Re: [Freeipa-devel] [PATCH] 130 Drop support for OpenSSH versions before 6.2

2013-04-30 Thread Petr Viktorin
On 04/29/2013 08:58 PM, Rob Crittenden wrote: Jan Cholasta wrote: On 19.4.2013 19:39, Rob Crittenden wrote: Jan Cholasta wrote: Also, this does not fix SSH integration not working on Fedora 18, as that is caused by backward incompatiblity in openssh-server-6.1p1-6 and later (see

Re: [Freeipa-devel] [PATCH 0023 Do not display ports to open when password is incorrect during ipa-client-install

2013-04-30 Thread Petr Viktorin
On 04/23/2013 12:17 PM, Ana Krivokapic wrote: On 04/23/2013 12:06 AM, Rob Crittenden wrote: Ana Krivokapic wrote: Do not display ports to open when password is incorrect during ipa-client-install https://fedorahosted.org/freeipa/ticket/3573 What happens if port 88 is not open so it can't

[Freeipa-devel] [PATCH] 130 Add support for OpenSSH 6.2 (was Re: [PATCH] 130 Drop support for OpenSSH versions before 6.2)

2013-04-30 Thread Jan Cholasta
On 29.4.2013 20:58, Rob Crittenden wrote: Alexander pointed out that we can use the user nobody to run these commands rather than running as the user who requested it, %u. Added. For the purposes of development, this is going to commit everyone to moving to F-19 now. Is that acceptable or

[Freeipa-devel] [PATCHES] Fix minor issues in the extdom plugin

2013-04-30 Thread Sumit Bose
Hi, while adding the SID based lookups to SSSD I would some minor issues in the extdom plugin in code paths which were not used by the current requests. Fixes https://fedorahosted.org/freeipa/ticket/3596 bye, Sumit From 4db38535ba86a0249c4f11d4adde814eee6547e3 Mon Sep 17 00:00:00 2001 From:

Re: [Freeipa-devel] [PATCH] 130 Add support for OpenSSH 6.2 (was Re: [PATCH] 130 Drop support for OpenSSH versions before 6.2)

2013-04-30 Thread Petr Viktorin
On 04/30/2013 11:08 AM, Jan Cholasta wrote: On 29.4.2013 20:58, Rob Crittenden wrote: Alexander pointed out that we can use the user nobody to run these commands rather than running as the user who requested it, %u. Added. For the purposes of development, this is going to commit everyone

Re: [Freeipa-devel] [PATCH 0045] Enforce host existence only where needed in ipa-replica-manage

2013-04-30 Thread Tomas Babej
On 04/11/2013 09:57 PM, Rob Crittenden wrote: Tomas Babej wrote: Hi, In ipa-replica-manage commands, we enforce that hostnames we work with are resolvable. However, this caused errors while deleting or disconnecting a ipa / winsync replica, if that replica was down and authoritative server for

Re: [Freeipa-devel] [PATCH] 130 Add support for OpenSSH 6.2 (was Re: [PATCH] 130 Drop support for OpenSSH versions before 6.2)

2013-04-30 Thread Alexander Bokovoy
On Tue, 30 Apr 2013, Petr Viktorin wrote: On 04/30/2013 11:08 AM, Jan Cholasta wrote: On 29.4.2013 20:58, Rob Crittenden wrote: Alexander pointed out that we can use the user nobody to run these commands rather than running as the user who requested it, %u. Added. For the purposes of

[Freeipa-devel] [PATCH 0152] Replace TTL values 2^31-1 with 0.

2013-04-30 Thread Petr Spacek
Hello, Replace TTL values 2^31-1 with 0. The rule comes from RFC 2181 section 8. https://fedorahosted.org/bind-dyndb-ldap/ticket/117 -- Petr^2 Spacek From c871eb74dcb1842a96d0d5a5332db0bd33bb5167 Mon Sep 17 00:00:00 2001 From: Petr Spacek pspa...@redhat.com Date: Tue, 30 Apr 2013 15:41:40

Re: [Freeipa-devel] [PATCH 0023 Do not display ports to open when password is incorrect during ipa-client-install

2013-04-30 Thread Ana Krivokapic
On 04/30/2013 10:42 AM, Petr Viktorin wrote: On 04/23/2013 12:17 PM, Ana Krivokapic wrote: On 04/23/2013 12:06 AM, Rob Crittenden wrote: Ana Krivokapic wrote: Do not display ports to open when password is incorrect during ipa-client-install https://fedorahosted.org/freeipa/ticket/3573

Re: [Freeipa-devel] [PATCH 0023 Do not display ports to open when password is incorrect during ipa-client-install

2013-04-30 Thread Petr Viktorin
On 04/30/2013 04:03 PM, Ana Krivokapic wrote: On 04/30/2013 10:42 AM, Petr Viktorin wrote: On 04/23/2013 12:17 PM, Ana Krivokapic wrote: On 04/23/2013 12:06 AM, Rob Crittenden wrote: Ana Krivokapic wrote: Do not display ports to open when password is incorrect during ipa-client-install

