Re: [Freeipa-devel] [PATCH] Enable filtering search results by member attributes.

2010-12-09 Thread Pavel Zuna
On 12/08/2010 08:30 PM, Rob Crittenden wrote: Pavel Zůna wrote: On 2010-11-30 04:06, Rob Crittenden wrote: Pavel Zůna wrote: LDAPSearch base class has now the ability to generate additional options for objects with member attributes. These options are used to filter search results - search

Re: [Freeipa-devel] [PATCH/0027] Configure ntp as the first thing

2010-12-09 Thread Simo Sorce
On Thu, 9 Dec 2010 10:37:47 +0100 Jan Zelený jzel...@redhat.com wrote: Simo Sorce sso...@redhat.com wrote: We must insure as much as possible that the time is correct on the system before installing any component to avoid bad dates in certs, ds entries and krb keys. Fixes bug #595

[Freeipa-devel] [PATCH] Introduce new env variable, enable_dns=True, if IPA is managing DNS.

2010-12-09 Thread Pavel Zuna
if api.env.enable_dns: print DNS is managed by IPA ipa env | grep enable_dns: True /devnull echo DNS is managed by IPA Ticket #600 Pavel From d6031a2bbb1bb5d4b0520d6d56fc4716c3ef2242 Mon Sep 17 00:00:00 2001 From: Pavel Zuna pz...@redhat.com Date: Thu, 9 Dec 2010 13:10:36

Re: [Freeipa-devel] [PATCH] 0025 Restructure startup code for IPA servers

2010-12-09 Thread Jakub Hrozek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/07/2010 05:53 PM, Simo Sorce wrote: With this patch we stop relying on the system to init single ipa components and instead introduce a ipa init script that takes care of properly starting/stopping all relevant components. Components are

Re: [Freeipa-devel] [PATCH] 0025 Restructure startup code for IPA servers

2010-12-09 Thread Simo Sorce
On Thu, 09 Dec 2010 15:00:21 +0100 Jakub Hrozek jhro...@redhat.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/07/2010 05:53 PM, Simo Sorce wrote: With this patch we stop relying on the system to init single ipa components and instead introduce a ipa init script that

Re: [Freeipa-devel] [PATCH] 635 wait for memberof plugin when doing reverse members

2010-12-09 Thread Rob Crittenden
Jan Zelený wrote: Rob Crittendenrcrit...@redhat.com wrote: Give the memberof plugin time to work when adding/removing reverse members. When we add/remove reverse members it looks like we're operating on group A but we're really operating on group B. This adds/removes the member attribute on

Re: [Freeipa-devel] [PATCH] 636 Properly handle multi-valued attributes when using setattr/addattr

2010-12-09 Thread Rob Crittenden
Jan Zelený wrote: Rob Crittendenrcrit...@redhat.com wrote: The problem was that the normalizer was returning each value as a tuple which we were then appending to a list, so it looked like [(u'value1',), (u'value2',),...]. If there was a single value we could end up adding a tuple to a list

Re: [Freeipa-devel] [PATCH] Introduce new env variable, enable_dns=True, if IPA is managing DNS.

2010-12-09 Thread Dmitri Pal
Question: Do we support situation when one replica has DNS and another does not? In other words is DNS integration an instance property or a domain property? I do not know is it a good or a bad thing but if it is per instance the UI/CLI from the same client will act differently depending on the

Re: [Freeipa-devel] [PATCH] Introduce new env variable, enable_dns=True, if IPA is managing DNS.

2010-12-09 Thread Adam Young
On 12/09/2010 09:17 AM, Dmitri Pal wrote: Question: Do we support situation when one replica has DNS and another does not? In other words is DNS integration an instance property or a domain property? I do not know is it a good or a bad thing but if it is per instance the UI/CLI from the same

Re: [Freeipa-devel] [PATCH] sudo and netgroup schema compat updates

2010-12-09 Thread JR Aquino
On 12/9/10 10:03 AM, Dmitri Pal d...@redhat.com wrote: Nalin Dahyabhai wrote: On Wed, Dec 08, 2010 at 11:12:34PM +, JR Aquino wrote: I guess the piece that is still missing then is: Instead of: sudoHost: hostname.com It should be: sudoHost: +production - which is the group

Re: [Freeipa-devel] [PATCH] sudo and netgroup schema compat updates

2010-12-09 Thread Dmitri Pal
JR Aquino wrote: On 12/9/10 10:03 AM, Dmitri Pal d...@redhat.com wrote: Nalin Dahyabhai wrote: On Wed, Dec 08, 2010 at 11:12:34PM +, JR Aquino wrote: I guess the piece that is still missing then is: Instead of: sudoHost: hostname.com It should be: sudoHost:

