Re: [Freeipa-devel] [PATCH] 0138, 0141: ipa-kdb fixes

2014-02-26 Thread Alexander Bokovoy
On Wed, 26 Feb 2014, Martin Kosek wrote: On 02/25/2014 07:59 PM, Simo Sorce wrote: On Tue, 2014-02-25 at 20:58 +0200, Alexander Bokovoy wrote: Resending patch 0138 together with another case Simo found out today: when authdata flag is cleared by admin for the service principal, we'll get NULL c

[Freeipa-devel] [PATCH 0229] Require BIND >= 9.8.2 instead of >= 9.9.0

2014-02-26 Thread Petr Spacek
Hello, Require BIND >= 9.8.2 instead of >= 9.9.0. Pushed to v3 branch: 28cd600ddc0a9473b3adb31dd82ea99d7c92f983 -- Petr^2 Spacek ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [PATCH] 0142: initialize BindInstance.zonemgr for short-circuited instance use in replica setup

2014-02-26 Thread Alexander Bokovoy
Hi, BindInstance is used in two different ways, with replica setup not calling BindInstance.setup() before adding master records. This causes some properties to be uninitialized and an exception when installing replica. https://fedorahosted.org/freeipa/ticket/4186 -- / Alexander Bokovoy >From

[Freeipa-devel] [PATCHES] 0473-0477 Managed permission updater, part 1

2014-02-26 Thread Petr Viktorin
Hello, Here are a few fixes/improvements, and the first part of a managed permission updater. The patches should go in this order but don't need to be ACKed/pushed all at once. Design: http://www.freeipa.org/page/V3/Managed_Read_permissions#Default_Permission_Updater Part of the work for:

[Freeipa-devel] FreeIPA 3.4 -> 4.0

2014-02-26 Thread Martin Kosek
Hello all, I would like to discuss a proposal that Simo had on FreeIPA devel meeting. Given permission/ACI refactoring that Petr3 is working on, people may have issues with access to their LDAP if they played too much with the default ACIs or if they expect that some information stays accessible i

Re: [Freeipa-devel] [PATCH 0155] ipatests: Kill winbindd process after uninstall

2014-02-26 Thread Martin Kosek
On 02/25/2014 07:15 PM, Alexander Bokovoy wrote: > On Tue, 25 Feb 2014, Tomas Babej wrote: >> Hi, >> >> As a part of a better cleanup procedure in the integration tests, >> make sure that winbindd is not running after uninstalling the IPA >> server. > Better patch 0140 attached. We simply need to

Re: [Freeipa-devel] FreeIPA 3.4 -> 4.0

2014-02-26 Thread Alexander Bokovoy
On Wed, 26 Feb 2014, Martin Kosek wrote: Hello all, I would like to discuss a proposal that Simo had on FreeIPA devel meeting. Given permission/ACI refactoring that Petr3 is working on, people may have issues with access to their LDAP if they played too much with the default ACIs or if they expe

Re: [Freeipa-devel] FreeIPA 3.4 -> 4.0

2014-02-26 Thread Martin Kosek
On 02/26/2014 12:31 PM, Alexander Bokovoy wrote: > On Wed, 26 Feb 2014, Martin Kosek wrote: >> Hello all, >> >> I would like to discuss a proposal that Simo had on FreeIPA devel meeting. >> Given permission/ACI refactoring that Petr3 is working on, people may have >> issues with access to their LDA

Re: [Freeipa-devel] [PATCH] 0138, 0141: ipa-kdb fixes

2014-02-26 Thread Martin Kosek
On 02/26/2014 09:33 AM, Alexander Bokovoy wrote: > On Wed, 26 Feb 2014, Martin Kosek wrote: >> On 02/25/2014 07:59 PM, Simo Sorce wrote: >>> On Tue, 2014-02-25 at 20:58 +0200, Alexander Bokovoy wrote: Resending patch 0138 together with another case Simo found out today: when authdata flag

Re: [Freeipa-devel] [PATCH 0155] ipatests: Kill winbindd process after uninstall

2014-02-26 Thread Alexander Bokovoy
On Wed, 26 Feb 2014, Martin Kosek wrote: On 02/25/2014 07:15 PM, Alexander Bokovoy wrote: On Tue, 25 Feb 2014, Tomas Babej wrote: Hi, As a part of a better cleanup procedure in the integration tests, make sure that winbindd is not running after uninstalling the IPA server. Better patch 0140

