Re: [Freeipa-devel] [PATCH] 0134 support bool type in CLI list output

2014-01-17 Thread Alexander Bokovoy
On Fri, 17 Jan 2014, Alexander Bokovoy wrote: On Fri, 17 Jan 2014, Petr Viktorin wrote: On 01/16/2014 10:14 PM, Dmitri Pal wrote: On 01/16/2014 12:32 PM, Alexander Bokovoy wrote: On Thu, 16 Jan 2014, Alexander Bokovoy wrote: Hi, when testing changes to trustdomain-find to display status of

[Freeipa-devel] [PATCH] 450 Remove missing VERSION warning in dnsrecord-mod

2014-01-17 Thread Martin Kosek
dnsrecord-mod may call dnsrecord-delentry command when all records are deleted. However, the version was not passwd to delentry and it resulted in a warning. https://fedorahosted.org/freeipa/ticket/4120 Pushed as a one-liner to master, ipa-3-3. Martin From

Re: [Freeipa-devel] [PATCH] 232 Increase service startup timeout default

2014-01-17 Thread Martin Kosek
On 01/15/2014 05:38 PM, Alexander Bokovoy wrote: On Wed, 15 Jan 2014, Jan Cholasta wrote: don't see why a single fix should be dispersed among multiple patches. Patch attached, it obsoletes your patch 179. Thanks, but I don't understand why you squashed my patch 179 into your patch, the

Re: [Freeipa-devel] [PATCH] 0135 resolve SIDs to names in group-show for external members

2014-01-17 Thread Alexander Bokovoy
On Thu, 16 Jan 2014, Alexander Bokovoy wrote: Hi, when group contains external members, they are specified using SIDs. Use trust-resolve command to convert them back on group-show. https://bugzilla.redhat.com/show_bug.cgi?id=1054391 Sumit found omission on name translation. New patch is

Re: [Freeipa-devel] [PATCH] 210 Allow SAN in IPA certificate profile

2014-01-17 Thread Jan Cholasta
On 10.1.2014 13:34, Martin Kosek wrote: On 01/09/2014 04:49 PM, Simo Sorce wrote: On Thu, 2014-01-09 at 10:44 -0500, Rob Crittenden wrote: Martin Kosek wrote: On 01/09/2014 03:12 PM, Simo Sorce wrote: Also maybe we should allow admins to bypass the need to have an actual object to

Re: [Freeipa-devel] [PATCH] 0135 resolve SIDs to names in group-show for external members

2014-01-17 Thread Sumit Bose
On Fri, Jan 17, 2014 at 11:49:18AM +0200, Alexander Bokovoy wrote: On Thu, 16 Jan 2014, Alexander Bokovoy wrote: Hi, when group contains external members, they are specified using SIDs. Use trust-resolve command to convert them back on group-show.

Re: [Freeipa-devel] [PATCH] 0135 resolve SIDs to names in group-show for external members

2014-01-17 Thread Martin Kosek
On 01/17/2014 11:50 AM, Sumit Bose wrote: On Fri, Jan 17, 2014 at 11:49:18AM +0200, Alexander Bokovoy wrote: On Thu, 16 Jan 2014, Alexander Bokovoy wrote: Hi, when group contains external members, they are specified using SIDs. Use trust-resolve command to convert them back on group-show.

Re: [Freeipa-devel] [PATCH] 0135 resolve SIDs to names in group-show for external members

2014-01-17 Thread Sumit Bose
On Fri, Jan 17, 2014 at 12:09:03PM +0100, Martin Kosek wrote: On 01/17/2014 11:50 AM, Sumit Bose wrote: On Fri, Jan 17, 2014 at 11:49:18AM +0200, Alexander Bokovoy wrote: On Thu, 16 Jan 2014, Alexander Bokovoy wrote: Hi, when group contains external members, they are specified using

Re: [Freeipa-devel] [PATCH] 0135 resolve SIDs to names in group-show for external members

