Re: [Freeipa-devel] [PATCH] [WIP] DNSSEC support - preview

2014-10-17 Thread Jan Cholasta
Dne 16.10.2014 v 20:01 Petr Spacek napsal(a): On 16.10.2014 19:43, Jan Cholasta wrote: Dne 16.10.2014 v 17:59 Martin Basti napsal(a): On 10/10/14 09:17, Martin Kosek wrote: On 10/09/2014 03:57 PM, Petr Spacek wrote: Hello, it would be great if people could look at current state of DNSSEC

Re: [Freeipa-devel] [PATCHES] 354-356 Check LDAP instead of local configuration to see if IPA CA is enabled

2014-10-17 Thread Jan Cholasta
Dne 13.10.2014 v 14:48 Jan Cholasta napsal(a): Hi, the attached patches fix https://fedorahosted.org/freeipa/ticket/4621. Honza Rebased on top of current ipa-4-1, patches attached. -- Jan Cholasta From 02ee569148f9abf45e8188557a13d600323160b2 Mon Sep 17 00:00:00 2001 From: Jan Cholasta

Re: [Freeipa-devel] [PATCH] [WIP] DNSSEC support - preview

2014-10-17 Thread Petr Spacek
On 17.10.2014 10:08, Jan Cholasta wrote: Dne 16.10.2014 v 20:01 Petr Spacek napsal(a): On 16.10.2014 19:43, Jan Cholasta wrote: Dne 16.10.2014 v 17:59 Martin Basti napsal(a): On 10/10/14 09:17, Martin Kosek wrote: On 10/09/2014 03:57 PM, Petr Spacek wrote: Hello, it would be great if

Re: [Freeipa-devel] [PATCH 0071] Display token type when viewing token

2014-10-17 Thread Martin Kosek
On 10/16/2014 11:37 PM, Nathaniel McCallum wrote: On Thu, 2014-10-16 at 17:35 +0200, Martin Kosek wrote: On 10/15/2014 06:32 PM, Nathaniel McCallum wrote: When viewing a token from the CLI or UI, the type of the token should be displayed. https://fedorahosted.org/freeipa/ticket/4563 Adding

Re: [Freeipa-devel] [PATCH] 761 keytab manipulation permission management

2014-10-17 Thread Jan Cholasta
Dne 16.10.2014 v 20:28 Martin Kosek napsal(a): On 10/16/2014 07:03 PM, Petr Vobornik wrote: On 16.10.2014 11:53, Jan Cholasta wrote: Dne 16.10.2014 v 11:24 Petr Vobornik napsal(a): On 16.10.2014 09:54, Jan Cholasta wrote: Dne 13.10.2014 v 12:42 Petr Vobornik napsal(a): On 8.10.2014 18:51,

[Freeipa-devel] [PATCH] 131-132 extdom: add support for sss_nss_getorigbyname()

2014-10-17 Thread Sumit Bose
Hi, the first patch replaces sss_nss_getsidbyname() by sss_nss_getorigbyname() for the new version of the extdom interface. The new call returns more data about the original object and allows the IPA client to have the same information about the object in the SSSD cache as the IPA servers. The

[Freeipa-devel] [PATCH] 485 Remove changetype attribute from update plugin

2014-10-17 Thread Martin Kosek
The attribute addition had no effect, but it should not be there. Pushed as a one liner to: master: 588e7bc899c23af2633a3820a34b7c4545c0b27a ipa-4-1: 2e388552959d80e8fa89545695a16d3a48050a5e ipa-4-0: 889bf4ac7a0e06adebaaacb211d9b84e11129ac3 Martin From c0c43602284eabd85a43612a5e7110944288edd3

Re: [Freeipa-devel] [PATCH 0064] Create ipa-otp-decrement 389DS plugin

2014-10-17 Thread Martin Kosek
On 10/16/2014 11:53 PM, Nathaniel McCallum wrote: On Thu, 2014-10-16 at 21:02 +0200, Martin Kosek wrote: On 10/15/2014 09:22 AM, Martin Kosek wrote: On 10/14/2014 09:01 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 18:48 +0200, thierry bordaz wrote: On 10/09/2014 05:51 PM, Nathaniel

Re: [Freeipa-devel] [PATCHES] 354-356 Check LDAP instead of local configuration to see if IPA CA is enabled

2014-10-17 Thread David Kupka
On 10/17/2014 10:15 AM, Jan Cholasta wrote: Dne 13.10.2014 v 14:48 Jan Cholasta napsal(a): Hi, the attached patches fix https://fedorahosted.org/freeipa/ticket/4621. Honza Rebased on top of current ipa-4-1, patches attached. Works for me, ACK. It would be nice to also start tracking

Re: [Freeipa-devel] [PATCHES] 354-356 Check LDAP instead of local configuration to see if IPA CA is enabled

2014-10-17 Thread Martin Kosek
On 10/17/2014 12:42 PM, David Kupka wrote: On 10/17/2014 10:15 AM, Jan Cholasta wrote: Dne 13.10.2014 v 14:48 Jan Cholasta napsal(a): Hi, the attached patches fix https://fedorahosted.org/freeipa/ticket/4621. Honza Rebased on top of current ipa-4-1, patches attached. Works for me, ACK.