Re: [Freeipa-devel] FreeIPA 3.4 -> 4.0

2014-02-26 Thread Alexander Bokovoy
On Wed, 26 Feb 2014, Martin Kosek wrote: On 02/26/2014 12:31 PM, Alexander Bokovoy wrote: On Wed, 26 Feb 2014, Martin Kosek wrote: Hello all, I would like to discuss a proposal that Simo had on FreeIPA devel meeting. Given permission/ACI refactoring that Petr3 is working on, people may have is

Re: [Freeipa-devel] [PATCH] 0142: initialize BindInstance.zonemgr for short-circuited instance use in replica setup

2014-02-26 Thread Petr Viktorin
On 02/26/2014 10:13 AM, Alexander Bokovoy wrote: Hi, BindInstance is used in two different ways, with replica setup not calling BindInstance.setup() before adding master records. This causes some properties to be uninitialized and an exception when installing replica. https://fedorahosted.org/f

Re: [Freeipa-devel] [PATCH] 531-541 OTP UI

2014-02-26 Thread Petr Vobornik
On 26.2.2014 01:55, Dmitri Pal wrote: On 02/24/2014 10:21 AM, Nathaniel McCallum wrote: On Mon, 2014-02-24 at 15:48 +0100, Petr Vobornik wrote: On 24.2.2014 15:31, Nathaniel McCallum wrote: On Mon, 2014-02-24 at 11:04 +0100, Petr Vobornik wrote: On 21.2.2014 20:00, Nathaniel McCallum wrote:

[Freeipa-devel] [PATCH] Too big font in input fields

2014-02-26 Thread Adam Misnyovszki
Hi, too big font issue in ipa-3-3 and Firefox 27 fixed: In Firefox 27, default font size has bigger priority than body css, text input font size is therefore explicitly set to 1em

Re: [Freeipa-devel] [PATCH] 0138, 0141: ipa-kdb fixes

2014-02-26 Thread Tomas Babej
On 02/26/2014 12:39 PM, Martin Kosek wrote: > On 02/26/2014 09:33 AM, Alexander Bokovoy wrote: >> On Wed, 26 Feb 2014, Martin Kosek wrote: >>> On 02/25/2014 07:59 PM, Simo Sorce wrote: On Tue, 2014-02-25 at 20:58 +0200, Alexander Bokovoy wrote: > Resending patch 0138 together with another

Re: [Freeipa-devel] [PATCH] 0138, 0141: ipa-kdb fixes

2014-02-26 Thread Tomas Babej
On 02/26/2014 02:16 PM, Tomas Babej wrote: > On 02/26/2014 12:39 PM, Martin Kosek wrote: >> On 02/26/2014 09:33 AM, Alexander Bokovoy wrote: >>> On Wed, 26 Feb 2014, Martin Kosek wrote: On 02/25/2014 07:59 PM, Simo Sorce wrote: > On Tue, 2014-02-25 at 20:58 +0200, Alexander Bokovoy wrote:

Re: [Freeipa-devel] [PATCH] 0138, 0141: ipa-kdb fixes

2014-02-26 Thread Petr Viktorin
On 02/26/2014 02:17 PM, Tomas Babej wrote: On 02/26/2014 02:16 PM, Tomas Babej wrote: On 02/26/2014 12:39 PM, Martin Kosek wrote: On 02/26/2014 09:33 AM, Alexander Bokovoy wrote: On Wed, 26 Feb 2014, Martin Kosek wrote: On 02/25/2014 07:59 PM, Simo Sorce wrote: On Tue, 2014-02-25 at 20:58 +

Re: [Freeipa-devel] [PATCH] Too big font in input fields

2014-02-26 Thread Petr Vobornik
On 26.2.2014 13:00, Adam Misnyovszki wrote: Hi, too big font issue in ipa-3-3 and Firefox 27 fixed: In Firefox 27, default font size has bigger priority than body css, text input font size is therefore explicitly set to 1em https://fedorahosted.org/freeipa/ticket/4180 Thanks: Adam NACK Th

