 Drop selfsign server functionality

2013-04-04 Thread Rob Crittenden
Petr Viktorin wrote: Hello, These patches convert selfsign masters to CA-less on upgrade, and remove all selfsign-related code The files the CA uses are left around for admins to pick up cert management manually. Instructions for that are provided in the design document. They pretty much just

Re: [Freeipa-devel] [PATCH] 122 Enable SASL mapping fallback

2013-04-04 Thread Rob Crittenden
Jan Cholasta wrote: Hi, this patch enables SASL mapping fallback in IPA DS instance, see https://fedorahosted.org/freeipa/ticket/3330. Automated replication recovery and external user mapping is not part of the patch. In order to test this, you need 389-ds-base 1.3.1 packages with patches from