[Freeipa-devel] [PATCH] 778 dns: fix privileges' memberof during dns install

2014-10-17 Thread Petr Vobornik
Permissions with member attrs pointing to privileges are created before the privileges. Run memberof plugin task to fix other ends of the relationships. https://fedorahosted.org/freeipa/ticket/4637 -- Petr Vobornik From 65b5331ff693688225d06f023e357ff4bf87ec2c Mon Sep 17 00:00:00 2001 From:

Re: [Freeipa-devel] [PATCH] 761 keytab manipulation permission management

2014-10-17 Thread Petr Vobornik
On 17.10.2014 11:06, Jan Cholasta wrote: Dne 16.10.2014 v 20:28 Martin Kosek napsal(a): On 10/16/2014 07:03 PM, Petr Vobornik wrote: On 16.10.2014 11:53, Jan Cholasta wrote: Dne 16.10.2014 v 11:24 Petr Vobornik napsal(a): On 16.10.2014 09:54, Jan Cholasta wrote: Dne 13.10.2014 v 12:42 Petr

Re: [Freeipa-devel] [PATCH] 761 keytab manipulation permission management

2014-10-17 Thread Jan Cholasta
Dne 17.10.2014 v 13:48 Petr Vobornik napsal(a): On 17.10.2014 11:06, Jan Cholasta wrote: Dne 16.10.2014 v 20:28 Martin Kosek napsal(a): On 10/16/2014 07:03 PM, Petr Vobornik wrote: On 16.10.2014 11:53, Jan Cholasta wrote: Dne 16.10.2014 v 11:24 Petr Vobornik napsal(a): On 16.10.2014 09:54,

Re: [Freeipa-devel] [PATCH] 778 dns: fix privileges' memberof during dns install

2014-10-17 Thread Martin Kosek
On 10/17/2014 01:29 PM, Petr Vobornik wrote: Permissions with member attrs pointing to privileges are created before the privileges. Run memberof plugin task to fix other ends of the relationships. https://fedorahosted.org/freeipa/ticket/4637 This works fine, thanks. ACK. Pushed to:

Re: [Freeipa-devel] [PATCH] 761 keytab manipulation permission management

2014-10-17 Thread Petr Vobornik
On 17.10.2014 13:52, Jan Cholasta wrote: Thanks, ACK. rebased due to version change and pushed to: master: * 59ee6314afc7f0f7735ab1349caa970f0f00d78a keytab manipulation permission management * b69a8dad2ebd98516d36b1470fa27c0819b8a985 tests: management of keytab permissions ipa-4-1: *

Re: [Freeipa-devel] [PATCH] 766 idviews: error out if appling Default Trust View on hosts

2014-10-17 Thread Martin Kosek
On 10/10/2014 01:44 PM, Petr Vobornik wrote: CLI part of: https://fedorahosted.org/freeipa/ticket/4615 Works fine, ACK. Pushed to: master: 49fde3b047e63a549774a3354138102608855d77 ipa-4-1: 47811d1ccfd96bc4bc39bb649b91eb54286aefd6 Martin ___

Re: [Freeipa-devel] [PATCH] [WIP] DNSSEC support - preview

2014-10-17 Thread Simo Sorce
On Thu, 16 Oct 2014 21:55:39 +0200 Petr Spacek pspa...@redhat.com wrote: On 16.10.2014 21:32, Simo Sorce wrote: On Thu, 16 Oct 2014 20:39:05 +0200 Martin Kosek mko...@redhat.com wrote: On 10/16/2014 08:01 PM, Petr Spacek wrote: 1) I'm not sure if failing on DNSSEC-disabled

Re: [Freeipa-devel] [PATCH] 764 webui: management of keytab permissions

2014-10-17 Thread Petr Vobornik
On 8.10.2014 18:53, Petr Vobornik wrote: On 3.10.2014 16:12, Petr Vobornik wrote: On 1.10.2014 18:15, Petr Vobornik wrote: Hello list, Patch for: https://fedorahosted.org/freeipa/ticket/4419 Web UI for 4419. Depends on patch 761 (parent thread). New version which works with 761-2. The

Re: [Freeipa-devel] [PATCH] 772 webui: add new iduseroverride fields

2014-10-17 Thread Martin Kosek
On 10/10/2014 06:01 PM, Petr Vobornik wrote: - add gecos, gidnumber, loginshell, sshkeys fields depends on ab's 160-165. Point for discussion: Before this patch, all fields were included in adder dialog and were listed on a search pages. Now: * Search page lacks: gecos, gidnumber,