Re: [Freeipa-devel] [PATCH] 0138, 0141: ipa-kdb fixes

2014-02-26 Thread Simo Sorce
On Wed, 2014-02-26 at 12:39 +0100, Martin Kosek wrote: > On 02/26/2014 09:33 AM, Alexander Bokovoy wrote: > > On Wed, 26 Feb 2014, Martin Kosek wrote: > >> On 02/25/2014 07:59 PM, Simo Sorce wrote: > >>> On Tue, 2014-02-25 at 20:58 +0200, Alexander Bokovoy wrote: > Resending patch 0138 togethe

Re: [Freeipa-devel] [PATCH] Too big font in input fields

2014-02-26 Thread Adam Misnyovszki
- Original Message - > From: "Petr Vobornik" > To: "Adam Misnyovszki" , freeipa-devel@redhat.com, > "Martin Kosek" > Sent: Wednesday, February 26, 2014 2:32:52 PM > Subject: Re: [Freeipa-devel] [PATCH] Too big font in input fields > > On 26.2.2014 13:00, Adam Misnyovszki wrote: > > Hi

Re: [Freeipa-devel] DNSSEC design page

2014-02-26 Thread Jan Cholasta
On 25.2.2014 20:26, Petr Spacek wrote: On 25.2.2014 19:13, Dmitri Pal wrote: On 02/25/2014 08:46 AM, Simo Sorce wrote: On Tue, 2014-02-25 at 11:08 +0100, Petr Spacek wrote: On 24.2.2014 20:20, Simo Sorce wrote: Also can you add some examples on how we would use these classes to store DNS keys

Re: [Freeipa-devel] DNSSEC design page

2014-02-26 Thread Jan Cholasta
On 25.2.2014 20:22, Simo Sorce wrote: On Tue, 2014-02-25 at 13:22 -0500, Rob Crittenden wrote: Jan Cholasta wrote: On 25.2.2014 17:36, Ludwig Krispenz wrote: On 02/25/2014 05:12 PM, Simo Sorce wrote: On Tue, 2014-02-25 at 16:18 +0100, Jan Cholasta wrote: On 25.2.2014 16:11, Simo Sorce wrote

Re: [Freeipa-devel] DNSSEC design page

2014-02-26 Thread Ludwig Krispenz
I was talking about 'layer of indirection' previously. I'm digging into details and it seems like a good idea to imitate what DNS registrars do - use concept of key sets. It means that keys are not linked to a zone one by one but rather a whole set of keys is linked to a zone. It eases key rota

Re: [Freeipa-devel] DNSSEC design page

2014-02-26 Thread Rob Crittenden
Jan Cholasta wrote: On 25.2.2014 20:22, Simo Sorce wrote: On Tue, 2014-02-25 at 13:22 -0500, Rob Crittenden wrote: Jan Cholasta wrote: On 25.2.2014 17:36, Ludwig Krispenz wrote: On 02/25/2014 05:12 PM, Simo Sorce wrote: On Tue, 2014-02-25 at 16:18 +0100, Jan Cholasta wrote: On 25.2.2014 16

Re: [Freeipa-devel] FreeIPA 3.4 -> 4.0

2014-02-26 Thread Petr Viktorin
On 02/26/2014 12:24 PM, Martin Kosek wrote: Hello all, I would like to discuss a proposal that Simo had on FreeIPA devel meeting. Given permission/ACI refactoring that Petr3 is working on, people may have issues with access to their LDAP if they played too much with the default ACIs or if they e

Re: [Freeipa-devel] DNSSEC design page

2014-02-26 Thread Simo Sorce
On Wed, 2014-02-26 at 15:04 +0100, Jan Cholasta wrote: > On 25.2.2014 20:22, Simo Sorce wrote: > > On Tue, 2014-02-25 at 13:22 -0500, Rob Crittenden wrote: > >> Jan Cholasta wrote: > >>> On 25.2.2014 17:36, Ludwig Krispenz wrote: > > On 02/25/2014 05:12 PM, Simo Sorce wrote: > > On Tu

[Freeipa-devel] [PATCH 0007][DOC] Tip on restoring admin account

2014-02-26 Thread Gabe Alford
Hi all, I added a tip in the deleting users section on restoring admin account. Please review. https://fedorahosted.org/freeipa/ticket/2746 Thanks, Gabe freeipa-rga-0007-DOC-Document-steps-to-restore-deleted-admin-account.patch Description: Binary data

[Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Rich Megginson
I'm working on adding support for freeipa DNS to openstack designate (DNSaaS). I am assuming I need to use RPC (XML? JSON? REST?) to communicate with freeipa. Is there documentation about how to construct and send RPC messages? ___ Freeipa-devel

