Re: [Freeipa-devel] [PATCH] 091 Improve long integer type validation

2011-07-18 Thread Martin Kosek
On Fri, 2011-07-15 at 17:26 -0400, Rob Crittenden wrote: Martin Kosek wrote: Passing a number of long type to IPA Int parameter invokes user-unfriendly error message about incompatible types. This patch improves Int parameter with user understandable message along with maximum value he

Re: [Freeipa-devel] [PATCH] 088 Check IPA configuration in install tools

2011-07-18 Thread Martin Kosek
On Fri, 2011-07-15 at 10:14 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2011-06-22 at 18:03 -0400, Rob Crittenden wrote: Martin Kosek wrote: Install tools may fail with unexpected error when IPA server is not installed on a system. Improve user experience by implementing a

Re: [Freeipa-devel] [PATCH] 817 Add option to wait for values

2011-07-18 Thread Martin Kosek
On Sun, 2011-07-17 at 17:42 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Tue, 2011-07-05 at 13:41 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: 389-ds postop plugins, such as the managed entry and memberof plugins, add values

Re: [Freeipa-devel] [PATCH] 824 make more sensible nicknames

2011-07-18 Thread Jan Cholasta
On 11.7.2011 23:48, Rob Crittenden wrote: When loading a chained CA from a PKCS#7 or PEM file we used to use very generic nicknames, sometimes as bad as Imported CA in the case of winsync. This will use the subject of the cert to get the nickname instead. I also extended the API of some of the

Re: [Freeipa-devel] [PATCH] 826 fix failing memberof tests

2011-07-18 Thread Jan Cholasta
On 15.7.2011 23:20, Rob Crittenden wrote: With the recent object_name/label changes some tests were failing that were expecting the old value which contained a space. This fixes them. rob ACK. Honza -- Jan Cholasta ___ Freeipa-devel mailing list

[Freeipa-devel] [PATCH] 096 Fix ipa-dns-install incorrect warning

2011-07-18 Thread Martin Kosek
ipa-dns-install incorrectly warns about non-local IP addresses when installing without --ip-address parameter. https://fedorahosted.org/freeipa/ticket/1486 From befac1fc7221cddae0fbda67c4a72297b5377906 Mon Sep 17 00:00:00 2001 From: Martin Kosek mko...@redhat.com Date: Mon, 18 Jul 2011 12:54:03

Re: [Freeipa-devel] [PATCH] 096 Fix ipa-dns-install incorrect warning

2011-07-18 Thread Jan Cholasta
On 18.7.2011 12:56, Martin Kosek wrote: ipa-dns-install incorrectly warns about non-local IP addresses when installing without --ip-address parameter. https://fedorahosted.org/freeipa/ticket/1486 IMO the warning message should be removed from parse_ip_address altogether, as the local IP

Re: [Freeipa-devel] [PATCH] 088 Check IPA configuration in install tools

2011-07-18 Thread Jan Cholasta
On 18.7.2011 09:41, Martin Kosek wrote: On Fri, 2011-07-15 at 10:14 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2011-06-22 at 18:03 -0400, Rob Crittenden wrote: Martin Kosek wrote: Install tools may fail with unexpected error when IPA server is not installed on a system. Improve

Re: [Freeipa-devel] [PATCH] 088 Check IPA configuration in install tools

2011-07-18 Thread Martin Kosek
On Mon, 2011-07-18 at 14:35 +0200, Jan Cholasta wrote: On 18.7.2011 09:41, Martin Kosek wrote: On Fri, 2011-07-15 at 10:14 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2011-06-22 at 18:03 -0400, Rob Crittenden wrote: Martin Kosek wrote: Install tools may fail with unexpected

Re: [Freeipa-devel] [PATCH] 088 Check IPA configuration in install tools

2011-07-18 Thread Jan Cholasta
On 18.7.2011 15:00, Martin Kosek wrote: On Mon, 2011-07-18 at 14:35 +0200, Jan Cholasta wrote: On 18.7.2011 09:41, Martin Kosek wrote: On Fri, 2011-07-15 at 10:14 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2011-06-22 at 18:03 -0400, Rob Crittenden wrote: Martin Kosek wrote:

Re: [Freeipa-devel] [PATCH] 091 Improve long integer type validation

2011-07-18 Thread Rob Crittenden
Martin Kosek wrote: On Fri, 2011-07-15 at 17:26 -0400, Rob Crittenden wrote: Martin Kosek wrote: Passing a number of long type to IPA Int parameter invokes user-unfriendly error message about incompatible types. This patch improves Int parameter with user understandable message along with

