Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Alexander Bokovoy
On Thu, 30 May 2013, Dmitri Pal wrote: [...] For Lunix and older SSSD version we in fact have a problem. What I want to avoid is to have to define procedures and patches for all ^^ ? the clients. However if you use ipa-client-install it would configure sssd the old way.

Re: [Freeipa-devel] [PATCH] 0032 Ignore files generated by build

2013-05-31 Thread Petr Viktorin
On 05/30/2013 03:07 PM, Tomas Babej wrote: On 05/30/2013 02:41 PM, Ana Krivokapic wrote: Hello, This patch adds some additional files to .gitignore. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH 0057] Do not allow removal of ID range of an active trust

2013-05-31 Thread Martin Kosek
On 05/30/2013 04:35 PM, Tomas Babej wrote: On 05/29/2013 12:25 PM, Martin Kosek wrote: On 05/28/2013 03:48 PM, Alexander Bokovoy wrote: On Tue, 28 May 2013, Tomas Babej wrote: On 05/28/2013 02:35 PM, Alexander Bokovoy wrote: On Mon, 27 May 2013, Tomas Babej wrote: We got rid of openldap

[Freeipa-devel] [PATCH] 0033 Fail when adding a trust with a different range

2013-05-31 Thread Ana Krivokapic
Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3635. -- Regards, Ana Krivokapic Associate Software Engineer FreeIPA team Red Hat Inc. From 80c5f958a326679c67fac16b13bcfdbd0532d17d Mon Sep 17 00:00:00 2001 From: Ana Krivokapic akriv...@redhat.com Date: Fri, 31 May

Re: [Freeipa-devel] [PATCHES 0053-0055] Prompt for RID base if trusted domain SID / name is specified and vice versa

2013-05-31 Thread Tomas Babej
On 05/30/2013 02:17 PM, Ana Krivokapic wrote: On 05/13/2013 05:42 PM, Tomas Babej wrote: On 05/10/2013 04:39 PM, Tomas Babej wrote: Hi, this patcheset deals with https://fedorahosted.org/freeipa/ticket/3602 See commit messages for details. Tomas

Re: [Freeipa-devel] [PATCH 0031] Deprecate options --dom-sid and --dom-name in idrange-mod

2013-05-31 Thread Tomas Babej
On 05/29/2013 03:24 PM, Ana Krivokapic wrote: Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3636 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel I edited

Re: [Freeipa-devel] [PATCH 0031] Deprecate options --dom-sid and --dom-name in idrange-mod

2013-05-31 Thread Tomas Babej
On 05/31/2013 12:25 PM, Tomas Babej wrote: On 05/29/2013 03:24 PM, Ana Krivokapic wrote: Hello, This patch addresses tickethttps://fedorahosted.org/freeipa/ticket/3636 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH 0031] Deprecate options --dom-sid and --dom-name in idrange-mod

2013-05-31 Thread Tomas Babej
On 05/31/2013 12:51 PM, Tomas Babej wrote: On 05/31/2013 12:25 PM, Tomas Babej wrote: On 05/29/2013 03:24 PM, Ana Krivokapic wrote: Hello, This patch addresses tickethttps://fedorahosted.org/freeipa/ticket/3636 ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH 0160] Fix crash triggered by missing sasl_user parameter

2013-05-31 Thread Tomas Hozza
ACK Works as expected. Regards, Tomas Hozza - Original Message - Hello, Fix crash triggered by missing sasl_user parameter. -- Petr^2 Spacek ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] [PATCH 0031] Deprecate options --dom-sid and --dom-name in idrange-mod

2013-05-31 Thread Martin Kosek
On 05/31/2013 01:56 PM, Tomas Babej wrote: On 05/31/2013 12:51 PM, Tomas Babej wrote: On 05/31/2013 12:25 PM, Tomas Babej wrote: On 05/29/2013 03:24 PM, Ana Krivokapic wrote: Hello, This patch addresses ticket https://fedorahosted.org/freeipa/ticket/3636

Re: [Freeipa-devel] [PATCH 0161] Validate authentication settings strictly

2013-05-31 Thread Tomas Hozza
ACK. Works OK. Regards, Tomas Hozza - Original Message - Hello, Validate authentication settings strictly. - auth_method 'SASL' do not accept bind_dn and password options - auth_method 'simple' do not accept sasl_* and krb5_* options - auth_method 'none' do not accept any of

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Simo Sorce
On Fri, 2013-05-31 at 10:54 +0300, Alexander Bokovoy wrote: On Thu, 30 May 2013, Dmitri Pal wrote: [...] For Lunix and older SSSD version we in fact have a problem. What I want to avoid is to have to define procedures and patches for all ^^ ? the clients. However

