Re: [Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-21 Thread Martin Kosek
On 10/20/2014 08:25 PM, Alexander Bokovoy wrote: Hi! This patch is for ipa-4-1 branch to enable uniqueness plugin for uid attribute for entries with objectclass posixAccount. We don't have uid uniqueness enforced in FreeIPA 4.1 yet but for posixAccounts it worked due to our design of a

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Jan Cholasta
Dne 20.10.2014 v 23:40 Martin Basti napsal(a): On 20/10/14 18:28, Jan Cholasta wrote: Hi, Dne 20.10.2014 v 17:37 Petr Spacek napsal(a): On 20.10.2014 17:21, Martin Basti wrote: Hello! Hold your hats, DNSSEC patches are here. Martin^2, Petr^2 For testing you will need following package:

Re: [Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-21 Thread Alexander Bokovoy
On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/20/2014 08:25 PM, Alexander Bokovoy wrote: Hi! This patch is for ipa-4-1 branch to enable uniqueness plugin for uid attribute for entries with objectclass posixAccount. We don't have uid uniqueness enforced in FreeIPA 4.1 yet but for

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Alexander Bokovoy
On Tue, 21 Oct 2014, Jan Cholasta wrote: Dne 20.10.2014 v 23:40 Martin Basti napsal(a): On 20/10/14 18:28, Jan Cholasta wrote: Hi, Dne 20.10.2014 v 17:37 Petr Spacek napsal(a): On 20.10.2014 17:21, Martin Basti wrote: Hello! Hold your hats, DNSSEC patches are here. Martin^2, Petr^2 For

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Jan Cholasta
Dne 21.10.2014 v 08:45 Alexander Bokovoy napsal(a): On Tue, 21 Oct 2014, Jan Cholasta wrote: Dne 20.10.2014 v 23:40 Martin Basti napsal(a): On 20/10/14 18:28, Jan Cholasta wrote: Hi, Dne 20.10.2014 v 17:37 Petr Spacek napsal(a): On 20.10.2014 17:21, Martin Basti wrote: Hello! Hold your

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Jan Cholasta
Dne 21.10.2014 v 08:33 Jan Cholasta napsal(a): Dne 20.10.2014 v 23:40 Martin Basti napsal(a): On 20/10/14 18:28, Jan Cholasta wrote: Hi, Dne 20.10.2014 v 17:37 Petr Spacek napsal(a): On 20.10.2014 17:21, Martin Basti wrote: Hello! Hold your hats, DNSSEC patches are here. Martin^2, Petr^2

Re: [Freeipa-devel] [PATCH 0001] migrate-ds: Fix to exclude attrs with uppercase characters from migration

2014-10-21 Thread Thorsten Scherf
Just realized that I sent the email without body. Mea culpa. Here we go: Fix entry_attr case to make migrate-ds work again Migration of a OpenLDAP based directory to FreeIPA with some objectclasses removed failed because of --user-ignore-attribute didn't work. Fixed that by making LDAPEntry

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Martin Kosek
On 10/21/2014 08:50 AM, Jan Cholasta wrote: Dne 21.10.2014 v 08:45 Alexander Bokovoy napsal(a): On Tue, 21 Oct 2014, Jan Cholasta wrote: Dne 20.10.2014 v 23:40 Martin Basti napsal(a): On 20/10/14 18:28, Jan Cholasta wrote: Hi, Dne 20.10.2014 v 17:37 Petr Spacek napsal(a): On 20.10.2014

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Alexander Bokovoy
On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/21/2014 08:50 AM, Jan Cholasta wrote: Dne 21.10.2014 v 08:45 Alexander Bokovoy napsal(a): On Tue, 21 Oct 2014, Jan Cholasta wrote: Dne 20.10.2014 v 23:40 Martin Basti napsal(a): On 20/10/14 18:28, Jan Cholasta wrote: Hi, Dne 20.10.2014 v 17:37