Re: [Freeipa-devel] [PATCH] 091 Improve long integer type validation

2011-07-18 Thread Martin Kosek
On Mon, 2011-07-18 at 09:43 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-07-15 at 17:26 -0400, Rob Crittenden wrote: Martin Kosek wrote: Passing a number of long type to IPA Int parameter invokes user-unfriendly error message about incompatible types. This patch

[Freeipa-devel] [PATCH] 32 Don't delete NIS netgroup compat suffix on 'ipa-nis-manage disable'

2011-07-18 Thread Jan Cholasta
https://fedorahosted.org/freeipa/ticket/1469 Honza -- Jan Cholasta ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 825 add dogtag replication management

2011-07-18 Thread Rob Crittenden
Jan Cholasta wrote: On 15.7.2011 21:24, Rob Crittenden wrote: Rich Megginson wrote: On 07/15/2011 10:57 AM, Rob Crittenden wrote: Rich Megginson wrote: On 07/15/2011 08:01 AM, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-07-15 at 14:43 +0200, Jan Cholasta wrote: On 15.7.2011

Re: [Freeipa-devel] [PATCH] 825 add dogtag replication management

2011-07-18 Thread Rich Megginson
On 07/18/2011 09:34 AM, Rob Crittenden wrote: Jan Cholasta wrote: On 15.7.2011 21:24, Rob Crittenden wrote: Rich Megginson wrote: On 07/15/2011 10:57 AM, Rob Crittenden wrote: Rich Megginson wrote: On 07/15/2011 08:01 AM, Rob Crittenden wrote: Martin Kosek wrote: On Fri, 2011-07-15 at

[Freeipa-devel] [PATCH] 208 Entity select widget improvements

2011-07-18 Thread Endi Sukma Dewata
The IPA.entity_select_widget has been modified into a searchable and editable drop down list. Ticket #1361 -- Endi S. Dewata From 5affc4f0a2748a1882b4f883b657ffcc5bfbf7d5 Mon Sep 17 00:00:00 2001 From: Endi S. Dewata edew...@redhat.com Date: Fri, 15 Jul 2011 12:18:59 -0500 Subject: [PATCH]

Re: [Freeipa-devel] [PATCH] 25 Update minimum required version of python-netaddr

2011-07-18 Thread Jakub Hrozek
On 07/01/2011 09:04 PM, Jan Cholasta wrote: On 1.7.2011 16:34, Jakub Hrozek wrote: On 07/01/2011 06:35 AM, Jan Cholasta wrote: On 28.6.2011 16:14, Jakub Hrozek wrote: On 06/28/2011 08:52 AM, Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/1288 Honza I gather this is done in

Re: [Freeipa-devel] [PATCH] 823 validate certificate subject base

2011-07-18 Thread Rob Crittenden
Martin Kosek wrote: On Thu, 2011-07-07 at 12:02 -0400, Rob Crittenden wrote: Use John's new DN class to verify that the subject base passed into ipa-server-install is valid. https://fedorahosted.org/freeipa/ticket/1176 rob Works fine for basic errors. But what if the DN is syntactically

Re: [Freeipa-devel] [PATCH] 823 validate certificate subject base

2011-07-18 Thread Martin Kosek
On Mon, 2011-07-18 at 12:08 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-07-07 at 12:02 -0400, Rob Crittenden wrote: Use John's new DN class to verify that the subject base passed into ipa-server-install is valid. https://fedorahosted.org/freeipa/ticket/1176 rob

Re: [Freeipa-devel] [PATCH] 32 Don't delete NIS netgroup compat suffix on 'ipa-nis-manage disable'

2011-07-18 Thread Martin Kosek
On Mon, 2011-07-18 at 17:16 +0200, Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/1469 Honza The patch is missing. Martin ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 823 validate certificate subject base

2011-07-18 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2011-07-18 at 12:08 -0400, Rob Crittenden wrote: Martin Kosek wrote: On Thu, 2011-07-07 at 12:02 -0400, Rob Crittenden wrote: Use John's new DN class to verify that the subject base passed into ipa-server-install is valid.

Re: [Freeipa-devel] [PATCH] 824 make more sensible nicknames

2011-07-18 Thread Rob Crittenden
Jan Cholasta wrote: On 11.7.2011 23:48, Rob Crittenden wrote: When loading a chained CA from a PKCS#7 or PEM file we used to use very generic nicknames, sometimes as bad as Imported CA in the case of winsync. This will use the subject of the cert to get the nickname instead. I also extended

Re: [Freeipa-devel] [PATCH] 826 fix failing memberof tests

2011-07-18 Thread Rob Crittenden
Jan Cholasta wrote: On 15.7.2011 23:20, Rob Crittenden wrote: With the recent object_name/label changes some tests were failing that were expecting the old value which contained a space. This fixes them. rob ACK. Honza pushed to master ___