Re: [Freeipa-devel] [PATCH] 772 webui: add new iduseroverride fields

2014-10-17 Thread Petr Vobornik
On 17.10.2014 15:47, Martin Kosek wrote: On 10/10/2014 06:01 PM, Petr Vobornik wrote: - add gecos, gidnumber, loginshell, sshkeys fields depends on ab's 160-165. Point for discussion: Before this patch, all fields were included in adder dialog and were listed on a search pages. Now: * Search

Re: [Freeipa-devel] FreeIPA 4.0.4

2014-10-17 Thread Petr Vobornik
On 16.10.2014 10:41, Martin Kosek wrote: Hello all! I think we have all the bits and pieces ready to release next stabilization release of FreeIPA 4.0 - FreeIPA 4.0.4! There were a lot of bug fixes or minor enhancements, let us offer it for others to use. I created the first version of release

Re: [Freeipa-devel] [PATCH 0071] Display token type when viewing token

2014-10-17 Thread Nathaniel McCallum
On Fri, 2014-10-17 at 10:59 +0200, Martin Kosek wrote: On 10/16/2014 11:37 PM, Nathaniel McCallum wrote: On Thu, 2014-10-16 at 17:35 +0200, Martin Kosek wrote: On 10/15/2014 06:32 PM, Nathaniel McCallum wrote: When viewing a token from the CLI or UI, the type of the token should be

[Freeipa-devel] [PATCH 0073] Configure IPA OTP Last Token plugin on upgrade

2014-10-17 Thread Nathaniel McCallum
While working on the OTP Counter plugin I realized that the OTP Last Token plugin never gets configured during upgrades. This patch fixes this problem. From 872888692cb64e04d438542b620e1e6f2c44a194 Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum npmccal...@redhat.com Date: Fri, 17 Oct 2014

Re: [Freeipa-devel] [PATCH 0064] Create ipa-otp-decrement 389DS plugin

2014-10-17 Thread Nathaniel McCallum
On Fri, 2014-10-17 at 12:05 +0200, Martin Kosek wrote: On 10/16/2014 11:53 PM, Nathaniel McCallum wrote: On Thu, 2014-10-16 at 21:02 +0200, Martin Kosek wrote: On 10/15/2014 09:22 AM, Martin Kosek wrote: On 10/14/2014 09:01 PM, Nathaniel McCallum wrote: On Thu, 2014-10-09 at 18:48 +0200,

Re: [Freeipa-devel] [PATCH] 764 webui: management of keytab permissions

2014-10-17 Thread Endi Sukma Dewata
On 10/17/2014 8:36 AM, Petr Vobornik wrote: Server part has been pushed. Version which matches its API attached. ACK. -- Endi S. Dewata ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 765 webui: allow --force in dnszone-mod and dnsrecord-add

2014-10-17 Thread Endi Sukma Dewata
On 10/3/2014 11:48 AM, Petr Vobornik wrote: Allow to use --force when changing authoritative nameserver address in DNS zone. Same for dnsrecord-add for NS record. https://fedorahosted.org/freeipa/ticket/4573 ACK, just some minor issues: 1. The 'Check DNS' button might be interpreted as

Re: [Freeipa-devel] [PATCH] 482 Update contributors

2014-10-17 Thread Gabe Alford
Not sure I can do this, but ACK. Gabe On Wed, Sep 24, 2014 at 6:32 AM, Martin Kosek mko...@redhat.com wrote: Add missing developers contributing to project git. Cancel Past and Occcasional section and merge the people in the right categories. Update .mailmap so that the Developer list can

Re: [Freeipa-devel] [PATCH] 767-770 webui: hide applied to hosts tab for Default Trust View

2014-10-17 Thread Endi Sukma Dewata
On 10/10/2014 6:44 AM, Petr Vobornik wrote: Web UI part of: https://fedorahosted.org/freeipa/ticket/4615 Patch 767 is a little refactoring needed for $pre_op(as plain object) work as intended even with instantiated objects + fixes a bug where Evented objects were not considered a framework

Re: [Freeipa-devel] [PATCH] 771 webui: do not offer ipa users to Default Trust View

2014-10-17 Thread Endi Sukma Dewata
On 10/10/2014 6:45 AM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/4616 This patch does not apply. Does it depend on another patch? -- Endi S. Dewata ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 767-770 webui: hide applied to hosts tab for Default Trust View

2014-10-17 Thread Petr Vobornik
On 17.10.2014 22:51, Endi Sukma Dewata wrote: On 10/10/2014 6:44 AM, Petr Vobornik wrote: Web UI part of: https://fedorahosted.org/freeipa/ticket/4615 Patch 767 is a little refactoring needed for $pre_op(as plain object) work as intended even with instantiated objects + fixes a bug where