Re: [Freeipa-devel] LDAP schema for DNSSEC keys

2014-07-17 Thread Jan Cholasta
On 16.7.2014 17:13, Petr Spacek wrote: On 24.6.2014 08:43, Jan Cholasta wrote: On 20.6.2014 20:23, Simo Sorce wrote: On Fri, 2014-06-20 at 20:04 +0200, Petr Spacek wrote: ipk11Private;privatekey: TRUE ipk11Private;publickey: FALSE can these two ever hold a different value ? ie a privatekey

[Freeipa-devel] [PATCH 0244] ipatests: test_trust: Add test to cover lookup of trusdomains

2014-07-17 Thread Tomas Babej
Hi, Adds an integration tests that checks that all trustdomains are able to be found by trustdomain-find command right after the trust has been established. Also moves some code to allow easier adding common test cases for both POSIX and non-POSIX test classes.

Re: [Freeipa-devel] [PATCH 0244] ipatests: test_trust: Add test to cover lookup of trusdomains

2014-07-17 Thread Tomas Babej
On 07/17/2014 01:20 PM, Tomas Babej wrote: Hi, Adds an integration tests that checks that all trustdomains are able to be found by trustdomain-find command right after the trust has been established. Also moves some code to allow easier adding common test cases for both POSIX and non-POSIX

Re: [Freeipa-devel] [PATCH] Enable debug pid in smb.conf

2014-07-17 Thread Tomas Babej
On 07/16/2014 05:48 AM, Gabe Alford wrote: Hello, Adds debug pid = yes to smb.conf when ipa-adtrust-install command is run. https://fedorahosted.org/freeipa/ticket/3485 Thanks, Gabe ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] Correct firewall ports for multi-master replicas

2014-07-17 Thread Martin Kosek
On 07/14/2014 10:20 AM, Petr Spacek wrote: On 12.7.2014 08:40, James wrote: Hi freeipa-devel, I just added automatic firewalling for puppet-ipa. (Disclaimer it's currently untested...) What I'm missing is an exact and exhaustive list of exactly which ports each replica needs open for each

Re: [Freeipa-devel] [PATCH] - Add DRM to IPA

2014-07-17 Thread Petr Viktorin
On 07/16/2014 02:55 PM, Petr Viktorin wrote: On 07/14/2014 11:45 AM, Ade Lee wrote: Hi all, I have rebased all the previous patches against master, and have squashed them all into a single patch. Its a large patch, but as many folks have already reviewed the constituent precursor patches, most

[Freeipa-devel] weird data interaction

2014-07-17 Thread Rob Crittenden
Saw something very weird today but my setup was also a bit odd so it may not be worthy of a ticket. Need a second opinion. Ok, so I wanted to test Jan's CA patches. They don't apply to current master due to the churn pre-4.0, so I just rewound the world to July 3 and applied them on the master

Re: [Freeipa-devel] [PATCH] webui: 696 support wildcard attribute level rights

2014-07-17 Thread Endi Sukma Dewata
On 7/10/2014 7:23 AM, Petr Vobornik wrote: Reproduction: * add 'extensibleObject' object class to target object https://fedorahosted.org/freeipa/ticket/4380 This is the original if-condition: (!rights !(that.flags.indexOf('w_if_no_aci') -1 write_oc)) || (rights

Re: [Freeipa-devel] [PATCH] 697-702 webui: usability improvements in attribute widget

2014-07-17 Thread Endi Sukma Dewata
On 7/10/2014 8:02 AM, Petr Vobornik wrote: ACK. Comments below: == [PATCH] 699 webui: optimize (re)creation of option widget == There is a case where attributes widget can contain 1000 items. It's about 3000 nodes. It's slow in jQuery. Simple move to dojo speeds it up (is closer to native

Re: [Freeipa-devel] [PATCH] 703-707 webui: improvements in permission details page

2014-07-17 Thread Endi Sukma Dewata
ACK. See comment below: On 7/10/2014 7:38 AM, Petr Vobornik wrote: == [PATCH] 707 webui: disable ipapermbindruletype if permission in a privilege == User is not able to change Bind Rule Type if permission is already member of a privilege. Let's disable it and don't confuse user. If you open

Re: [Freeipa-devel] [PATCH] 708 webui: fix disabled state of service's PAC type

2014-07-17 Thread Endi Sukma Dewata
On 7/10/2014 7:38 AM, Petr Vobornik wrote: Nested options (MS-PAC and PAD) of service's PAC type should be disabled if no value is supplied (default value is Inherited from server configuration). That was not the case - regression. This patch fixes it and along with it simplifies the update