Re: [Freeipa-devel] [PATCH] Error message handling in HBAC module

2010-11-29 Thread Pavel Zuna
On 11/29/2010 11:20 AM, Jan Zelený wrote: This patch contains a part of my original 0008 patch. The rest of it is solved differently (see my patch 0010). ACK. Pavel ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 611 increase default username len

2010-11-29 Thread Rob Crittenden
David O'Brien wrote: Rob Crittenden wrote: Increase default username length to 32 and max for users and groups to 255. rob There doesn't appear to be a default max groupname length like there is for usernames. Does that mean it defaults to 255? /dob It just isn't configurable like

Re: [Freeipa-devel] [PATCH] build tweaks

2010-11-29 Thread Rob Crittenden
Nalin Dahyabhai wrote: The attached patch modifies autogen.sh so that it runs autoreconf with the -f flag, too, so that a source rpm package built on an F14 system will successfully build on a system which has older autotools versions. It also tells automake to run in its 'foreign' mode and

Re: [Freeipa-devel] [PATCH] 0100-top-nav-index

2010-11-29 Thread Endi Sukma Dewata
On 11/25/2010 8:24 PM, Adam Young wrote: Updated version that doesn't break SUDO or HBAC. The third level nesting in the tabs set is only used for this kind of navigation now, but should be used for Action panel shortly. Conditional ACK... :) There are some additional changes that need to be

Re: [Freeipa-devel] [PATCH] 0100-top-nav-index

2010-11-29 Thread Endi Sukma Dewata
On 11/29/2010 12:08 PM, Endi Sukma Dewata wrote: On 11/25/2010 8:24 PM, Adam Young wrote: Updated version that doesn't break SUDO or HBAC. The third level nesting in the tabs set is only used for this kind of navigation now, but should be used for Action panel shortly. Conditional ACK... :)

[Freeipa-devel] [PATCH] 620 add ipaUniqueId to UPGs

2010-11-29 Thread Rob Crittenden
Add ipaUniqueId to user private groups. If we didn't then when the group is detached we need to add it and this makes the acis more problematic. I had to move where we load the UPG ldif until after the restart so the schema is available. rob From c840ce52cead0979f18cb2bbcb748550557b1478 Mon

Re: [Freeipa-devel] [PATCH] 017 Init smods to prevent crash if encode_keys fails

2010-11-29 Thread Rob Crittenden
Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 If encode_keys() failed, we would free the variable smods which is unitilialized at the time. Ok, seems simple enough. Ack, pushed to master. btw I've seen encode_keys() fail on me during ber-encoding of the octet part of

Re: [Freeipa-devel] Host groups and netgroups

2010-11-29 Thread JR Aquino
On 11/24/10 11:19 AM, Dmitri Pal d...@redhat.com wrote: Hello, It is well known that with IPA we want to try to move people from the netgroups to host groups but many companies currently use netgroups as hostgroups. To simplify migration I suggest that we by default always create a managed

Re: [Freeipa-devel] [PATCH] Enable filtering search results by member attributes.

2010-11-29 Thread Rob Crittenden
Pavel Zůna wrote: LDAPSearch base class has now the ability to generate additional options for objects with member attributes. These options are used to filter search results - search only for objects without the specified members. Any class that extends LDAPSearch can benefit from this