2014-01-17 Thread Petr Vobornik
On 17.1.2014 12:27, Sumit Bose wrote: On Fri, Jan 17, 2014 at 12:09:03PM +0100, Martin Kosek wrote: On 01/17/2014 11:50 AM, Sumit Bose wrote: On Fri, Jan 17, 2014 at 11:49:18AM +0200, Alexander Bokovoy wrote: On Thu, 16 Jan 2014, Alexander Bokovoy wrote: Hi, when group contains external

[Freeipa-devel] [PATCH] 0136 ipa-adtrust-install configure host netbios name by default

2014-01-17 Thread Alexander Bokovoy
https://fedorahosted.org/freeipa/ticket/4116 -- / Alexander Bokovoy From a37901e6464e79e10555187d0f8b54d0a7176be0 Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy aboko...@redhat.com Date: Fri, 17 Jan 2014 14:09:34 +0200 Subject: [PATCH 5/5] ipa-adtrust-install: configure host netbios name by

Re: [Freeipa-devel] [PATCH] 0135 resolve SIDs to names in group-show for external members

2014-01-17 Thread Sumit Bose
On Fri, Jan 17, 2014 at 01:02:18PM +0100, Petr Vobornik wrote: On 17.1.2014 12:27, Sumit Bose wrote: On Fri, Jan 17, 2014 at 12:09:03PM +0100, Martin Kosek wrote: On 01/17/2014 11:50 AM, Sumit Bose wrote: On Fri, Jan 17, 2014 at 11:49:18AM +0200, Alexander Bokovoy wrote: On Thu, 16 Jan 2014,

Re: [Freeipa-devel] [PATCH][bind-dyndb-ldap] Fix warning duplicate 'const' declaration specifier

2014-01-17 Thread Tomas Hozza
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/30/2013 09:21 AM, Lukas Slebodnik wrote: ehlo, There were few warnings in bind-dyndb-ldap duplicate 'const' declaration specifier. It does not make sense to have const twice in declaration like a const settings_set_t const

Re: [Freeipa-devel] [PATCH 0204] Remove obsolete zr_get_rbt() function from zone register

2014-01-17 Thread Tomas Hozza
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/11/2013 12:53 PM, Petr Spacek wrote: Hello, Remove obsolete zr_get_rbt() function from zone register. ACK. Patch looks good. Regards, Tomas Hozza -BEGIN PGP SIGNATURE- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird -

[Freeipa-devel] [PATCH] 451 Hide trust-resolve command

2014-01-17 Thread Martin Kosek
We do not need to expose a public FreeIPA specific interface to resolve SIDs to names. The interface is only used internally to resolve SIDs when external group members are listed. Additionally, the command interface is not prepared for regular user and can give rather confusing results. Hide it

[Freeipa-devel] [PATCH] 543 Trust domains Web UI

2014-01-17 Thread Petr Vobornik
Note: this version of the patch is especially prepared for ipa-3-3 branch. Add Web UI counterpart of following CLI commands: * trust-fetch-domains Refresh list of the domains associated with the trust * trustdomain-del Remove infromation about the domain associated with the trust. *

[Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-01-17 Thread Rob Crittenden
Implement an IPA RESTful Foreman-compatible smart proxy. This exposes hosts and hostgroups via an unauthenticated REST API. The idea is that this service runs on the Foreman server and only listens on local ports. It is a CherryPy-based server and that handles the majority of REST for us. I

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-01-17 Thread Dmitri Pal
On 01/17/2014 04:24 PM, Rob Crittenden wrote: Implement an IPA RESTful Foreman-compatible smart proxy. This exposes hosts and hostgroups via an unauthenticated REST API. The idea is that this service runs on the Foreman server and only listens on local ports. It is a CherryPy-based server and

Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-01-17 Thread Rob Crittenden
Dmitri Pal wrote: On 01/17/2014 04:24 PM, Rob Crittenden wrote: Implement an IPA RESTful Foreman-compatible smart proxy. This exposes hosts and hostgroups via an unauthenticated REST API. The idea is that this service runs on the Foreman server and only listens on local ports. It is a