Re: [Freeipa-devel] Woes updating and oldish devel server to latest master

2014-06-12 Thread Petr Viktorin
On 06/11/2014 09:17 PM, Simo Sorce wrote: On Wed, 2014-06-11 at 20:50 +0200, Petr Viktorin wrote: On 06/11/2014 08:17 PM, Simo Sorce wrote: On Wed, 2014-06-11 at 13:54 -0400, Simo Sorce wrote: On Wed, 2014-06-11 at 13:36 -0400, Simo Sorce wrote: Ok now ipa-ldap-updater does a lot more and

Re: [Freeipa-devel] [PATCH] 654 webui: fix SSH Key widget update

2014-06-12 Thread Petr Vobornik
On 11.6.2014 18:03, Nathaniel McCallum wrote: On Wed, 2014-06-11 at 15:04 +0200, Petr Vobornik wrote: Update widget status text on update. ACK Pushed to master: 352ef8428c8e2faef8b93b8ecbee9db7e40e1ab6 -- Petr Vobornik ___ Freeipa-devel mailing

Re: [Freeipa-devel] [PATCH 0018] Fix --ttl description for DNS zones

2014-06-12 Thread Petr Viktorin
On 06/11/2014 06:37 PM, Nathaniel McCallum wrote: On Wed, 2014-06-11 at 13:26 +0200, Petr Spacek wrote: Hello, Fix --ttl description for DNS zones TTL specified in idnsZone object class affects all records at zone apex, not only SOA record. I have realized that current description is

Re: [Freeipa-devel] [PATCH] 656 webui: handle unknown result of automember-default-group-show

2014-06-12 Thread Petr Vobornik
On 11.6.2014 18:02, Nathaniel McCallum wrote: On Wed, 2014-06-11 at 15:07 +0200, Petr Vobornik wrote: Interface for setting default group is hidden when user doesn't have necessary rights or if there is some error while loading the state. https://fedorahosted.org/freeipa/ticket/4356 ACK

Re: [Freeipa-devel] [PATCH] 657 webui: control sudo rule deny command tables by category switch

2014-06-12 Thread Petr Vobornik
On 11.6.2014 18:30, Nathaniel McCallum wrote: On Wed, 2014-06-11 at 15:08 +0200, Petr Vobornik wrote: `memberdenycmd_sudocmd` and `memberdenycmd_sudocmdgroup` tables are now enabled/disabled based on `cmdcategory` as well. https://fedorahosted.org/freeipa/ticket/4361 ACK Pushed to master:

Re: [Freeipa-devel] [PATCH] 658 webui: add sudoorder field to sudo rule page

2014-06-12 Thread Petr Vobornik
On 11.6.2014 18:01, Nathaniel McCallum wrote: On Wed, 2014-06-11 at 15:09 +0200, Petr Vobornik wrote: part of https://fedorahosted.org/freeipa/ticket/2348 ACK Pushed to master: 8f286d5c510c30f2319a8b0142cb68ee8e81f664 -- Petr Vobornik ___

Re: [Freeipa-devel] [PATCH 0224] cainstance: Read CS.cfg for preop.pin in a loop

2014-06-12 Thread Martin Kosek
On 06/11/2014 06:49 PM, Nathaniel McCallum wrote: On Wed, 2014-06-11 at 11:08 +0200, Tomas Babej wrote: Hi, As due to possible race conditions, the preop.pin might not be written in the CS.cfg at the time installer tries to read it. In case no value for preop.pin was found, retry until

Re: [Freeipa-devel] [PATCHES] 0052-0055 Separate master and forward DNS zones to separate objectClasses

2014-06-12 Thread Martin Basti
On Wed, 2014-06-11 at 17:41 +0200, Martin Basti wrote: On Mon, 2014-06-02 at 13:57 +0200, Martin Basti wrote: Rebased patches attached ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

[Freeipa-devel] [PATCH] 0580 Change group permission object filter to posixgroup

2014-06-12 Thread Petr Viktorin
A fix for https://fedorahosted.org/freeipa/ticket/4372 -- PetrĀ³ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 0580 Change group permission object filter to posixgroup

2014-06-12 Thread Petr Viktorin
A fix for https://fedorahosted.org/freeipa/ticket/4372 is attached. -- PetrĀ³ From 3114261d767d4b5767ac343df6ec89593f62f4d7 Mon Sep 17 00:00:00 2001 From: Petr Viktorin pvikt...@redhat.com Date: Thu, 12 Jun 2014 12:01:26 +0200 Subject: [PATCH] Change group permission object filter to

