Re: [Freeipa-devel] [PATCH] 928 fix automount submounts

2012-02-06 Thread Martin Kosek
On Mon, 2012-01-30 at 14:41 -0500, Rob Crittenden wrote: Rob Crittenden wrote: Jakub Hrozek wrote: On Mon, Jan 30, 2012 at 02:51:42PM +0100, Martin Kosek wrote: On Thu, 2012-01-19 at 16:56 -0500, Rob Crittenden wrote: There is a --parentmap option in automountmap-add-indirect. This is

[Freeipa-devel] [PATCH] 11 Checking and modifying of memberof attribute

2012-02-06 Thread Ondrej Hamada
https://fedorahosted.org/freeipa/ticket/2255 https://fedorahosted.org/freeipa/ticket/2286 https://fedorahosted.org/freeipa/ticket/2305 Added checking of existence of groups that are specified in permission and delegation module. Also the permission plugin now allows to unset memberof value.

Re: [Freeipa-devel] [PATCH] 203 Add argument help to CLI

2012-02-06 Thread Martin Kosek
On Fri, 2012-02-03 at 16:22 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Tue, 2012-01-31 at 15:38 +0100, Martin Kosek wrote: On Mon, 2012-01-30 at 11:22 -0500, Rob Crittenden wrote: Martin Kosek wrote: An example of the improved help: # ipa help user-add Purpose: Add a new

Re: [Freeipa-devel] [PATCH 61] Cache authentication in session

2012-02-06 Thread John Dennis
On 02/05/2012 06:56 PM, John Dennis wrote: On 01/25/2012 09:16 AM, Rob Crittenden wrote: John Dennis wrote: On 01/23/2012 06:15 PM, John Dennis wrote: Rebased patch attached (includes contents of previous patch 60). The issues with ipa_memcached belonged to patch 59, that patch was rebased

[Freeipa-devel] [PATCH] 0001 Switch --group and --membergroup in example for delegation

2012-02-06 Thread Petr Viktorin
Hello list! Here is my first patch; hopefully I got the formatting and patch submission process right. And the patch, of course. The --group and --membergroup options were switched in `ipa help delegation`. This patch fixes the example. https://fedorahosted.org/freeipa/ticket/2317 From

Re: [Freeipa-devel] [PATCH] 204 Improve netgroup-add error messages

2012-02-06 Thread Martin Kosek
On Fri, 2012-02-03 at 16:07 +0100, Martin Kosek wrote: On Fri, 2012-02-03 at 09:55 -0500, Rob Crittenden wrote: Martin Kosek wrote: These two situations in netgroup-add need to be distinguished: 1) Netgroup cannot be added because a hostgroup with the same name created a

Re: [Freeipa-devel] [PATCH] 938 consolidate external member code

2012-02-06 Thread Martin Kosek
On Wed, 2012-02-01 at 16:45 -0500, Rob Crittenden wrote: We had code all over the place to handle adding and removing external members from a variety of attributes. I consolidated these all into two functions in baseldap.py. This obsoletes my patch 920 but this patch includes the improved

Re: [Freeipa-devel] [PATCH] 0001 Switch --group and --membergroup in example for delegation

2012-02-06 Thread Martin Kosek
On Mon, 2012-02-06 at 13:44 +0100, Petr Viktorin wrote: Hello list! Here is my first patch; hopefully I got the formatting and patch submission process right. And the patch, of course. The --group and --membergroup options were switched in `ipa help delegation`. This patch fixes the

[Freeipa-devel] [PATCH] 076 UI support for ssh keys

2012-02-06 Thread Petr Vobornik
ipasshpubkey attribute was added to user and host details pages. New widget for ssh public keys was created. Static preview: http://pvoborni.fedorapeople.org/ssh/#identity=usernavigation=identityuser-facet=defaultuser-pkey=aortiz https://fedorahosted.org/freeipa/ticket/2340 -- Petr Vobornik

Re: [Freeipa-devel] [PATCH] 938 consolidate external member code

2012-02-06 Thread Rob Crittenden
Martin Kosek wrote: On Wed, 2012-02-01 at 16:45 -0500, Rob Crittenden wrote: We had code all over the place to handle adding and removing external members from a variety of attributes. I consolidated these all into two functions in baseldap.py. This obsoletes my patch 920 but this patch

Re: [Freeipa-devel] [PATCH] 938 consolidate external member code

2012-02-06 Thread Martin Kosek
On Mon, 2012-02-06 at 09:28 -0500, Rob Crittenden wrote: Martin Kosek wrote: On Wed, 2012-02-01 at 16:45 -0500, Rob Crittenden wrote: We had code all over the place to handle adding and removing external members from a variety of attributes. I consolidated these all into two functions in

