Re: [Freeipa-devel] weird data interaction

2014-07-18 Thread Petr Viktorin
On 07/17/2014 10:31 PM, Rob Crittenden wrote: Saw something very weird today but my setup was also a bit odd so it may not be worthy of a ticket. Need a second opinion. Ok, so I wanted to test Jan's CA patches. They don't apply to current master due to the churn pre-4.0, so I just rewound the

Re: [Freeipa-devel] [PATCH] Fix typos in dns.py

2014-07-18 Thread Petr Viktorin
On 07/16/2014 10:18 PM, Nathaniel McCallum wrote: On Tue, 2014-07-15 at 21:49 -0600, Gabe Alford wrote: Hello, Fixes https://fedorahosted.org/freeipa/ticket/4429 ACK Pushed to master, ipa-4-1, ipa-4-0: 9a0aae013393097de655b7c6d1e584b2c8a0a75b -- PetrĀ³

Re: [Freeipa-devel] [PATCH 0241] trusts: Make cn=adtrust agents sysaccount nestedgroup

2014-07-18 Thread Petr Viktorin
On 07/15/2014 03:50 PM, Jan Cholasta wrote: On 15.7.2014 09:57, Tomas Babej wrote: On 07/14/2014 05:00 PM, Jan Cholasta wrote: Hi, On 14.7.2014 11:50, Tomas Babej wrote: Hi, Since recent permissions work references this entry, we need to be able to have memberOf attributes created on this

Re: [Freeipa-devel] [PATCH] Enable debug pid in smb.conf

2014-07-18 Thread Petr Viktorin
On 07/17/2014 01:30 PM, Tomas Babej wrote: On 07/16/2014 05:48 AM, Gabe Alford wrote: Hello, Adds debug pid = yes to smb.conf when ipa-adtrust-install command is run. https://fedorahosted.org/freeipa/ticket/3485 Thanks, Gabe Thanks, ACK. Pushed to master, ipa-4-1:

[Freeipa-devel] [PATCH] 0002 Improve password validity check

2014-07-18 Thread David Kupka
https://fedorahosted.org/freeipa/ticket/2796 -- David Kupka From c0fb9fe49a8b7eb190414571df211c87ba9c3166 Mon Sep 17 00:00:00 2001 From: David Kupka dku...@redhat.com Date: Fri, 18 Jul 2014 10:06:55 +0200 Subject: [PATCH] Improve password validity check. Allow use of characters that no longer

[Freeipa-devel] [PATCH] 0003 Test generated passwords composed of all allowed charactes

2014-07-18 Thread David Kupka
Test verifying that IPA server is able to install using passwords composed of all but forbidden characters. Related to https://fedorahosted.org/freeipa/ticket/2796 -- David Kupka From e4d1c384288f4b5c5d08f9f3abd9393b3b868c80 Mon Sep 17 00:00:00 2001 From: David Kupka dku...@redhat.com Date:

Re: [Freeipa-devel] [PATCH] 0621 test_xmlrpc: Update tests

2014-07-18 Thread Martin Kosek
On 07/08/2014 03:13 PM, Petr Viktorin wrote: Two test fixes for recent permission changes Functionally the patch works fine, permission tests are now error-less. There is just one whitespace error. # git am /home/mkosek/freeipa-pviktori-0621-test_xmlrpc-Update-tests.patch Applying: test_xmlrpc:

Re: [Freeipa-devel] [PATCH] 0002 Improve password validity check

2014-07-18 Thread Martin Kosek
On 07/18/2014 12:33 PM, David Kupka wrote: https://fedorahosted.org/freeipa/ticket/2796 1) Would it be easier/more convenient to just implement following simple check instead of bad_prefix/bad_suffix? if password.strip() != password: raise ValueError('Password must not start or end with

Re: [Freeipa-devel] [PATCH] Enable debug pid in smb.conf

2014-07-18 Thread Petr Spacek
On 18.7.2014 10:11, Petr Viktorin wrote: On 07/17/2014 01:30 PM, Tomas Babej wrote: On 07/16/2014 05:48 AM, Gabe Alford wrote: Hello, Adds debug pid = yes to smb.conf when ipa-adtrust-install command is run. https://fedorahosted.org/freeipa/ticket/3485 Thanks, Gabe Thanks, ACK.