Re: [Freeipa-devel] [PATCH] 0059-0064 Update DNSSEC attributes/record types

2014-06-12 Thread Petr Vobornik
On 9.6.2014 17:28, Martin Basti wrote: Ticket: https://fedorahosted.org/freeipa/ticket/4328 Petr please make the WebUI patch review (0062) :-) Patches attached. Patch #0059: LGTM Patch #0060: 1. Please add `pattern_errmsg` to `salt` part of nsec3param. Otherwise you get general Text does

Re: [Freeipa-devel] [PATCH 0224] cainstance: Read CS.cfg for preop.pin in a loop

2014-06-12 Thread Tomas Babej
On 06/12/2014 10:45 AM, Martin Kosek wrote: On 06/11/2014 06:49 PM, Nathaniel McCallum wrote: On Wed, 2014-06-11 at 11:08 +0200, Tomas Babej wrote: Hi, As due to possible race conditions, the preop.pin might not be written in the CS.cfg at the time installer tries to read it. In case no

Re: [Freeipa-devel] [PATCH 0224] cainstance: Read CS.cfg for preop.pin in a loop

2014-06-12 Thread Nathaniel McCallum
On Thu, 2014-06-12 at 13:29 +0200, Tomas Babej wrote: On 06/12/2014 10:45 AM, Martin Kosek wrote: On 06/11/2014 06:49 PM, Nathaniel McCallum wrote: On Wed, 2014-06-11 at 11:08 +0200, Tomas Babej wrote: Hi, As due to possible race conditions, the preop.pin might not be written in the

Re: [Freeipa-devel] [PATCH] 546 webui: expose krbprincipalexpiration

2014-06-12 Thread Endi Sukma Dewata
On 2/25/2014 11:07 AM, Petr Vobornik wrote: Depends on tbabej's patches # 137, 138 and my 546. https://fedorahosted.org/freeipa/ticket/3306 ACK on #547. -- Endi S. Dewata ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 655 webui: move RPC result extraction logic to Adapter

2014-06-12 Thread Endi Sukma Dewata
On 6/11/2014 8:05 AM, Petr Vobornik wrote: It enables declarative extraction of values from partial results of a batch commands and also further extensibility in custom adapters. The default adapter has detection logic for this extraction so it can use bare record or extract data from normal or

Re: [Freeipa-devel] Woes updating and oldish devel server to latest master

2014-06-12 Thread Simo Sorce
On Thu, 2014-06-12 at 09:51 +0200, Petr Viktorin wrote: On 06/11/2014 09:17 PM, Simo Sorce wrote: On Wed, 2014-06-11 at 20:50 +0200, Petr Viktorin wrote: On 06/11/2014 08:17 PM, Simo Sorce wrote: On Wed, 2014-06-11 at 13:54 -0400, Simo Sorce wrote: On Wed, 2014-06-11 at 13:36 -0400, Simo

Re: [Freeipa-devel] [PATCH 0224] cainstance: Read CS.cfg for preop.pin in a loop

2014-06-12 Thread Tomas Babej
On 06/12/2014 02:37 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 13:29 +0200, Tomas Babej wrote: On 06/12/2014 10:45 AM, Martin Kosek wrote: On 06/11/2014 06:49 PM, Nathaniel McCallum wrote: On Wed, 2014-06-11 at 11:08 +0200, Tomas Babej wrote: Hi, As due to possible race

Re: [Freeipa-devel] [PATCH 0224] cainstance: Read CS.cfg for preop.pin in a loop

2014-06-12 Thread Martin Kosek
On 06/12/2014 03:15 PM, Tomas Babej wrote: On 06/12/2014 02:37 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 13:29 +0200, Tomas Babej wrote: On 06/12/2014 10:45 AM, Martin Kosek wrote: On 06/11/2014 06:49 PM, Nathaniel McCallum wrote: On Wed, 2014-06-11 at 11:08 +0200, Tomas Babej

Re: [Freeipa-devel] [PATCH] 0059-0064 Update DNSSEC attributes/record types

2014-06-12 Thread Martin Basti
On Thu, 2014-06-12 at 13:17 +0200, Petr Vobornik wrote: On 9.6.2014 17:28, Martin Basti wrote: Ticket: https://fedorahosted.org/freeipa/ticket/4328 Petr please make the WebUI patch review (0062) :-) Patches attached. Patch #0059: LGTM Patch #0060: 1. Please add

