Re: [Freeipa-devel] [PATCH] 1106 IPA REST smart proxy

2014-03-14 Thread Rob Crittenden
Petr Viktorin wrote: On 03/12/2014 07:48 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 03/10/2014 08:55 PM, Rob Crittenden wrote: Rob Crittenden wrote: Petr Viktorin wrote: On 02/27/2014 10:18 PM, Rob Crittenden wrote: Rob Crittenden wrote: Updated patch based on feedback from Foreman t

Re: [Freeipa-devel] [PATCH] 550 webui-css: improve radio, checkbox keyboard support and color

2014-03-14 Thread Petr Vobornik
On 13.3.2014 16:55, Petr Vobornik wrote: On 7.3.2014 15:34, Petr Vobornik wrote: checkboxes and radio buttons: - do not change color on hover when disabled - are focusable and checkable by keyboard again. This uses a little trick where the real checkbox is hidden under the artificial check

Re: [Freeipa-devel] [PATCH] 548 webui: change ipatokennotbefore and ipatokennotafter types to datetime

2014-03-14 Thread Petr Vobornik
On 25.2.2014 18:10, Petr Vobornik wrote: Depends on tbabej's patches # 137, 140 and pvoborni's 546 and 531-541. https://fedorahosted.org/freeipa/ticket/3369 Attaching rebased patch. -- Petr Vobornik From 5e3b639f5f7edd6d4539951e448e13666dc19795 Mon Sep 17 00:00:00 2001 From: Petr Vobornik D

Re: [Freeipa-devel] [PATCH][RFC] 7 automember rebuild nowait feature added

2014-03-14 Thread Rob Crittenden
Misnyovszki Adam wrote: Hi, automember-rebuild uses asynchronous 389 task, and returned success even if the task didn't run. This patch fixes this issue adding a --nowait parameter to 'ipa automember-rebuild', defaulting to False, thus when the script runs without it, it waits for the 'nstaskexi

Re: [Freeipa-devel] [PATCH][RFC] 7 automember rebuild nowait feature added

2014-03-14 Thread Petr Viktorin
On 03/14/2014 05:31 PM, Misnyovszki Adam wrote: Hi, automember-rebuild uses asynchronous 389 task, and returned success even if the task didn't run. This patch fixes this issue adding a --nowait parameter to 'ipa automember-rebuild', defaulting to False, thus when the script runs without it, it

Re: [Freeipa-devel] LDAP schema for PKCS#11

2014-03-14 Thread Stef Walter
On 12.03.2014 16:31, Jan Cholasta wrote: > On 12.3.2014 16:14, Stef Walter wrote: >> On 05.03.2014 18:02, Jan Cholasta wrote: >>> On 5.3.2014 13:20, Stef Walter wrote: On 03.03.2014 15:24, Jan Cholasta wrote: > On 3.3.2014 15:07, Stef Walter wrote: >> On 03.03.2014 15:03, Jan Cholasta

[Freeipa-devel] [PATCH][RFC] 7 automember rebuild nowait feature added

2014-03-14 Thread Misnyovszki Adam
Hi, automember-rebuild uses asynchronous 389 task, and returned success even if the task didn't run. This patch fixes this issue adding a --nowait parameter to 'ipa automember-rebuild', defaulting to False, thus when the script runs without it, it waits for the 'nstaskexitcode' attribute, which me

Re: [Freeipa-devel] [PATCHES] 0473-0477+0497 Managed permission updater, part 1

2014-03-14 Thread Petr Viktorin
On 03/13/2014 02:01 PM, Petr Viktorin wrote: On 03/07/2014 10:45 AM, Martin Kosek wrote: On 03/05/2014 01:48 PM, Petr Viktorin wrote: On 03/03/2014 04:10 PM, Petr Viktorin wrote: On 02/28/2014 02:47 PM, Petr Viktorin wrote: On 02/28/2014 02:12 PM, Martin Kosek wrote: On 02/26/2014 10:44 AM,

Re: [Freeipa-devel] [PATCH] BuildRequires: rhino in .spec file

2014-03-14 Thread Petr Vobornik
On 14.3.2014 14:50, Petr Vobornik wrote: On 14.3.2014 14:20, Nalin Dahyabhai wrote: When I try to scratch build master using 'make srpm' and koji, the build log includes multiple errors like this: ../../util/make-ui.sh Error: Could not find or load main class org.mozilla.javascript.tools.s

Re: [Freeipa-devel] [PATCH] BuildRequires: rhino in .spec file

2014-03-14 Thread Petr Vobornik
On 14.3.2014 14:20, Nalin Dahyabhai wrote: When I try to scratch build master using 'make srpm' and koji, the build log includes multiple errors like this: ../../util/make-ui.sh Error: Could not find or load main class org.mozilla.javascript.tools.shell.Main Error: Could not find or loa

Re: [Freeipa-devel] [PATCH] 463 Increase Kerberos KDC configuration estimation time

2014-03-14 Thread Martin Kosek
On 03/14/2014 02:21 PM, Rob Crittenden wrote: > Martin Kosek wrote: >> This step usually takes about 5 minutes. Current estimated time of >> 30 seconds is misleading and may make admins think that the installation >> is stuck. Change the estimation to 5 minutes. >> >> --- >> >> CC-ing Jakub who rai

Re: [Freeipa-devel] [PATCH] 461 Update Dogtag 9 database during replica installation

