Re: [Freeipa-devel] [PATCH] 455 Fallback to global policy in ipa-lockout plugin

2014-02-03 Thread Martin Kosek
On 01/31/2014 04:39 PM, Rob Crittenden wrote: Martin Kosek wrote: On 01/30/2014 07:19 PM, Rob Crittenden wrote: Martin Kosek wrote: krbPwdPolicyReference is no longer filled default users. Instead, plugins fallback to hardcoded global policy reference. Fix ipa-lockout plugin to fallback to

Re: [Freeipa-devel] FreeIPA ConnId connector for usage with Apache Syncope

2014-02-03 Thread Francesco Chicchiriccò
On 31/01/2014 18:57, Dmitri Pal wrote: On 01/31/2014 08:17 AM, Francesco Chicchiriccò wrote: Are you saying that we should split our development in two: (1) smart proxy, exposing the RESTful interface, developed on the basis of [8] (2) actual ConnId connector, dealing with the proxy above for

Re: [Freeipa-devel] FreeIPA ConnId connector for usage with Apache Syncope

2014-02-03 Thread Adam Young
On 01/31/2014 05:03 AM, Martin Kosek wrote: On 01/31/2014 10:45 AM, Francesco Chicchiriccò wrote: On 30/01/2014 19:25, Dmitri Pal wrote: On 01/30/2014 11:35 AM, Francesco Chicchiriccò wrote: ... To call into IPA you can use ipa ... command line or use out API from python client. Since you

[Freeipa-devel] How to restore an IPA Replica when the CSN number generator has moved impossibly far into the future or past

2014-02-03 Thread JR Aquino
If you are seeing clock skew errors in /var/log/dirsrv/slapd-EXAMPLE-COM/errors that look like this, then you will need to verify the time/date of the server to make sure NTP isn't freaked out. If the system date is correct, it is possible that the change numbergenerator has