Re: [Freeipa-devel] [PATCH] 825 add dogtag replication management

2011-07-18 Thread Rob Crittenden
Rich Megginson wrote: On 07/18/2011 09:34 AM, Rob Crittenden wrote: Jan Cholasta wrote: On 15.7.2011 21:24, Rob Crittenden wrote: Rich Megginson wrote: On 07/15/2011 10:57 AM, Rob Crittenden wrote: Rich Megginson wrote: On 07/15/2011 08:01 AM, Rob Crittenden wrote: Martin Kosek wrote: On

Re: [Freeipa-devel] [PATCH] 827 change subject of RA

2011-07-18 Thread Rob Crittenden
Simo Sorce wrote: On Sun, 2011-07-17 at 17:45 -0400, Rob Crittenden wrote: Change the subject of the RA to not confuse dogtag users. We used 'RA Subsystem' and this might confuse some to think we're using the dogtag RA which we are not. This won't affect existing installations, only new ones.

Re: [Freeipa-devel] [PATCH] 828 set plugin precedence

2011-07-18 Thread Rob Crittenden
Simo Sorce wrote: On Sun, 2011-07-17 at 17:46 -0400, Rob Crittenden wrote: The default precedence of slapi plugins is 50 and all of them (ours and the 389-ds plugins) all have this level with the exception of one (Retro changelog). The IPA modrdn plugin should run after all of these so I've

Re: [Freeipa-devel] [PATCH] 829 Generate a database password by default

2011-07-18 Thread Rob Crittenden
Simo Sorce wrote: On Sun, 2011-07-17 at 17:47 -0400, Rob Crittenden wrote: If the password passed in when creating a NSS certificate database is None then a random password is generated. If it is empty ('') then an empty password is set. Because of this the HTTP instance on replicas were

Re: [Freeipa-devel] [PATCH] 25 Update minimum required version of python-netaddr

2011-07-18 Thread Rob Crittenden
Jakub Hrozek wrote: On 07/01/2011 09:04 PM, Jan Cholasta wrote: On 1.7.2011 16:34, Jakub Hrozek wrote: On 07/01/2011 06:35 AM, Jan Cholasta wrote: On 28.6.2011 16:14, Jakub Hrozek wrote: On 06/28/2011 08:52 AM, Jan Cholasta wrote: https://fedorahosted.org/freeipa/ticket/1288 Honza I

Re: [Freeipa-devel] [PATCH] 208 Entity select widget improvements

2011-07-18 Thread Endi Sukma Dewata
On 7/18/2011 11:52 AM, Endi Sukma Dewata wrote: On 7/18/2011 10:44 AM, Endi Sukma Dewata wrote: The IPA.entity_select_widget has been modified into a searchable and editable drop down list. Ticket #1361 Fixed z-index problem and renamed base class to IPA.combobox_widget. Included new icon

Re: [Freeipa-devel] [PATCH] 208 Entity select widget improvements

2011-07-18 Thread Adam Young
On 07/18/2011 02:39 PM, Endi Sukma Dewata wrote: On 7/18/2011 11:52 AM, Endi Sukma Dewata wrote: On 7/18/2011 10:44 AM, Endi Sukma Dewata wrote: The IPA.entity_select_widget has been modified into a searchable and editable drop down list. Ticket #1361 Fixed z-index problem and renamed base

Re: [Freeipa-devel] [PATCH] 3 ipa-client-install tries to start non-existing nscd

2011-07-18 Thread Alexander Bokovoy
On 15.07.2011 22:41, Rob Crittenden wrote: Alexander Bokovoy wrote: nack. I don't believe this fixes the reported problem. This patch affects un-installation in which case whether sssd was selected or not doesn't matter, we're just trying to restore the previous state (so tangentially

[Freeipa-devel] [PATCH] 209 Removed reverse zones from host adder dialog.

2011-07-18 Thread Endi Sukma Dewata
The host adder dialog has been modified to specify the new flag for retrieving the forward zones only. Ticket #1458 -- Endi S. Dewata From abea002ce23b74db537103658bfbb8a147e2c39e Mon Sep 17 00:00:00 2001 From: Endi S. Dewata edew...@redhat.com Date: Mon, 18 Jul 2011 11:42:22 -0500 Subject:

[Freeipa-devel] [PATCH] 35 remove escapes from the cvs parser in ipaserver/install/ldapupdate

2011-07-18 Thread JR Aquino
On Jul 18, 2011, at 1:08 PM, wrote: https://fedorahosted.org/freeipa/ticket/1472 Changeset 8e086fd7b8c1edd0ccfec527c0699d396a7954f9 introduced a bug with ldapupdate resulting in incorrect handling of uldif files. Particularly the schema_compat.uldif.

