Re: [Freeipa-devel] [PATCH] #333 plugin to change kerberos principal name when user is renamed

2010-10-26 Thread Simo Sorce
On Mon, 25 Oct 2010 20:27:04 -0400 Nalin Dahyabhai na...@redhat.com wrote: On Mon, Oct 25, 2010 at 06:59:18PM -0400, Simo Sorce wrote: I was meaning to ask you if we have any other way around. Is it possible to use a random salt instead of the principal name ? We do enforce

Re: [Freeipa-devel] [PATCH] whoami goodby

2010-10-26 Thread Simo Sorce
On Mon, 25 Oct 2010 20:38:04 -0400 Adam Young ayo...@redhat.com wrote: removal of the whoami plugin ACK -- Simo Sorce * Red Hat, Inc * New York ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 585 entitlement plugin

2010-10-26 Thread Simo Sorce
On Mon, 25 Oct 2010 14:26:47 -0400 Rob Crittenden rcrit...@redhat.com wrote: Add entitlement plugin for counting client entitlements. This just adds the capability to tie to a candlepin server or manually import entitlement certificates. The code to use these to count clients is still under

Re: [Freeipa-devel] [Fwd: [freeipa] #402: SUDO command attribute should be case sensitive]

2010-10-26 Thread Rob Crittenden
Dmitri Pal wrote: Dmitri Pal wrote: Simo Sorce wrote: On Wed, 20 Oct 2010 15:42:17 -0400 Dmitri Pald...@redhat.com wrote: Any suggestions what it should be? Should we create a new attribute or there is something handy to reuse? Probably makes sense to add a custom attribute, properly

[Freeipa-devel] [PATCH] 588 Removing HBAC service nesting

2010-10-26 Thread Rob Crittenden
Remove group nesting from the HBAC service groups. ticket https://fedorahosted.org/freeipa/ticket/389 rob rcrit-freeipa-588-hbac.patch Description: application/mbox ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] Proposed standard for Patches: RFC

2010-10-26 Thread Simo Sorce
On Tue, 26 Oct 2010 13:40:11 -0400 Adam Young ayo...@redhat.com wrote: We've been doing this informally for a while, and I think, if we all agree to the format, it will help keep track of patches, ACKs, and commits. 1. Patch naming Example patch name:

Re: [Freeipa-devel] [PATCH] 588 Removing HBAC service nesting

2010-10-26 Thread Adam Young
On 10/26/2010 01:59 PM, Rob Crittenden wrote: Remove group nesting from the HBAC service groups. ticket https://fedorahosted.org/freeipa/ticket/389 rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

[Freeipa-devel] [PATCH] 590 error out when missing headers

2010-10-26 Thread Rob Crittenden
Error out of configure when it finds some missing headers. rob rcrit-freeipa-590-configure.patch Description: application/mbox ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] Proposed standard for Patches: RFC

2010-10-26 Thread Simo Sorce
On Tue, 26 Oct 2010 14:22:01 -0400 Adam Young ayo...@redhat.com wrote: On 10/26/2010 02:08 PM, Simo Sorce wrote: On Tue, 26 Oct 2010 13:40:11 -0400 Adam Youngayo...@redhat.com wrote: We've been doing this informally for a while, and I think, if we all agree to the format, it

Re: [Freeipa-devel] [PATCH] 590 error out when missing headers

2010-10-26 Thread Rob Crittenden
Simo Sorce wrote: On Tue, 26 Oct 2010 15:16:04 -0400 Rob Crittendenrcrit...@redhat.com wrote: Error out of configure when it finds some missing headers. rob ACK pushed to master ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] admiyo-freeipa-0068-association-header.patch

2010-10-26 Thread Endi Sukma Dewata
On 10/25/2010 8:39 PM, Adam Young wrote: https://fedorahosted.org/freeipa/ticket/338 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel ACKed and pushed to master. -- Endi S. Dewata

Re: [Freeipa-devel] Proposed standard for Patches: RFC

2010-10-26 Thread Adam Young
On 10/26/2010 03:29 PM, Simo Sorce wrote: On Tue, 26 Oct 2010 14:22:01 -0400 Adam Youngayo...@redhat.com wrote: On 10/26/2010 02:08 PM, Simo Sorce wrote: On Tue, 26 Oct 2010 13:40:11 -0400 Adam Youngayo...@redhat.com wrote: We've been doing this informally for a while,

Re: [Freeipa-devel] Proposed standard for Patches: RFC

2010-10-26 Thread Simo Sorce
On Tue, 26 Oct 2010 16:26:13 -0400 Adam Young ayo...@redhat.com wrote: I'll admit this would be useful, but it would be another process that we don't have now, that I was trying to avoid. We all have git repos on fedorapeople. The trick is to deal with patches that have to get changed

[Freeipa-devel] RFC wrt little snag in LDAPCreate when ipa_uuid manipulates the DN on entry add

2010-10-26 Thread Simo Sorce
So, I have been working on this ipa_uuid plugin as of late and one of the last tasks was to let it modify the RDN if ipaUniqueID is part of the DN of an entry we want to create. Example: dn: ipauniqueid=autogenerate,cn=hbac,dc=... cn: foo rule hbactype: allow ... 'autogenerate' is the magic