Re: [Freeipa-devel] [PATCH] 131-132 extdom: add support for sss_nss_getorigbyname()

2014-10-21 Thread Martin Kosek
On 10/20/2014 03:49 PM, Martin Kosek wrote: On 10/20/2014 03:30 PM, Jakub Hrozek wrote: On Mon, Oct 20, 2014 at 10:43:07AM +0200, Sumit Bose wrote: On Sun, Oct 19, 2014 at 10:04:29PM +0200, Jakub Hrozek wrote: On Fri, Oct 17, 2014 at 11:53:44AM +0200, Sumit Bose wrote: Hi, the first patch

[Freeipa-devel] [PATCH 0285] spec: Bump SSSD requires to 1.12.2

2014-10-21 Thread Tomas Babej
Hi, this bumps the required SSSD version for the upcoming release. -- Tomas Babej Associate Software Engineer | Red Hat | Identity Management RHCE | Brno Site | IRC: tbabej | freeipa.org From a1a3110f6b31b1ad00551dc0c3beb8d00e829cf9 Mon Sep 17 00:00:00 2001 From: Tomas Babej tba...@redhat.com

Re: [Freeipa-devel] [PATCH] 779 webui: do not show closed dialog

2014-10-21 Thread Petr Vobornik
On 20.10.2014 22:07, Endi Sukma Dewata wrote: On 10/20/2014 12:22 PM, Petr Vobornik wrote: Fixes issues when dialog is not removed from `IPA.opened_dialogs` registry when dialog.close() is called while the dialog is not shown, i.e., while other dialog is shown. Without it, the dialog is could

Re: [Freeipa-devel] [PATCH] 780 webui: update combobox input on list click

2014-10-21 Thread Petr Vobornik
On 20.10.2014 22:07, Endi Sukma Dewata wrote: On 10/20/2014 12:22 PM, Petr Vobornik wrote: Change event of combobox is not triggered when there is only one value. Calling it's handler even for option's 'click' event makes sure that value of input gets always updated. ACK. added ticket:

Re: [Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-21 Thread Martin Kosek
On 10/21/2014 08:41 AM, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/20/2014 08:25 PM, Alexander Bokovoy wrote: Hi! This patch is for ipa-4-1 branch to enable uniqueness plugin for uid attribute for entries with objectclass posixAccount. We don't have uid

Re: [Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-21 Thread thierry bordaz
On 10/20/2014 08:25 PM, Alexander Bokovoy wrote: Hi! This patch is for ipa-4-1 branch to enable uniqueness plugin for uid attribute for entries with objectclass posixAccount. We don't have uid uniqueness enforced in FreeIPA 4.1 yet but for posixAccounts it worked due to our design of a flat

Re: [Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-21 Thread Alexander Bokovoy
On Tue, 21 Oct 2014, thierry bordaz wrote: On 10/20/2014 08:25 PM, Alexander Bokovoy wrote: Hi! This patch is for ipa-4-1 branch to enable uniqueness plugin for uid attribute for entries with objectclass posixAccount. We don't have uid uniqueness enforced in FreeIPA 4.1 yet but for

Re: [Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-21 Thread Alexander Bokovoy
On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/21/2014 08:41 AM, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/20/2014 08:25 PM, Alexander Bokovoy wrote: Hi! This patch is for ipa-4-1 branch to enable uniqueness plugin for uid attribute for entries with objectclass

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread David Kupka
On 10/21/2014 10:57 AM, Martin Basti wrote: snip IPA-4-1 patches attached jcholast-357 patch should be applied last If there is no objections I will rebase to master branch after ack Works good for me but I didn't read the code. ACK for functionality.