[Freeipa-devel] 35 remove escapes from the cvs parser in ipaserver/install/ldapupdate

2011-07-18 Thread JR Aquino
https://fedorahosted.org/freeipa/ticket/1472 Changeset 8e086fd7b8c1edd0ccfec527c0699d396a7954f9 introduced a bug with ldapupdate resulting in incorrect handling of uldif files. Particularly the schema_compat.uldif. binyrC3uyjN7A.bin Description:

[Freeipa-devel] [PATCH] 210 Fixed host details fields.

2011-07-18 Thread Endi Sukma Dewata
The host details facet has been fixed to remove a redundant field and include some missing fields. Ticket #1484 -- Endi S. Dewata From 3e3efd2c92454513f004e8c9ae00fe6fd14d842e Mon Sep 17 00:00:00 2001 From: Endi S. Dewata edew...@redhat.com Date: Mon, 18 Jul 2011 15:07:18 -0500 Subject: [PATCH]

Re: [Freeipa-devel] [PATCH] 209 Removed reverse zones from host adder dialog.

2011-07-18 Thread Adam Young
On 07/18/2011 03:16 PM, Endi Sukma Dewata wrote: The host adder dialog has been modified to specify the new flag for retrieving the forward zones only. Ticket #1458 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 210 Fixed host details fields.

2011-07-18 Thread Adam Young
On 07/18/2011 04:13 PM, Endi Sukma Dewata wrote: The host details facet has been fixed to remove a redundant field and include some missing fields. Ticket #1484 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

[Freeipa-devel] [PATCH] specify ds-replication plugin by name

2011-07-18 Thread Rob Crittenden
Like bind and bind-dyndb-ldap specify the replication package by name when it is not found. Pushed under the 1-liner rule. diff --git a/ipaserver/install/replication.py b/ipaserver/install/replication.py index da8e749..7186a18 100644 --- a/ipaserver/install/replication.py +++

Re: [Freeipa-devel] [PATCH] 091 Improve long integer type validation

2011-07-18 Thread Adam Young
On 07/15/2011 05:26 PM, Rob Crittenden wrote: Martin Kosek wrote: Passing a number of long type to IPA Int parameter invokes user-unfriendly error message about incompatible types. This patch improves Int parameter with user understandable message along with maximum value he can pass.

[Freeipa-devel] [PATCH] 36 Removed RunAs External Group is removed in the output when --all switch is used.

2011-07-18 Thread JR Aquino
https://fedorahosted.org/freeipa/ticket/1348 Corrected behavior for ipa sudorule-remove-runasgroup rule1 --groups=tgroup2 --all binTRh8Wcv8ho.bin Description: freeipa-jraquino-0036-Removed-RunAs-External-Group-is-removed-in-the-output.patch ___

[Freeipa-devel] [PATCH] 37 Correct sudo runasuser and runasgroup attributes in schema

2011-07-18 Thread JR Aquino
https://fedorahosted.org/freeipa/ticket/1309 Added .update file to correct the sudo schema during freeipa updates on older systems. Modified Makefile.am to account for new .update file. binuYzjiki10A.bin Description: freeipa-jraquino-0037-Correct-sudo-runasuser-and-runasgroup-attributes.patch

Re: [Freeipa-devel] [PATCH] 36 Removed RunAs External Group is removed in the output when --all switch is used.

2011-07-18 Thread Rob Crittenden
JR Aquino wrote: https://fedorahosted.org/freeipa/ticket/1348 Corrected behavior for ipa sudorule-remove-runasgroup rule1 --groups=tgroup2 --all ack, pushed to master and ipa-2-0 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

[Freeipa-devel] [PATCH] 830 change enrollment principal prompt

2011-07-18 Thread Rob Crittenden
Change the enrollment principal prompt to hopefully be more clear. ticket https://fedorahosted.org/freeipa/ticket/1449 From 5a61eb36044ab15b55f42aeee5544983372c992c Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com Date: Mon, 18 Jul 2011 22:46:44 -0400 Subject: [PATCH] Change

Re: [Freeipa-devel] [PATCH] 3 ipa-client-install tries to start non-existing nscd

2011-07-18 Thread Rob Crittenden
Alexander Bokovoy wrote: On 15.07.2011 22:41, Rob Crittenden wrote: Alexander Bokovoy wrote: nack. I don't believe this fixes the reported problem. This patch affects un-installation in which case whether sssd was selected or not doesn't matter, we're just trying to restore the previous

Re: [Freeipa-devel] [PATCH] 817 Add option to wait for values

2011-07-18 Thread Rob Crittenden
Martin Kosek wrote: On Sun, 2011-07-17 at 17:42 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Martin Kosek wrote: On Tue, 2011-07-05 at 13:41 -0400, Rob Crittenden wrote: Rob Crittenden wrote: Rob Crittenden wrote: 389-ds postop plugins, such as the managed entry and memberof plugins,