Re: [Freeipa-devel] [PATCH] Too big font in input fields

2014-02-26 Thread Martin Kosek
On 02/26/2014 02:45 PM, Adam Misnyovszki wrote: > > > - Original Message - >> From: "Petr Vobornik" >> To: "Adam Misnyovszki" , freeipa-devel@redhat.com, >> "Martin Kosek" >> Sent: Wednesday, February 26, 2014 2:32:52 PM >> Subject: Re: [Freeipa-devel] [PATCH] Too big font in input fie

Re: [Freeipa-devel] [PATCH] 0139 trustdomain_find: make sure we skip short entries when --pkey-only is specified

2014-02-26 Thread Martin Kosek
On 02/25/2014 06:56 PM, Alexander Bokovoy wrote: > Hi, > > Simple patch to fix KeyError as --pkey-only causes no attributes to be > returned and trustdomain_find.post_callback checked them > unconditionally. > > > https://fedorahosted.org/freeipa/ticket/4196 Can we simply skip the whole loop wh

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Petr Viktorin
On 02/26/2014 04:45 PM, Rich Megginson wrote: I'm working on adding support for freeipa DNS to openstack designate (DNSaaS). I am assuming I need to use RPC (XML? JSON? REST?) to communicate with freeipa. Is there documentation about how to construct and send RPC messages? The JSON-RPC and

[Freeipa-devel] [PATCH] 0143: catch access denial when removing old trust object when using non-privileged AD user to create trust

2014-02-26 Thread Alexander Bokovoy
Hi, this patch fixes a case when non-privileged AD user account is used to re-establish trust. We need to catch one specific exception in deleting the old trust and bail out earlier with proper error message. https://fedorahosted.org/freeipa/ticket/4202 -- / Alexander Bokovoy >From 1ffd12988778f

Re: [Freeipa-devel] [PATCH] 544 webui: Focus expand/collapse link in batch_error dialog

2014-02-26 Thread Adam Misnyovszki
- Original Message - > From: "Petr Vobornik" > To: "freeipa-devel" > Sent: Tuesday, February 25, 2014 2:19:21 PM > Subject: [Freeipa-devel] [PATCH] 544 webui: Focus expand/collapse link in > batch_error dialog > > Dialog loses focus when the links are clicked making the dialog > u

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Petr Vobornik
On 26.2.2014 16:53, Petr Viktorin wrote: On 02/26/2014 04:45 PM, Rich Megginson wrote: I'm working on adding support for freeipa DNS to openstack designate (DNSaaS). I am assuming I need to use RPC (XML? JSON? REST?) to communicate with freeipa. Is there documentation about how to construct

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Rich Megginson
On 02/26/2014 09:18 AM, Petr Vobornik wrote: On 26.2.2014 16:53, Petr Viktorin wrote: On 02/26/2014 04:45 PM, Rich Megginson wrote: I'm working on adding support for freeipa DNS to openstack designate (DNSaaS). I am assuming I need to use RPC (XML? JSON? REST?) to communicate with freeipa. I

Re: [Freeipa-devel] [PATCH] 0139 trustdomain_find: make sure we skip short entries when --pkey-only is specified

2014-02-26 Thread Alexander Bokovoy
On Wed, 26 Feb 2014, Martin Kosek wrote: On 02/25/2014 06:56 PM, Alexander Bokovoy wrote: Hi, Simple patch to fix KeyError as --pkey-only causes no attributes to be returned and trustdomain_find.post_callback checked them unconditionally. https://fedorahosted.org/freeipa/ticket/4196 Can we

Re: [Freeipa-devel] DNSSEC design page

2014-02-26 Thread Petr Spacek
On 26.2.2014 15:20, Ludwig Krispenz wrote: I was talking about 'layer of indirection' previously. I'm digging into details and it seems like a good idea to imitate what DNS registrars do - use concept of key sets. It means that keys are not linked to a zone one by one but rather a whole set of ke

Re: [Freeipa-devel] [PATCH] 6 webui: Too big font in input fields

2014-02-26 Thread Adam Misnyovszki
- Original Message - > From: "Petr Vobornik" > To: "Adam Misnyovszki" , freeipa-devel@redhat.com, > "Martin Kosek" > Sent: Wednesday, February 26, 2014 2:32:52 PM > Subject: Re: [Freeipa-devel] [PATCH] Too big font in input fields > > On 26.2.2014 13:00, Adam Misnyovszki wrote: > > Hi

