Re: [Freeipa-devel] [PATCH 0016] Add RADIUS proxy support to ipalib CLI

2013-09-24 Thread Nathan Kinder
On 09/20/2013 09:38 AM, Nathaniel McCallum wrote: On Thu, 2013-09-12 at 16:48 -0400, Nathaniel McCallum wrote: On Thu, 2013-09-05 at 00:06 -0400, Nathaniel McCallum wrote: patch attached Update for ./makeapi attached. Version 3. This should fix all the current review issues, including the use

Re: [Freeipa-devel] [DOC] 0002 Chapter 3 Installing clients

2013-09-24 Thread Petr Vobornik
On 08/26/2013 05:25 PM, Martin Basti wrote: Hello, this patch fix some setup outputs, add tips and order of command in examples -- Martin Basti Thanks for the patch. Issues: 1. trailing white space errors 2. Two hashes @@ -436,7 +456,7 @@ RPCSVCGSSDARGS="-vvv"

Re: [Freeipa-devel] [PATCH 111] ipa-client-install: Publish CA certificate to systemwide store

2013-09-24 Thread Nalin Dahyabhai
On Tue, Sep 24, 2013 at 01:30:10PM +0200, Jan Cholasta wrote: > We discussed this with Tomáš off-line and it turns out that > ipa-client-install fails if the CA cert is not added to > /etc/pki/nssdb. > > However, according to p11-kit docs it should work: >

[Freeipa-devel] [PATCHES] 0282-0286 Test improvements

2013-09-24 Thread Petr Viktorin
Hello, These patches fix issues in the test suite, mainly those in BeakerLib integration. Patch 0282: When requested logs don't exist, tests shouldn't fail. The BeakerLib plugin was too strict here. Patch 0283: The Ordered plugin does not play well with generators: the generated tests are

Re: [Freeipa-devel] [PATCH] 0235 tests: Use ipa-getkeytab from /usr/sbin instead of the in-tree one

2013-09-24 Thread Petr Viktorin
On 06/04/2013 05:48 PM, Simo Sorce wrote: On Tue, 2013-06-04 at 17:24 +0200, Petr Viktorin wrote: On 06/04/2013 02:53 PM, Simo Sorce wrote: On Tue, 2013-06-04 at 13:48 +0200, Petr Viktorin wrote: Hardcoding the in-tree location for ipa-getkeytab makes testing outside the source tree impossible

[Freeipa-devel] [PATCH] 459 Allow edit of ipakrbokasdelegate in Web UI when attrlevelrights are unknown

2013-09-24 Thread Petr Vobornik
Old host entries are missing object class with krbticketflags attribute. Therefore UI does not receive attrlevelrights for it. This OC is added when ipakrbokasdelegate(krbticketflags) is set. This patch adds the usual hack for such cases. https://fedorahosted.org/freeipa/ticket/3940 -- Petr Vo

Re: [Freeipa-devel] [DOC] Chapter 2 Installation

2013-09-24 Thread Petr Vobornik
On 08/26/2013 05:34 PM, Martin Basti wrote: It solves https://fedorahosted.org/freeipa/ticket/3763 too. Sorry I forgot to add link to email before Hello, this patch fix some setup outputs and remove outdated section about updating freeIPA version 2 -- Martin Basti Thanks for the patch. 1. T

Re: [Freeipa-devel] [PATCH 111] ipa-client-install: Publish CA certificate to systemwide store

2013-09-24 Thread Jan Cholasta
On 24.9.2013 12:26, Jan Cholasta wrote: Hi, On 24.9.2013 12:03, Tomas Babej wrote: Hi, During the installation, copy the CA certificate to the systemwide store (/etc/pki/ca-trust/source/anchors/ipa-ca.crt) and update the systemwide CA database. This allows browsers to access IPA WebUI without

Re: [Freeipa-devel] [PATCH 111] ipa-client-install: Publish CA certificate to systemwide store

2013-09-24 Thread Jan Cholasta
Hi, On 24.9.2013 12:03, Tomas Babej wrote: Hi, During the installation, copy the CA certificate to the systemwide store (/etc/pki/ca-trust/source/anchors/ipa-ca.crt) and update the systemwide CA database. This allows browsers to access IPA WebUI without warning out of the box. https://fedorah

[Freeipa-devel] [PATCH 111] ipa-client-install: Publish CA certificate to systemwide store

2013-09-24 Thread Tomas Babej
Hi, During the installation, copy the CA certificate to the systemwide store (/etc/pki/ca-trust/source/anchors/ipa-ca.crt) and update the systemwide CA database. This allows browsers to access IPA WebUI without warning out of the box. https://fedorahosted.org/freeipa/ticket/3504 -- Tomas Babej

Re: [Freeipa-devel] [PATCHES] 0177-0179 Add missing dict methods to CIDict

2013-09-24 Thread Jan Cholasta
On 23.9.2013 12:08, Petr Viktorin wrote: On 09/23/2013 09:18 AM, Jan Cholasta wrote: On 18.9.2013 14:00, Petr Viktorin wrote: On 09/17/2013 05:13 PM, Jan Cholasta wrote: On 20.2.2013 17:37, Petr Viktorin wrote: On 02/19/2013 01:51 PM, Jan Cholasta wrote: Hi, On 5.2.2013 18:02, Petr Viktorin

[Freeipa-devel] [PATCH] 120 CLDAP: do not read IPA domain from hostname

2013-09-24 Thread Sumit Bose
Hi, this patch fixes an issue in the CLDAP plugin if the IPA server comes from a different DNS domain than the IPA domain. Trac ticket is https://fedorahosted.org/freeipa/ticket/3941 . bye, Sumit From 16c2193e92aea40316c39a2598ea4ce28a796905 Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Tue, 2