Re: [Freeipa-devel] Re: [PATCHES] Make plugins use baseldap classes.

2009-10-05 Thread Rob Crittenden
Pavel Zuna wrote: Pavel Zuna wrote: Rob Crittenden wrote: I'm sending an updated version of all the patches. They should apply on the current master. I think they should now address most of your concerns and I also fixed some bugs I found on my own. Pavel Some are good to go, others need s

Re: [Freeipa-devel] Re: [PATCHES] Make plugins use baseldap classes.

2009-10-05 Thread Rob Crittenden
Pavel Zuna wrote: Pavel Zuna wrote: Pavel Zůna wrote: Rob Crittenden wrote: Rob Crittenden wrote: Pavel Zuna wrote: Rob Crittenden wrote: Pavel Zůna wrote: This is a series of patches that depends on patches: - Improve attribute printing in the CLI. - Improve ipalib.plugins.baseldap classe

Re: [Freeipa-devel] Re: [PATCHES] Make plugins use baseldap classes.

2009-10-05 Thread Rob Crittenden
Rob Crittenden wrote: Pavel Zuna wrote: Pavel Zůna wrote: Rob Crittenden wrote: Rob Crittenden wrote: Pavel Zuna wrote: Rob Crittenden wrote: Pavel Zůna wrote: This is a series of patches that depends on patches: - Improve attribute printing in the CLI. - Improve ipalib.plugins.baseldap cl

[Freeipa-devel] Re: [PATCH] Add HBAC plugin and introduce GeneralizedTime parameter type.

2009-10-05 Thread Rob Crittenden
Pavel Zuna wrote: Rob Crittenden wrote: Pavel Zuna wrote: Sumit noticed, that the HBAC plugin didn't make it into the tree and the patch got lost in the depths of freeipa-devel. I reworked the plugin to meet the current standards and changed GeneraliSedTime to GeneraliZedTime. For now, I put

Re: [Freeipa-devel] [PATCH] 284 per-group password policy

2009-10-05 Thread Jason Gerard DeRose
On Fri, 2009-10-02 at 16:07 +0200, Pavel Zuna wrote: > Rob Crittenden wrote: > > Add support for per-group kerberos password policy. > > > > This uses a Class of Service to based on group membership to determine > > which policy should apply. The design doc called for non-overlapping > > groups

Re: [Freeipa-devel] [PATCH] 283 allow no primary key in crud classes

2009-10-05 Thread Jason Gerard DeRose
On Fri, 2009-10-02 at 16:04 +0200, Pavel Zuna wrote: > Rob Crittenden wrote: > > The crud classes required a primary key to be set in order to work. I've > > relaxed that as the pwpolicy plugin has no primary key but I still want > > to take advantage of other aspects of it. > > > > rob > ack. >

Re: [Freeipa-devel] [PATCH] 282 update the KDC aci

2009-10-05 Thread Jason Gerard DeRose
On Fri, 2009-10-02 at 09:37 -0400, Rob Crittenden wrote: > The API protecting the kerberos master key was a bit broad, also > preventing adds and deletes to its subtree. I've relaxed that so I can > add password policy entries which must be stored under the realm entry. > > I also changed the fo

Re: [Freeipa-devel] [PATCH] 281 minor fix for updater

2009-10-05 Thread Jason Gerard DeRose
ack too. pushed to master. On Fri, 2009-10-02 at 16:02 +0200, Pavel Zuna wrote: > Rob Crittenden wrote: > > Robustness fix for ipa-ldap-updater to not blow up if no updates are set > > yet. > > > > rob > ack. > > Pavel ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH] 272 Add delete option to LDAP updater, unit tests

2009-10-05 Thread Jason Gerard DeRose
ack. pushed to master. On Mon, 2009-10-05 at 15:19 -0400, Rob Crittenden wrote: > This gives the updater the ability to delete entries and adds some unit > test cases. > > rob ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redha

[Freeipa-devel] [PATCH] 272 Add delete option to LDAP updater, unit tests

2009-10-05 Thread Rob Crittenden
This gives the updater the ability to delete entries and adds some unit test cases. rob freeipa-272-updater.patch Description: application/mbox smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-devel mailing list Freeipa-devel@redha

Re: [Freeipa-devel] [PATCH] 280 add option to not normalize on adds/updates

2009-10-05 Thread Jason Gerard DeRose
ack. pushed to master. On Fri, 2009-10-02 at 16:02 +0200, Pavel Zuna wrote: > Rob Crittenden wrote: > > Add an option to not run the normalizer against the DN on adds/updates. > > > > The MIT ldap plugin is extremely picky about the format of DNs it adds > > and it does not like the way we norm

Re: [Freeipa-devel] [PATCH] Fix sasl mappings

2009-10-05 Thread Sumit Bose
On Tue, Sep 29, 2009 at 12:43:15PM -0400, Simo Sorce wrote: > Sasl mappings never worked properly with full principal names. > This patch fixes the problem. > > See bug#526284 > > Should probably commit this patch also against v1. > > Simo. this patch works for me with v1 and v2. ACK bye, Sum