Re: [Freeipa-devel] [PATCH][DOC] Sometimes users set bad uid ranges

2014-05-14 Thread Petr Spacek
On 14.5.2014 01:05, Gabe Alford wrote: I had a typo with the one of the UIDs which is fixed with this patch. The difference is that Fedora/SSSD treats UIDs of 1000 and below as local system accounts whereas RHEL treats local system accounts at 500 and SSSD local system accounts at 1000. That's

[Freeipa-devel] Asking for help to add new options

2014-05-14 Thread thierry bordaz
Hello, Quite beginner in freeipa land, I am trying to add options to 'user-add' sub-command but desperately failing to make it work. I did the following modification: diff --git a/ipalib/plugins/user.py b/ipalib/plugins/user.py index 9b21200..0c36e35 100644 ---

Re: [Freeipa-devel] [PATCH 0018] ipa-client-automount should not configure nsswitch.conf

2014-05-14 Thread Petr Viktorin
On 05/09/2014 05:09 AM, Gabe Alford wrote: Hello, Came across this issue in my environment the other day and thought I would send a quick patch for review for https://fedorahosted.org/freeipa/ticket/3733 Thanks for the patch! This works, but configure_nsswitch would now fail if it

Re: [Freeipa-devel] Asking for help to add new options

2014-05-14 Thread Petr Viktorin
On 05/14/2014 11:21 AM, thierry bordaz wrote: Hello, Quite beginner in freeipa land, I am trying to add options to 'user-add' sub-command but desperately failing to make it work. I did the following modification: diff --git a/ipalib/plugins/user.py b/ipalib/plugins/user.py

Re: [Freeipa-devel] [PATCH] 468 Make ipa-client-automount backwards compatible

2014-05-14 Thread Petr Viktorin
On 04/02/2014 08:48 AM, Martin Kosek wrote: On 04/01/2014 07:33 PM, Rob Crittenden wrote: Martin Kosek wrote: ipa-client-automount calls automountlocation-show command during the process. Unfortunately, FreeIPA commands are forward compatible only and thus fail the installer. Similarly to

Re: [Freeipa-devel] Asking for help to add new options

2014-05-14 Thread thierry bordaz
On 05/14/2014 12:32 PM, Petr Viktorin wrote: On 05/14/2014 12:27 PM, thierry bordaz wrote: On 05/14/2014 12:01 PM, Petr Viktorin wrote: On 05/14/2014 11:21 AM, thierry bordaz wrote: Hello, Quite beginner in freeipa land, I am trying to add options to 'user-add' sub-command but

Re: [Freeipa-devel] [PATCH 0018] ipa-client-automount should not configure nsswitch.conf

2014-05-14 Thread Gabe Alford
Thanks. Updated patch. On Wed, May 14, 2014 at 3:49 AM, Petr Viktorin pvikt...@redhat.com wrote: On 05/09/2014 05:09 AM, Gabe Alford wrote: Hello, Came across this issue in my environment the other day and thought I would send a quick patch for review for

[Freeipa-devel] [PATCH] 631 webui: fix regression: enabled gid field on group add

2014-05-14 Thread Petr Vobornik
GID field should be enabled by default since the default group is posix. Was caused by option_widget_base not properly reporting value change while selecting the default value. It has to be notified with delay otherwise the event is consumed by FieldBinder.

Re: [Freeipa-devel] [PATCH][DOC] Sometimes users set bad uid ranges

2014-05-14 Thread Gabe Alford
What are your thoughts on this? Added UID and SSSUID entities and cleaned up the original patch down to a regular paragraph. Gabe On Wed, May 14, 2014 at 2:32 AM, Petr Spacek pspa...@redhat.com wrote: On 14.5.2014 01:05, Gabe Alford wrote: I had a typo with the one of the UIDs which is

[Freeipa-devel] [PATCH 0004] freeipa-ci: Add sudo integration job

2014-05-14 Thread Tomas Babej
Hi, the sudo integration job is already in master, so it's time for the job to be pushed to the upstream test job repository. Tomas -- Tomas Babej Associate Software Engineer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org From

Re: [Freeipa-devel] [PATCH][DOC] Sometimes users set bad uid ranges

2014-05-14 Thread Petr Spacek
On 14.5.2014 16:55, Gabe Alford wrote: What are your thoughts on this? Added UID and SSSUID entities and cleaned up the original patch down to a regular paragraph. The text itself seems good. Can we think of a better names than UID and SSSUID? Maybe something like MINUID and MINSSSUID? I

[Freeipa-devel] OTP Sync Client Design

2014-05-14 Thread Nathaniel McCallum
Occasionally OTP tokens get out of sync with the server. When this happens, the user or an admin need to synchronize the token. To this end, we landed server-side synchronization support, which is a simple bind with a custom control. This all works with my sample test script. Client support is

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-14 Thread Nathaniel McCallum
On Wed, 2014-05-14 at 16:34 -0400, Dmitri Pal wrote: On 05/14/2014 02:08 PM, Nathaniel McCallum wrote: Occasionally OTP tokens get out of sync with the server. When this happens, the user or an admin need to synchronize the token. To this end, we landed server-side synchronization support,

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-14 Thread Dmitri Pal
On 05/14/2014 05:23 PM, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 16:34 -0400, Dmitri Pal wrote: On 05/14/2014 02:08 PM, Nathaniel McCallum wrote: Occasionally OTP tokens get out of sync with the server. When this happens, the user or an admin need to synchronize the token. To this end,

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-14 Thread Nathaniel McCallum
On Wed, 2014-05-14 at 17:35 -0400, Dmitri Pal wrote: On 05/14/2014 05:23 PM, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 16:34 -0400, Dmitri Pal wrote: On 05/14/2014 02:08 PM, Nathaniel McCallum wrote: Occasionally OTP tokens get out of sync with the server. When this happens, the

Re: [Freeipa-devel] OTP Sync Client Design

2014-05-14 Thread Dmitri Pal
On 05/14/2014 05:49 PM, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 17:35 -0400, Dmitri Pal wrote: On 05/14/2014 05:23 PM, Nathaniel McCallum wrote: On Wed, 2014-05-14 at 16:34 -0400, Dmitri Pal wrote: On 05/14/2014 02:08 PM, Nathaniel McCallum wrote: Occasionally OTP tokens get out of