Re: [Freeipa-devel] [PATCH] sudo and netgroup schema compat updates

2010-12-09 Thread Dmitri Pal
JR Aquino wrote: I think this is how it is designed right now. The migration to host groups will be slow and painful. I think that approach we planned covers all main use cases and provides enough flexibility for administrators transition from old models and concepts to the new ones. There

Re: [Freeipa-devel] [PATCH] 632 add migration cmd docs

2010-12-09 Thread Rob Crittenden
Jakub Hrozek wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/07/2010 05:50 PM, Rob Crittenden wrote: Add some documentation to the migrate-ds command. rob Ack pushed to master ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 638 be smarter with alwaysask option

2010-12-09 Thread Rob Crittenden
Jan Zelený wrote: Rob Crittendenrcrit...@redhat.com wrote: The alwaysask option for params was meant to prompt for things that are needed but not strictly required, like when adding members to a group. We don't need to prompt if something is provided on the command-line though. ticket 604

Re: [Freeipa-devel] [PATCH] sudo and netgroup schema compat updates

2010-12-09 Thread JR Aquino
On 12/9/10 11:59 AM, Dmitri Pal d...@redhat.com wrote: http://www.freeipa.org/page/SUDO_Schema_Design#Why_we_must_support_netgrou ps_in_the_SUDO_rules.3F Last paragraph of the section. Also see last open question and answer to it on the page :-) However... read further... Ah Ha! I just talked

Re: [Freeipa-devel] [PATCH] sudo and netgroup schema compat updates

2010-12-09 Thread Nalin Dahyabhai
On Thu, Dec 09, 2010 at 02:59:55PM -0500, Dmitri Pal wrote: 1) Adjust the compat plugin as described above Attached for testing. Patch 0001 we've seen before; 0002's new. Nalin From 1afcb4d6163f5b8137cb1f2e832714e046345ca7 Mon Sep 17 00:00:00 2001 From: Nalin Dahyabhai na...@redhat.com Date:

Re: [Freeipa-devel] [PATCH] SUDO adjustments

2010-12-09 Thread Adam Young
On 12/09/2010 10:31 AM, Endi Sukma Dewata wrote: Hi, Please review the attached patch. Thanks! https://fedorahosted.org/reviewboard/r/114/ The SUDO rule details facet has been updated to support the latest UI spec. The facet consists of 5 sections: general, users, hosts, commands, and run-as.

Re: [Freeipa-devel] [PATCH] Section header prefix update

2010-12-09 Thread Adam Young
On 12/09/2010 11:54 AM, Endi Sukma Dewata wrote: Hi, Please review the attached patch. This should fix this ticket: https://fedorahosted.org/freeipa/ticket/552 The '+' and '-' signs before the section headers in details facet are now enclosed in square brackets. The section content is now

[Freeipa-devel] [PATCH] Account activation adjustment

2010-12-09 Thread Endi Sukma Dewata
Hi, Please review the attached patch. This should fix this bug: https://fedorahosted.org/freeipa/ticket/462 The user details facet has been modified such that when the account is activated/deactivated the page will be reloaded. Some methods in the framework have been changed: - The

[Freeipa-devel] [PATCH] admiyo-0114-Section-header-prefix-update

2010-12-09 Thread Adam Young
This patch was mostly done by Kyle Baker. I just rebased it by hand. Need to change the authorship on it. From 0938fb70eeb69d7bcc0f54a99d7650c166a1a88d Mon Sep 17 00:00:00 2001 From: Endi S. Dewata edew...@redhat.com Date: Thu, 9 Dec 2010 10:43:21 -0600 Subject: [PATCH] Section header prefix

Re: [Freeipa-devel] [PATCH] Account activation adjustment

2010-12-09 Thread Endi Sukma Dewata
On 12/9/2010 3:17 PM, Endi Sukma Dewata wrote: Please review the attached patch. This should fix this bug: https://fedorahosted.org/freeipa/ticket/462 The user details facet has been modified such that when the account is activated/deactivated the page will be reloaded. Some methods in the

[Freeipa-devel] [PATCH 5] managed entry hostgroup netgroup support

2010-12-09 Thread JR Aquino
These 2 patches address all of the items within (https://fedorahosted.org/freeipa/ticket/543) Included are: * ldif for the hostgroup -to- netgroup Managed Entry Plugin * dsinstance modifications to correctly install the ldif * management script (ipa-host-net-manage) * man page for documentation