[Freeipa-devel] [PATCH] 0002 Fix/add options in ipa-managed-entries man page

2012-02-06 Thread Petr Viktorin
This fixes the name of the --entry option in the man page (https://fedorahosted.org/freeipa/ticket/2277), and adds options that were missing. From 69836c87eb5f4bcee1664dcc0cf71c53862f7341 Mon Sep 17 00:00:00 2001 From: Petr Viktorin pvikt...@redhat.com Date: Mon, 6 Feb 2012 07:59:47 -0500

Re: [Freeipa-devel] [PATCH] 940 apply some validation to some classes only

2012-02-06 Thread Martin Kosek
On Fri, 2012-02-03 at 16:58 -0500, Rob Crittenden wrote: There is some validation that we only need to apply when an entry is being created, namely the key itself. This is to allow us to manage an otherwise illegal entry that finds its way into the system (i.e. migration). Consider this.

Re: [Freeipa-devel] [PATCH] 0002 Fix/add options in ipa-managed-entries man page

2012-02-06 Thread Rob Crittenden
Petr Viktorin wrote: This fixes the name of the --entry option in the man page (https://fedorahosted.org/freeipa/ticket/2277), and adds options that were missing. I think Martin noticed while looking at one of my patches that we shouldn't be calling: config.add_standard_options(parser)

Re: [Freeipa-devel] [PATCH 59] Modify spec file to add ipa_memcached service Install , control ipa_memcached instance

2012-02-06 Thread Rob Crittenden
John Dennis wrote: On 01/25/2012 09:12 AM, Rob Crittenden wrote: John Dennis wrote: This patch supersedes the previous patch, it corrects two issue Rob raised in a later patch review The fixed issues are: * spec file did not install ipa_memcached SysV initscript on SvsV systems. * Typo in

Re: [Freeipa-devel] [PATCH] 0002 Fix/add options in ipa-managed-entries man page

2012-02-06 Thread Martin Kosek
On Mon, 2012-02-06 at 10:22 -0500, Rob Crittenden wrote: Petr Viktorin wrote: This fixes the name of the --entry option in the man page (https://fedorahosted.org/freeipa/ticket/2277), and adds options that were missing. I think Martin noticed while looking at one of my patches that we

Re: [Freeipa-devel] [PATCH] 074 Automember UI - default groups

2012-02-06 Thread Petr Vobornik
Updated patch attached. On 02/04/2012 01:27 AM, Endi Sukma Dewata wrote: On 2/2/2012 11:13 AM, Petr Vobornik wrote: ... https://fedorahosted.org/freeipa/ticket/2195 Issues that need fixing: 1. When default user group is enabled, selecting the drop down list to empty will generate an error:

Re: [Freeipa-devel] [PATCH] 11 Checking and modifying of memberof attribute

2012-02-06 Thread Martin Kosek
On Mon, 2012-02-06 at 12:14 +0100, Ondrej Hamada wrote: https://fedorahosted.org/freeipa/ticket/2255 https://fedorahosted.org/freeipa/ticket/2286 https://fedorahosted.org/freeipa/ticket/2305 Added checking of existence of groups that are specified in permission and delegation module. Also

Re: [Freeipa-devel] [PATCH 59] Modify spec file to add ipa_memcached service Install , control ipa_memcached instance

2012-02-06 Thread Rob Crittenden
John Dennis wrote: On 02/06/2012 10:26 AM, Rob Crittenden wrote: John Dennis wrote: On 01/25/2012 09:12 AM, Rob Crittenden wrote: John Dennis wrote: This patch supersedes the previous patch, it corrects two issue Rob raised in a later patch review The fixed issues are: * spec file did not

Re: [Freeipa-devel] [PATCH] 911 ensure confidential minssf

2012-02-06 Thread Martin Kosek
On Tue, 2011-12-06 at 18:18 -0500, Rob Crittenden wrote: Rob Crittenden wrote: Ensure that we always use at least 56 for minssf when communicating with 389-ds. This will prevent someone from modifying /etc/openldap/ldap.conf in a way to put all communication in the clear. See the ticket

Re: [Freeipa-devel] [PATCH] 911 ensure confidential minssf

2012-02-06 Thread Rob Crittenden
Martin Kosek wrote: On Tue, 2011-12-06 at 18:18 -0500, Rob Crittenden wrote: Rob Crittenden wrote: Ensure that we always use at least 56 for minssf when communicating with 389-ds. This will prevent someone from modifying /etc/openldap/ldap.conf in a way to put all communication in the clear.