2014-03-14 Thread Petr Viktorin
On 03/14/2014 01:34 PM, Petr Viktorin wrote: On 03/14/2014 12:37 PM, Alexander Bokovoy wrote: On Fri, 14 Mar 2014, Petr Viktorin wrote: On 03/14/2014 10:29 AM, Alexander Bokovoy wrote: On Thu, 13 Mar 2014, Martin Kosek wrote: On 03/13/2014 03:15 PM, Martin Kosek wrote: On 03/13/2014 09:09 AM

Re: [Freeipa-devel] [PATCH] 463 Increase Kerberos KDC configuration estimation time

2014-03-14 Thread Rob Crittenden
Martin Kosek wrote: This step usually takes about 5 minutes. Current estimated time of 30 seconds is misleading and may make admins think that the installation is stuck. Change the estimation to 5 minutes. --- CC-ing Jakub who raised exactly this issue. It is entirely dependent upon how much

[Freeipa-devel] [PATCH] BuildRequires: rhino in .spec file

2014-03-14 Thread Nalin Dahyabhai
When I try to scratch build master using 'make srpm' and koji, the build log includes multiple errors like this: ../../util/make-ui.sh Error: Could not find or load main class org.mozilla.javascript.tools.shell.Main Error: Could not find or load main class org.mozilla.javascript.tools.shell

[Freeipa-devel] [PATCH] 463 Increase Kerberos KDC configuration estimation time

2014-03-14 Thread Martin Kosek
This step usually takes about 5 minutes. Current estimated time of 30 seconds is misleading and may make admins think that the installation is stuck. Change the estimation to 5 minutes. --- CC-ing Jakub who raised exactly this issue. Martin From 650e9f0c91593571d9edf0c30ada2468326210b4 Mon Sep 1

Re: [Freeipa-devel] [PATCH] 461 Update Dogtag 9 database during replica installation

2014-03-14 Thread Petr Viktorin
On 03/14/2014 12:37 PM, Alexander Bokovoy wrote: On Fri, 14 Mar 2014, Petr Viktorin wrote: On 03/14/2014 10:29 AM, Alexander Bokovoy wrote: On Thu, 13 Mar 2014, Martin Kosek wrote: On 03/13/2014 03:15 PM, Martin Kosek wrote: On 03/13/2014 09:09 AM, Martin Kosek wrote: When Dogtag 10 based Fr

Re: [Freeipa-devel] [PATCH] 461 Update Dogtag 9 database during replica installation

2014-03-14 Thread Alexander Bokovoy
On Fri, 14 Mar 2014, Petr Viktorin wrote: On 03/14/2014 10:29 AM, Alexander Bokovoy wrote: On Thu, 13 Mar 2014, Martin Kosek wrote: On 03/13/2014 03:15 PM, Martin Kosek wrote: On 03/13/2014 09:09 AM, Martin Kosek wrote: When Dogtag 10 based FreeIPA replica is being installed for a Dogtag 9 ba

Re: [Freeipa-devel] [PATCH] 461 Update Dogtag 9 database during replica installation

2014-03-14 Thread Petr Viktorin
On 03/14/2014 10:29 AM, Alexander Bokovoy wrote: On Thu, 13 Mar 2014, Martin Kosek wrote: On 03/13/2014 03:15 PM, Martin Kosek wrote: On 03/13/2014 09:09 AM, Martin Kosek wrote: When Dogtag 10 based FreeIPA replica is being installed for a Dogtag 9 based master, the PKI database is not updated

Re: [Freeipa-devel] [PATCH] 461 Update Dogtag 9 database during replica installation

2014-03-14 Thread Alexander Bokovoy
On Thu, 13 Mar 2014, Martin Kosek wrote: On 03/13/2014 03:15 PM, Martin Kosek wrote: On 03/13/2014 09:09 AM, Martin Kosek wrote: When Dogtag 10 based FreeIPA replica is being installed for a Dogtag 9 based master, the PKI database is not updated and miss several ACLs which prevent some of the P

Re: [Freeipa-devel] [PATCHES] 0489-0495 Add the extratargetfilter virtual attribute to permissions

2014-03-14 Thread Martin Kosek
On 03/13/2014 06:26 PM, Petr Viktorin wrote: > On 03/10/2014 05:40 PM, Petr Viktorin wrote: >> On 03/07/2014 07:57 PM, Petr Viktorin wrote: >>> Hello, >>> This implements https://fedorahosted.org/freeipa/ticket/4216 >>> >>> It feels like permissions have gone full circle, from being managed by >>>

[Freeipa-devel] [PATCH] 462 Fix idrange unit test failure

2014-03-14 Thread Martin Kosek
Pushed as a one liner to master, ipa-3-3. Martin From ac5dac159695c3ad4fe1c9d932acb1a85d77d7a3 Mon Sep 17 00:00:00 2001 From: Martin Kosek Date: Fri, 14 Mar 2014 10:04:43 +0100 Subject: [PATCH] Fix idrange unit test failure This is a follow up to patch for ticket 4247 - the raised errors.Depende

Re: [Freeipa-devel] LDAP Queue Length Control for better LDAP client performance?

2014-03-14 Thread Ludwig Krispenz
On 03/13/2014 03:20 PM, Rich Megginson wrote: On 03/13/2014 03:08 AM, Petr Spacek wrote: Hello list, my journey to the IETF wonderland revealed one more RFC draft: LDAP Queue Length Control http://tools.ietf.org/html/draft-hollstein-queuelength-control-01 I have no idea if this can really im