Re: [Freeipa-devel] LDAP schema for DNSSEC keys

2014-06-12 Thread Petr Spacek
On 30.4.2014 18:19, Petr Spacek wrote: following text summarizes schema DIT layout for DNSSEC key storage in LDAP. I have added object classes and default values for attributes I consider important. This is final proposal for implementation. Please review it ASAP. This is subset of full

Re: [Freeipa-devel] [PATCH 0224] cainstance: Read CS.cfg for preop.pin in a loop

2014-06-12 Thread Nathaniel McCallum
On Thu, 2014-06-12 at 16:20 +0200, Martin Kosek wrote: On 06/12/2014 03:15 PM, Tomas Babej wrote: On 06/12/2014 02:37 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 13:29 +0200, Tomas Babej wrote: On 06/12/2014 10:45 AM, Martin Kosek wrote: On 06/11/2014 06:49 PM, Nathaniel

Re: [Freeipa-devel] [PATCH 0224] cainstance: Read CS.cfg for preop.pin in a loop

2014-06-12 Thread Tomas Babej
On 06/12/2014 04:27 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 16:20 +0200, Martin Kosek wrote: On 06/12/2014 03:15 PM, Tomas Babej wrote: On 06/12/2014 02:37 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 13:29 +0200, Tomas Babej wrote: On 06/12/2014 10:45 AM, Martin Kosek

Re: [Freeipa-devel] [PATCH 0224] cainstance: Read CS.cfg for preop.pin in a loop

2014-06-12 Thread Nathaniel McCallum
On Thu, 2014-06-12 at 16:36 +0200, Tomas Babej wrote: On 06/12/2014 04:27 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 16:20 +0200, Martin Kosek wrote: On 06/12/2014 03:15 PM, Tomas Babej wrote: On 06/12/2014 02:37 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 13:29 +0200,

Re: [Freeipa-devel] [PATCH 0224] cainstance: Read CS.cfg for preop.pin in a loop

2014-06-12 Thread Tomas Babej
On 06/12/2014 04:45 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 16:36 +0200, Tomas Babej wrote: On 06/12/2014 04:27 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 16:20 +0200, Martin Kosek wrote: On 06/12/2014 03:15 PM, Tomas Babej wrote: On 06/12/2014 02:37 PM, Nathaniel

[Freeipa-devel] DNSSEC key metadata handling

2014-06-12 Thread Petr Spacek
Hello list, I have realized that we need to store certain DNSSEC metadata for every (zone,key,replica) triplet. It is necessary to handle splits in replication topology. DNSSEC key can be in one of following states: - key created - published but not used for signing - published and used for

Re: [Freeipa-devel] DNSSEC key metadata handling

2014-06-12 Thread Simo Sorce
On Thu, 2014-06-12 at 17:08 +0200, Petr Spacek wrote: Hello list, I have realized that we need to store certain DNSSEC metadata for every (zone,key,replica) triplet. It is necessary to handle splits in replication topology. DNSSEC key can be in one of following states: - key created -

Re: [Freeipa-devel] [PATCH] 647-651 [webui] Make utility section of navigation extensible

2014-06-12 Thread Endi Sukma Dewata
On 5/27/2014 6:15 AM, Petr Vobornik wrote: This is just a first draft of implementation of https://fedorahosted.org/freeipa/ticket/4345 It introduces a `freeipa/extend` module which should serve as a more stable API for Web UI plugins. I think it requires further discussion - what to have

Re: [Freeipa-devel] DNSSEC key metadata handling

2014-06-12 Thread Petr Spacek
On 12.6.2014 17:19, Simo Sorce wrote: On Thu, 2014-06-12 at 17:08 +0200, Petr Spacek wrote: Hello list, I have realized that we need to store certain DNSSEC metadata for every (zone,key,replica) triplet. It is necessary to handle splits in replication topology. DNSSEC key can be in one of

Re: [Freeipa-devel] [PATCH 0224] cainstance: Read CS.cfg for preop.pin in a loop

2014-06-12 Thread Nathaniel McCallum
On Thu, 2014-06-12 at 17:07 +0200, Tomas Babej wrote: On 06/12/2014 04:45 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 16:36 +0200, Tomas Babej wrote: On 06/12/2014 04:27 PM, Nathaniel McCallum wrote: On Thu, 2014-06-12 at 16:20 +0200, Martin Kosek wrote: On 06/12/2014 03:15 PM,