Re: [Freeipa-devel] [PATCH 0045] Enforce host existence only where needed in ipa-replica-manage

2013-04-30 Thread Dmitri Pal
On 04/30/2013 08:32 AM, Tomas Babej wrote: On 04/11/2013 09:57 PM, Rob Crittenden wrote: Tomas Babej wrote: Hi, In ipa-replica-manage commands, we enforce that hostnames we work with are resolvable. However, this caused errors while deleting or disconnecting a ipa / winsync replica, if that

Re: [Freeipa-devel] [PATCH 0051] Preserve already configured options in openldap conf

2013-04-30 Thread Petr Viktorin
On 04/29/2013 10:28 PM, Tomas Babej wrote: On 04/29/2013 08:13 PM, Rob Crittenden wrote: Tomas Babej wrote: On 04/25/2013 12:42 PM, Martin Kosek wrote: On 04/25/2013 12:29 PM, Jan Cholasta wrote: On 25.4.2013 08:51, Martin Kosek wrote: On 04/24/2013 08:02 PM, Rob Crittenden wrote: Jan

Re: [Freeipa-devel] [PATCH 0051] Preserve already configured options in openldap conf

2013-04-30 Thread Rob Crittenden
Tomas Babej wrote: On 04/29/2013 08:13 PM, Rob Crittenden wrote: Tomas Babej wrote: On 04/25/2013 12:42 PM, Martin Kosek wrote: On 04/25/2013 12:29 PM, Jan Cholasta wrote: On 25.4.2013 08:51, Martin Kosek wrote: On 04/24/2013 08:02 PM, Rob Crittenden wrote: Jan Cholasta wrote: On

Re: [Freeipa-devel] [PATCH 0051] Preserve already configured options in openldap conf

2013-04-30 Thread Rob Crittenden
Petr Viktorin wrote: On 04/29/2013 10:28 PM, Tomas Babej wrote: On 04/29/2013 08:13 PM, Rob Crittenden wrote: Tomas Babej wrote: On 04/25/2013 12:42 PM, Martin Kosek wrote: On 04/25/2013 12:29 PM, Jan Cholasta wrote: On 25.4.2013 08:51, Martin Kosek wrote: On 04/24/2013 08:02 PM, Rob

Re: [Freeipa-devel] [PATCH] 130 Add support for OpenSSH 6.2 (was Re: [PATCH] 130 Drop support for OpenSSH versions before 6.2)

2013-04-30 Thread Rob Crittenden
Alexander Bokovoy wrote: On Tue, 30 Apr 2013, Petr Viktorin wrote: On 04/30/2013 11:08 AM, Jan Cholasta wrote: On 29.4.2013 20:58, Rob Crittenden wrote: Alexander pointed out that we can use the user nobody to run these commands rather than running as the user who requested it, %u. Added.

Re: [Freeipa-devel] [PATCH 0045] Enforce host existence only where needed in ipa-replica-manage

2013-04-30 Thread Petr Viktorin
On 04/30/2013 02:32 PM, Tomas Babej wrote: On 04/11/2013 09:57 PM, Rob Crittenden wrote: Tomas Babej wrote: Hi, In ipa-replica-manage commands, we enforce that hostnames we work with are resolvable. However, this caused errors while deleting or disconnecting a ipa / winsync replica, if that

Re: [Freeipa-devel] [PATCH] 276 Fix: Certificate status is not visible in Service and Host page

2013-04-30 Thread Petr Vobornik
On 04/29/2013 01:05 PM, Ana Krivokapic wrote: On 04/26/2013 06:43 PM, Petr Vobornik wrote: https://fedorahosted.org/freeipa/ticket/3593 ACK Pushed to master. -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] Web UI refactoring effort ready for review

2013-04-30 Thread Petr Vobornik
Update: * rebased on current master an force-pushed to private repo * fixed crash when IPA installed without CA * fixed bugs found by automated tests ** crash on ssh key add ** crash on host deletion * added design page for #3236: http://www.freeipa.org/page/V3/WebUI_extensible_navigation *

[Freeipa-devel] [PATCH] 1099 fix --no-sssd enrollment

2013-04-30 Thread Rob Crittenden
Fix client enrollment when using --no-sssd and nss-pam-ldapd. At version 0.8.4 the default was changed to map uniqueMember to member so a mapping is no longer required, or possible. This causes the daemon to not load. Remove the option and add a Conflicts on older versions. This is more a

Re: [Freeipa-devel] [PATCH] krb 1.12's OTP-Over-RADIUS

2013-04-30 Thread Nathaniel McCallum
On Fri, 2013-04-26 at 18:30 -0400, Rob Crittenden wrote: Nathaniel McCallum wrote: On Fri, 2013-04-12 at 17:39 -0400, Nathaniel McCallum wrote: On Fri, 2013-04-12 at 11:53 -0400, Nathaniel McCallum wrote: On Fri, 2013-04-12 at 11:34 -0400, Nathaniel McCallum wrote: On Thu, 2013-04-11 at