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Martin Kosek
On 10/21/2014 12:14 PM, David Kupka wrote: On 10/21/2014 10:57 AM, Martin Basti wrote: snip IPA-4-1 patches attached jcholast-357 patch should be applied last If there is no objections I will rebase to master branch after ack Works good for me but I didn't read the code. ACK for

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Martin Kosek
On 10/21/2014 12:21 PM, Martin Basti wrote: On 21/10/14 12:14, David Kupka wrote: On 10/21/2014 10:57 AM, Martin Basti wrote: snip IPA-4-1 patches attached jcholast-357 patch should be applied last If there is no objections I will rebase to master branch after ack Works good for me

Re: [Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-21 Thread Alexander Bokovoy
On Tue, 21 Oct 2014, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/21/2014 08:41 AM, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/20/2014 08:25 PM, Alexander Bokovoy wrote: Hi! This patch is for ipa-4-1 branch to enable uniqueness plugin

Re: [Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-21 Thread Martin Kosek
On 10/21/2014 12:41 PM, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/21/2014 08:41 AM, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/20/2014 08:25 PM, Alexander Bokovoy wrote: Hi! This patch

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Petr Viktorin
On 10/20/2014 05:21 PM, Martin Basti wrote: Hello! Hold your hats, DNSSEC patches are here. Martin^2, Petr^2 New compiler warnings: library.c:72: ISO C forbids conversion of object pointer to function pointer type [-Wpedantic] p11helper.c:500: passing argument 1 of 'loadLibrary' discards

Re: [Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-21 Thread Jan Cholasta
Dne 21.10.2014 v 13:10 Martin Kosek napsal(a): On 10/21/2014 12:41 PM, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/21/2014 08:41 AM, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/20/2014

Re: [Freeipa-devel] [PATCH, 4.1] 0166 updater: enable uid uniqueness plugin for posixAccount objects

2014-10-21 Thread Martin Kosek
On 10/21/2014 01:28 PM, Jan Cholasta wrote: Dne 21.10.2014 v 13:10 Martin Kosek napsal(a): On 10/21/2014 12:41 PM, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Alexander Bokovoy wrote: On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/21/2014 08:41 AM, Alexander Bokovoy wrote: On Tue, 21 Oct

[Freeipa-devel] [PATCH 0151] Fix DNS validation

2014-10-21 Thread Martin Basti
Blocker for ipa-4-1 Patch attached -- Martin Basti From d0bb0cc66f8d26c99bd5f9afaf9403f20e4424e2 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Tue, 21 Oct 2014 13:59:42 +0200 Subject: [PATCH] fix forwarder validation errors Fix tests, validation in dnsconfig mod, wuser

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Petr Spacek
On 21.10.2014 13:11, Petr Viktorin wrote: On 10/20/2014 05:21 PM, Martin Basti wrote: Hello! Hold your hats, DNSSEC patches are here. Martin^2, Petr^2 New compiler warnings: library.c:72: ISO C forbids conversion of object pointer to function pointer type [-Wpedantic] p11helper.c:500:

[Freeipa-devel] [PATCH 0152] Fix DNSSEC restored value

2014-10-21 Thread Martin Basti
Patch attached -- Martin Basti From d32a6c982383a26980bbe464d8968fe7f681ca59 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Tue, 21 Oct 2014 14:13:29 +0200 Subject: [PATCH] fix DNSSEC restore named state --- ipaserver/install/bindinstance.py | 4 ++-- 1 file changed, 2

Re: [Freeipa-devel] [PATCH 0151] Fix DNS validation

2014-10-21 Thread Martin Kosek
On 10/21/2014 02:03 PM, Martin Basti wrote: Blocker for ipa-4-1 This and the uninstall issue I found: # ipa-server-install --uninstall --unattended Shutting down all IPA services Removing IPA client configuration Unconfiguring ntpd Unconfiguring CA Unconfiguring named Unconfiguring web server

Re: [Freeipa-devel] [PATCH 0151] Fix DNS validation

2014-10-21 Thread Martin Basti
On 21/10/14 14:18, Martin Kosek wrote: On 10/21/2014 02:03 PM, Martin Basti wrote: Blocker for ipa-4-1 This and the uninstall issue I found: # ipa-server-install --uninstall --unattended Shutting down all IPA services Removing IPA client configuration Unconfiguring ntpd Unconfiguring CA