Re: [Freeipa-devel] [PATCH] 0002 Fix/add options in ipa-managed-entries man page

2012-02-06 Thread Dmitri Pal
On 02/06/2012 10:26 AM, Martin Kosek wrote: On Mon, 2012-02-06 at 10:22 -0500, Rob Crittenden wrote: Petr Viktorin wrote: This fixes the name of the --entry option in the man page (https://fedorahosted.org/freeipa/ticket/2277), and adds options that were missing. I think Martin noticed while

Re: [Freeipa-devel] [PATCH] 0002 Fix/add options in ipa-managed-entries man page

2012-02-06 Thread Rob Crittenden
Dmitri Pal wrote: On 02/06/2012 10:26 AM, Martin Kosek wrote: On Mon, 2012-02-06 at 10:22 -0500, Rob Crittenden wrote: Petr Viktorin wrote: This fixes the name of the --entry option in the man page (https://fedorahosted.org/freeipa/ticket/2277), and adds options that were missing. I think

Re: [Freeipa-devel] [PATCH 59] Modify spec file to add ipa_memcached service Install , control ipa_memcached instance

2012-02-06 Thread John Dennis
rebased patch because it wouldn't apply to master -- John Dennis jden...@redhat.com Looking to carve out IT costs? www.redhat.com/carveoutcosts/ From c11ca3aaed9dba7c2ac4b2de6b3eba8aeb641f53 Mon Sep 17 00:00:00 2001 From: John Dennis jden...@redhat.com Date: Mon, 6 Feb 2012 13:15:06 -0500

[Freeipa-devel] [PATCH] 941 fix replica s4u2proxy delegation

2012-02-06 Thread Rob Crittenden
Replicas weren't being added to the S4U2Proxy configuration so weren't allowed to delegate tickets. This fixes things. rob freeipa-rcrit-941-replica.patch Description: application/mbox ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH] 0040-0042 Fedora packages fixes merge

2012-02-06 Thread Rob Crittenden
Alexander Bokovoy wrote: Hi, attached are three patches that differentiate current freeipa-2.1.4 builds in Fedora 16/Rawhide from upstream. These are primarily to adopt to systemd and python-ldap changes. 1. freeipa-abbra-0040-inifiles-support.patch introduces a way to modify sectioned

Re: [Freeipa-devel] [PATCH] 202 Add reverse DNS record when forward is created

2012-02-06 Thread Rob Crittenden
Martin Kosek wrote: On Mon, 2012-01-30 at 11:52 -0500, Rob Crittenden wrote: Martin Kosek wrote: Adding reverse DNS record may be a time consuming task, especially for IPv6 addresses. Having a way to automatically create a reverse record when a forward record is created could speed up the

Re: [Freeipa-devel] [PATCH] 0040-0042 Fedora packages fixes merge

2012-02-06 Thread Alexander Bokovoy
On Mon, 06 Feb 2012, Rob Crittenden wrote: Seems to work ok, Fix this and you have ACK x3: pylint error: init/systemd/freeipa-systemd-upgrade:38: [E0602] Undefined variable 'IPAConfigError' My fix: +++ b/init/systemd/freeipa-systemd-upgrade @@ -35,7 +35,7 @@ def

Re: [Freeipa-devel] [PATCHES] 59-65 SSH public key management

2012-02-06 Thread Rob Crittenden
Jan Cholasta wrote: Updated rebased the patches. I have also attached a patch that Rob made: [PATCH] Don't use sets when calculating the modlist so order is preserved. This is for the LDAP updater in particular. When adding new schema order can be important when one objectclass depends on

[Freeipa-devel] Announcing SSSD 1.8.0 beta 1

2012-02-06 Thread Stephen Gallagher
The SSSD is proud to announce the release of the first beta of SSSD 1.8.0, destined to become our next long-term maintenance (LTM) release. As this is going to be a big release for us, we're looking for as much help as we can get to regression-test and try out the new features before our final

Re: [Freeipa-devel] [PATCH] 074 Automember UI - default groups

2012-02-06 Thread Endi Sukma Dewata
On 2/6/2012 9:56 AM, Petr Vobornik wrote: Updated patch attached. ACK and pushed to master and ipa-2-2. See the comments below. 1. When default user group is enabled, selecting the drop down list to empty will generate an error: 'automemberdefaultgroup' is required. If you click Cancel the

Re: [Freeipa-devel] [PATCH] 075 Automember UI - Fixed I18n labels

2012-02-06 Thread Endi Sukma Dewata
On 2/3/2012 6:28 PM, Endi Sukma Dewata wrote: On 2/3/2012 4:43 AM, Petr Vobornik wrote: Hard-coded labels in Automember UI have been moved into internal.py to allow translation. Note: should be final patch for #2195 https://fedorahosted.org/freeipa/ticket/2195 This is ACKed but it depends