Re: [Freeipa-devel] [PATCH] 601 rename 60sudo.ldif

2010-11-09 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/04/2010 08:56 PM, Rob Crittenden wrote: Rename 60sudo.ldif to 60ipasudo.ldif. We are overwriting a file of the same name from the default 389-ds schema. rob Ack -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment:

Re: [Freeipa-devel] [PATCH] 603 add examples to ipa-replica-install man page

2010-11-09 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/04/2010 10:38 PM, Rob Crittenden wrote: Add a couple of examples in ipa-replica-install.1 in an effort to clarify where one does a re-init. rob Ack -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG

Re: [Freeipa-devel] [PATCH] 602 verify --ip-address option during installation

2010-11-09 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/04/2010 10:00 PM, Rob Crittenden wrote: There was a corner case where the value of --ip-address was never verified if you were also setting up DNS. Added this bit of information to the man page too. ticket 399 rob Two questions: 1)

Re: [Freeipa-devel] [PATCHES] add (initial) anonymous pkinit support

2010-11-09 Thread Simo Sorce
On Mon, 8 Nov 2010 19:34:12 -0500 Simo Sorce sso...@redhat.com wrote: This set of patches implement the first part of ticket #55 The patchset only adds the ability to install pkinit with the selfsigned CA (or with externally provided certs). If you need to use/test dogtag you can pass the

[Freeipa-devel] [PATCH] 011 Use sys.exit to quit scripts

2010-11-09 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Instead of print and return, use sys.exit() to quit scripts with an error message and a non zero return code. https://fedorahosted.org/freeipa/ticket/425 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with

Re: [Freeipa-devel] [PATCH] 600 fix ipa-nis-manage

2010-11-09 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/04/2010 08:28 PM, Rob Crittenden wrote: ipa-nis-manage was broken because of a signature change to ldap2.getentry(). Two new arguments were added before normalize and a call to this in ipa-nis-manage was relying on positional arguments. This

Re: [Freeipa-devel] [PATCH] 0002 Rewrite the migration page using WSGI

2010-11-09 Thread Rob Crittenden
Rob Crittenden wrote: Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 (resending to the list, I accidentally replied to Rob only before..) On 11/02/2010 04:24 AM, Rob Crittenden wrote: Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1

Re: [Freeipa-devel] [PATCH] 601 rename 60sudo.ldif

2010-11-09 Thread Rob Crittenden
Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/04/2010 08:56 PM, Rob Crittenden wrote: Rename 60sudo.ldif to 60ipasudo.ldif. We are overwriting a file of the same name from the default 389-ds schema. rob Ack pushed to master

[Freeipa-devel] [PATCH] 607 add managedby to hosts

2010-11-09 Thread Rob Crittenden
This will let one host do things on behalf of another host (request a keytab, certificate, etc). ticket https://fedorahosted.org/freeipa/ticket/280 rob From 9e9ae1b890c324f05af71540763631a6e91c2a06 Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com Date: Tue, 9 Nov 2010 13:57:02

Re: [Freeipa-devel] [PATCH] 011 Use sys.exit to quit scripts

2010-11-09 Thread Rob Crittenden
Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Instead of print and return, use sys.exit() to quit scripts with an error message and a non zero return code. https://fedorahosted.org/freeipa/ticket/425 This isn't applying for me. Can you try to rebase it? thanks rob

Re: [Freeipa-devel] [PATCH] Replace 'Locking' in `ipa help user` with 'Disabling'.

2010-11-09 Thread Rob Crittenden
Pavel Zůna wrote: Ticket #452 Pavel ack, pushed to master ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [PATCH] admiyo-0080-Label-cleanup

2010-11-09 Thread Adam Young
From 011b2db628a8239bf5a8da9989c6c026b6f017a6 Mon Sep 17 00:00:00 2001 From: Adam Young ayo...@redhat.com Date: Tue, 9 Nov 2010 14:13:39 -0500 Subject: [PATCH] Label cleanup Also, addeed in the default shell field. --- install/static/user.js | 26 +- 1 files changed,

Re: [Freeipa-devel] [PATCH] 607 add managedby to hosts

2010-11-09 Thread Simo Sorce
On Tue, 09 Nov 2010 14:00:00 -0500 Rob Crittenden rcrit...@redhat.com wrote: + + Add a host that can manage this host's keytab and certificate: + ipa host-add-host --hosts=test2 test I do not want to nack, but looking at this command in isolation I am quite confused at what it is

Re: [Freeipa-devel] [PATCH] Use stronmgest enctype for master key

2010-11-09 Thread Rob Crittenden
Rob Crittenden wrote: Simo Sorce wrote: This patch configures IPA to use the currently strongest available enctype for the master key. Fixes #456 Simo. ack pushed to master ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCHES] add (initial) anonymous pkinit support

2010-11-09 Thread Simo Sorce
On Mon, 8 Nov 2010 19:34:12 -0500 Simo Sorce sso...@redhat.com wrote: Patch 0004: Add basic certification creation for selfsigned CA and KDC configuration. opnessl had to be used because the NSS tools cannot deal with the special subjectaltName needed for the KDC certificate. Rebased this one

Re: [Freeipa-devel] [PATCH] 004 Log script options to logfile

2010-11-09 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/09/2010 07:28 PM, Rob Crittenden wrote: Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/08/2010 09:12 PM, Jakub Hrozek wrote: This patch is fine as-is so I'll give you a choice: 1. You can update this patch and

Re: [Freeipa-devel] [PATCH] 0002 Rewrite the migration page using WSGI

2010-11-09 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/09/2010 07:26 PM, Rob Crittenden wrote: Rob Crittenden wrote: Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 (resending to the list, I accidentally replied to Rob only before..) On 11/02/2010 04:24 AM, Rob Crittenden

[Freeipa-devel] [PATCH] 608 fix rights with pwpolicy plugin

2010-11-09 Thread Rob Crittenden
The pwpolicy plugin wasn't returning effective rights. I fixed that and it will also return the rights for cospriority if showing a group. rob From 624ee8daeb26c420722d11e6f37af315e4922847 Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com Date: Tue, 9 Nov 2010 16:05:54 -0500

Re: [Freeipa-devel] [PATCH] Add new version of DNS plugin: complete rework with baseldap + unit tests.

2010-11-09 Thread Adam Young
On 11/08/2010 11:07 PM, Pavel Zůna wrote: Finally, there it is. :) I redesigned the whole thing to fit the baseldap model. Here's some example on how it's used: # create zone 'example.com' # ipa dnszone-add example.com --name=ns.example.com --admin=ad...@example.com # create a resource in