[Freeipa-devel] [PATCH] 0167: default to TLSv1.0/1.1 for IPA server side

2014-10-21 Thread Alexander Bokovoy
Hi! See the commit message for the details. -- / Alexander Bokovoy From c01dd6af8054dbc1f7ff753be64084f5f5ba797c Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy aboko...@redhat.com Date: Tue, 21 Oct 2014 15:59:04 +0300 Subject: [PATCH 2/2] Default to use TLSv1.0 and TLSv1.1 on the IPA server

Re: [Freeipa-devel] [PATCHES 0117, 0135-0149] DNSSEC support

2014-10-21 Thread Simo Sorce
On Tue, 21 Oct 2014 10:50:37 +0300 Alexander Bokovoy aboko...@redhat.com wrote: On Tue, 21 Oct 2014, Martin Kosek wrote: On 10/21/2014 08:50 AM, Jan Cholasta wrote: Dne 21.10.2014 v 08:45 Alexander Bokovoy napsal(a): On Tue, 21 Oct 2014, Jan Cholasta wrote: Dne 20.10.2014 v 23:40 Martin

Re: [Freeipa-devel] [PATCH 0152] Fix DNSSEC restored value

2014-10-21 Thread Petr Spacek
On 21.10.2014 14:18, Martin Basti wrote: Patch attached ACK -- Petr^2 Spacek ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH 0151] Fix DNS validation

2014-10-21 Thread Petr Spacek
On 21.10.2014 14:19, Martin Basti wrote: On 21/10/14 14:18, Martin Kosek wrote: On 10/21/2014 02:03 PM, Martin Basti wrote: Blocker for ipa-4-1 This and the uninstall issue I found: # ipa-server-install --uninstall --unattended Shutting down all IPA services Removing IPA client

Re: [Freeipa-devel] [PATCH 0152] Fix DNSSEC restored value

2014-10-21 Thread Petr Vobornik
On 21.10.2014 15:45, Petr Spacek wrote: On 21.10.2014 14:18, Martin Basti wrote: Patch attached ACK Pushed to: master: 3eec7e1f53f298d752204f6268b8228ebb1ef55e ipa-4-1: 27290bf32d722e4494feb7a235b52ebfeb5c1023 -- Petr Vobornik ___ Freeipa-devel

Re: [Freeipa-devel] [PATCH] 0167: default to TLSv1.0/1.1 for IPA server side

2014-10-21 Thread Martin Kosek
On 10/21/2014 03:02 PM, Alexander Bokovoy wrote: Hi! See the commit message for the details. Works for me. I tested client from Fedora or RHEL-6 and it worked fine. ACK! Pushed to: master: 20761f7fcd86dbfad53af78bce2bd3892dfe8232 ipa-4-1: 77b5a81da8f777c65e7a21823a29598804f64cf9 ipa-4-0:

Re: [Freeipa-devel] [PATCH 0151] Fix DNS validation

2014-10-21 Thread Petr Vobornik
On 21.10.2014 15:45, Petr Spacek wrote: On 21.10.2014 14:19, Martin Basti wrote: On 21/10/14 14:18, Martin Kosek wrote: On 10/21/2014 02:03 PM, Martin Basti wrote: Blocker for ipa-4-1 This and the uninstall issue I found: # ipa-server-install --uninstall --unattended Shutting down all IPA

[Freeipa-devel] issues with Debian port

2014-10-21 Thread Timo Aaltonen
On 20.10.2014 09:47, Martin Kosek wrote: As usual, let us know if you hit problems with porting FreeIPA there or extending our platform-independent code. Right, so I've hit a blocker issue I'm not so sure about.. client install will fail with: 2014-10-21T08:29:30Z INFO trying