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Rich Megginson
On 02/26/2014 08:53 AM, Petr Viktorin wrote: On 02/26/2014 04:45 PM, Rich Megginson wrote: I'm working on adding support for freeipa DNS to openstack designate (DNSaaS). I am assuming I need to use RPC (XML? JSON? REST?) to communicate with freeipa. Is there documentation about how to constr

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Rob Crittenden
Rich Megginson wrote: On 02/26/2014 08:53 AM, Petr Viktorin wrote: On 02/26/2014 04:45 PM, Rich Megginson wrote: I'm working on adding support for freeipa DNS to openstack designate (DNSaaS). I am assuming I need to use RPC (XML? JSON? REST?) to communicate with freeipa. Is there documentat

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Rich Megginson
On 02/26/2014 02:19 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 08:53 AM, Petr Viktorin wrote: On 02/26/2014 04:45 PM, Rich Megginson wrote: I'm working on adding support for freeipa DNS to openstack designate (DNSaaS). I am assuming I need to use RPC (XML? JSON? REST?) to

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Rich Megginson
On 02/26/2014 03:22 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 02:19 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 08:53 AM, Petr Viktorin wrote: On 02/26/2014 04:45 PM, Rich Megginson wrote: I'm working on adding support for freeipa DNS to openstack design

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Rob Crittenden
Rich Megginson wrote: On 02/26/2014 02:19 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 08:53 AM, Petr Viktorin wrote: On 02/26/2014 04:45 PM, Rich Megginson wrote: I'm working on adding support for freeipa DNS to openstack designate (DNSaaS). I am assuming I need to use RPC

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Simo Sorce
On Wed, 2014-02-26 at 15:28 -0700, Rich Megginson wrote: > On 02/26/2014 03:22 PM, Rob Crittenden wrote: > > Rich Megginson wrote: > >> On 02/26/2014 02:19 PM, Rob Crittenden wrote: > >>> Rich Megginson wrote: > On 02/26/2014 08:53 AM, Petr Viktorin wrote: > > On 02/26/2014 04:45 PM, Rich

Re: [Freeipa-devel] FreeIPA 3.4 -> 4.0

2014-02-26 Thread Dmitri Pal
On 02/26/2014 09:46 AM, Petr Viktorin wrote: On 02/26/2014 12:24 PM, Martin Kosek wrote: Hello all, I would like to discuss a proposal that Simo had on FreeIPA devel meeting. Given permission/ACI refactoring that Petr3 is working on, people may have issues with access to their LDAP if they pl

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Dmitri Pal
On 02/26/2014 05:48 PM, Simo Sorce wrote: On Wed, 2014-02-26 at 15:28 -0700, Rich Megginson wrote: On 02/26/2014 03:22 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 02:19 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 08:53 AM, Petr Viktorin wrote: On 02/26/20

Re: [Freeipa-devel] [PATCH] 531-541 OTP UI

2014-02-26 Thread Dmitri Pal
On 02/26/2014 06:57 AM, Petr Vobornik wrote: On 26.2.2014 01:55, Dmitri Pal wrote: On 02/24/2014 10:21 AM, Nathaniel McCallum wrote: On Mon, 2014-02-24 at 15:48 +0100, Petr Vobornik wrote: On 24.2.2014 15:31, Nathaniel McCallum wrote: On Mon, 2014-02-24 at 11:04 +0100, Petr Vobornik wrote: O

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Rob Crittenden
Dmitri Pal wrote: On 02/26/2014 05:48 PM, Simo Sorce wrote: On Wed, 2014-02-26 at 15:28 -0700, Rich Megginson wrote: On 02/26/2014 03:22 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 02:19 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 08:53 AM, Petr Viktorin

Re: [Freeipa-devel] Is there RPC documentation?

2014-02-26 Thread Rich Megginson
On 02/26/2014 03:48 PM, Simo Sorce wrote: On Wed, 2014-02-26 at 15:28 -0700, Rich Megginson wrote: On 02/26/2014 03:22 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 02:19 PM, Rob Crittenden wrote: Rich Megginson wrote: On 02/26/2014 08:53 AM, Petr Viktorin wrote: On 02/26/20