Re: [Freeipa-devel] [PATCHES 0053-0055] Prompt for RID base if trusted domain SID / name is specified and vice versa

2013-05-31 Thread Ana Krivokapic
On 05/31/2013 12:25 PM, Tomas Babej wrote: On 05/30/2013 02:17 PM, Ana Krivokapic wrote: On 05/13/2013 05:42 PM, Tomas Babej wrote: On 05/10/2013 04:39 PM, Tomas Babej wrote: Hi, this patcheset deals with https://fedorahosted.org/freeipa/ticket/3602 See commit messages for details. Tomas

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Alexander Bokovoy
On Fri, 31 May 2013, Simo Sorce wrote: On Fri, 2013-05-31 at 10:54 +0300, Alexander Bokovoy wrote: On Thu, 30 May 2013, Dmitri Pal wrote: [...] For Lunix and older SSSD version we in fact have a problem. What I want to avoid is to have to define procedures and patches for all

Re: [Freeipa-devel] [PATCH 0159] Deprecate configuration without persistent search

2013-05-31 Thread Tomas Hozza
ACK. Looks good. Regards, Tomas Hozza - Original Message - On 28.5.2013 15:55, Petr Spacek wrote: Hello, Deprecate configuration without persistent search. https://fedorahosted.org/bind-dyndb-ldap/ticket/120 This version of the patch adds notice to the README. --

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Simo Sorce
On Fri, 2013-05-31 at 16:35 +0300, Alexander Bokovoy wrote: On Fri, 31 May 2013, Simo Sorce wrote: On Fri, 2013-05-31 at 10:54 +0300, Alexander Bokovoy wrote: On Thu, 30 May 2013, Dmitri Pal wrote: [...] For Lunix and older SSSD version we in fact have a problem. What I want to

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Rob Crittenden
Simo Sorce wrote: On Fri, 2013-05-31 at 16:35 +0300, Alexander Bokovoy wrote: On Fri, 31 May 2013, Simo Sorce wrote: On Fri, 2013-05-31 at 10:54 +0300, Alexander Bokovoy wrote: On Thu, 30 May 2013, Dmitri Pal wrote: [...] For Lunix and older SSSD version we in fact have a problem. What I

Re: [Freeipa-devel] [RFC] Serving legacy systems cliens for trusts

2013-05-31 Thread Simo Sorce
On Fri, 2013-05-31 at 10:35 -0400, Rob Crittenden wrote: Simo Sorce wrote: On Fri, 2013-05-31 at 16:35 +0300, Alexander Bokovoy wrote: On Fri, 31 May 2013, Simo Sorce wrote: On Fri, 2013-05-31 at 10:54 +0300, Alexander Bokovoy wrote: On Thu, 30 May 2013, Dmitri Pal wrote: [...] For

Re: [Freeipa-devel] [PATCHES 0053-0055] Prompt for RID base if trusted domain SID / name is specified and vice versa

2013-05-31 Thread Ana Krivokapic
On 05/31/2013 03:35 PM, Ana Krivokapic wrote: On 05/31/2013 12:25 PM, Tomas Babej wrote: On 05/30/2013 02:17 PM, Ana Krivokapic wrote: On 05/13/2013 05:42 PM, Tomas Babej wrote: On 05/10/2013 04:39 PM, Tomas Babej wrote: Hi, this patcheset deals with

Re: [Freeipa-devel] [PATCH 0030] Require rid-base and secondary-rid-base options in idrange-add when trust exists

2013-05-31 Thread Ana Krivokapic
On 05/28/2013 04:49 PM, Ana Krivokapic wrote: Hello, This patch addresses https://fedorahosted.org/freeipa/ticket/3634 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel This updated

[Freeipa-devel] IPAv3.1 and Redhat 6.4

2013-05-31 Thread Nicholas MacKenzie
Will IPAv3.1 ever come to 6.4 or perhaps 6.5? Are there any rumors surrounding release dates? ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] IPAv3.1 and Redhat 6.4

2013-05-31 Thread Dmitri Pal
On 05/31/2013 04:47 PM, Nicholas MacKenzie wrote: Will IPAv3.1 ever come to 6.4 or perhaps 6.5? Are there any rumors surrounding release dates? ___ Freeipa-devel mailing list Freeipa-devel@redhat.com

Re: [Freeipa-devel] IPAv3.1 and Redhat 6.4

2013-05-31 Thread Stephen Ingram
On Fri, May 31, 2013 at 2:13 PM, Dmitri Pal d...@redhat.com wrote: On 05/31/2013 04:47 PM, Nicholas MacKenzie wrote: Will IPAv3.1 ever come to 6.4 or perhaps 6.5? Are there any rumors surrounding release dates? ___ Freeipa-devel mailing