Re: [Freeipa-devel] [PATCH] Enable debug pid in smb.conf

2014-07-18 Thread Petr Viktorin
On 07/18/2014 02:06 PM, Petr Spacek wrote: On 18.7.2014 10:11, Petr Viktorin wrote: On 07/17/2014 01:30 PM, Tomas Babej wrote: On 07/16/2014 05:48 AM, Gabe Alford wrote: Hello, Adds debug pid = yes to smb.conf when ipa-adtrust-install command is run.

Re: [Freeipa-devel] [PATCH] Enable debug pid in smb.conf

2014-07-18 Thread Petr Spacek
On 18.7.2014 14:19, Petr Viktorin wrote: On 07/18/2014 02:06 PM, Petr Spacek wrote: On 18.7.2014 10:11, Petr Viktorin wrote: On 07/17/2014 01:30 PM, Tomas Babej wrote: On 07/16/2014 05:48 AM, Gabe Alford wrote: Hello, Adds debug pid = yes to smb.conf when ipa-adtrust-install command is

Re: [Freeipa-devel] [PATCH] Enable debug pid in smb.conf

2014-07-18 Thread Petr Viktorin
On 07/18/2014 02:31 PM, Petr Spacek wrote: On 18.7.2014 14:19, Petr Viktorin wrote: On 07/18/2014 02:06 PM, Petr Spacek wrote: On 18.7.2014 10:11, Petr Viktorin wrote: On 07/17/2014 01:30 PM, Tomas Babej wrote: On 07/16/2014 05:48 AM, Gabe Alford wrote: Hello, Adds debug pid = yes to

Re: [Freeipa-devel] [PATCH] 0621 test_xmlrpc: Update tests

2014-07-18 Thread Petr Viktorin
On 07/18/2014 12:41 PM, Martin Kosek wrote: On 07/08/2014 03:13 PM, Petr Viktorin wrote: Two test fixes for recent permission changes Functionally the patch works fine, permission tests are now error-less. There is just one whitespace error. # git am

Re: [Freeipa-devel] [PATCH] Enable debug pid in smb.conf

2014-07-18 Thread Martin Kosek
On 07/18/2014 02:42 PM, Petr Viktorin wrote: On 07/18/2014 02:31 PM, Petr Spacek wrote: On 18.7.2014 14:19, Petr Viktorin wrote: On 07/18/2014 02:06 PM, Petr Spacek wrote: On 18.7.2014 10:11, Petr Viktorin wrote: On 07/17/2014 01:30 PM, Tomas Babej wrote: On 07/16/2014 05:48 AM, Gabe Alford

Re: [Freeipa-devel] weird data interaction

2014-07-18 Thread Rob Crittenden
Petr Viktorin wrote: On 07/17/2014 10:31 PM, Rob Crittenden wrote: Saw something very weird today but my setup was also a bit odd so it may not be worthy of a ticket. Need a second opinion. Ok, so I wanted to test Jan's CA patches. They don't apply to current master due to the churn pre-4.0,

Re: [Freeipa-devel] weird data interaction

2014-07-18 Thread Ludwig Krispenz
On 07/18/2014 03:50 PM, Rob Crittenden wrote: Petr Viktorin wrote: On 07/17/2014 10:31 PM, Rob Crittenden wrote: Saw something very weird today but my setup was also a bit odd so it may not be worthy of a ticket. Need a second opinion. Ok, so I wanted to test Jan's CA patches. They don't

[Freeipa-devel] [RFC] Migrating existing environments to Trust - v3

2014-07-18 Thread Sumit Bose
Hi, I have updated http://www.freeipa.org/page/V4/Migrating_existing_environments_to_Trust with the comments from the latest round. The changes can be see at http://www.freeipa.org/index.php?title=V4%2FMigrating_existing_environments_to_Trustdiff=8696oldid=8181 I think most aspects are clear now.

Re: [Freeipa-devel] [PATCH] - Add DRM to IPA

2014-07-18 Thread Rob Crittenden
Ade Lee wrote: Hi all, I have rebased all the previous patches against master, and have squashed them all into a single patch. Its a large patch, but as many folks have already reviewed the constituent precursor patches, most if it should be familiar and easier to review. The main