Re: [Freeipa-devel] [PATCH] 290 set cert_t context on some files for selfsign plugin

2009-10-08 Thread John Dennis
On 10/08/2009 05:22 PM, Rob Crittenden wrote: John Dennis wrote: Thanks Rob. BTW, I was going to add a try/except block around that code in selfsign and return a non-zero status if it fails. Do we have predefined status codes I should be using? I'm assuming you mean around the certs.next_seri

Re: [Freeipa-devel] [PATCH] 290 set cert_t context on some files for selfsign plugin

2009-10-08 Thread Rob Crittenden
John Dennis wrote: On 10/08/2009 05:11 PM, Rob Crittenden wrote: I missed this file when I did the last CA patch :-( This sets the cert_t context on some files needed for the selfsign plugin to work. It needs to let httpd write the serial number file and open the NSS database. Thanks Rob. BTW

Re: [Freeipa-devel] [PATCH] 290 set cert_t context on some files for selfsign plugin

2009-10-08 Thread John Dennis
On 10/08/2009 05:11 PM, Rob Crittenden wrote: I missed this file when I did the last CA patch :-( This sets the cert_t context on some files needed for the selfsign plugin to work. It needs to let httpd write the serial number file and open the NSS database. Thanks Rob. BTW, I was going to add

[Freeipa-devel] [PATCH] 290 set cert_t context on some files for selfsign plugin

2009-10-08 Thread Rob Crittenden
I missed this file when I did the last CA patch :-( This sets the cert_t context on some files needed for the selfsign plugin to work. It needs to let httpd write the serial number file and open the NSS database. rob freeipa-290-selinux.patch Description: application/mbox smime.p7s Descri

[Freeipa-devel] [PATCH] 289 fix host admin acis

2009-10-08 Thread Rob Crittenden
It appears I missed a couple of ACI's when we changed the DN format of hosts. rob freeipa-289-aci.patch Description: application/mbox smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-devel mailing list Freeipa-devel@redhat.com http

[Freeipa-devel] [PATCH] 288 man page for ipa-join

2009-10-08 Thread Rob Crittenden
Add a man page for the new ipa-join command. rob freeipa-288-man.patch Description: application/mbox smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinf

[Freeipa-devel] Re: [PATCH] Fix bug in HBAC and netgroup plugin get_primary_key_from_dn methods.

2009-10-08 Thread Rob Crittenden
Pavel Zuna wrote: Rob Crittenden wrote: Pavel Zuna wrote: The method was returning tuples instead of strings in both plugins causing a mess in other plugins, when displaying netgroup/HBAC information. Pavel Assuming that the primary key doesn't exist, what meaning does returning '' have?

[Freeipa-devel] Re: [PATCH] Fix bug in group plugin. Was using wrong variable for attributes.

2009-10-08 Thread Rob Crittenden
Pavel Zuna wrote: Fixes bug #527537: https://bugzilla.redhat.com/show_bug.cgi?id=527537 Pavel ack, pushed to master smime.p7s Description: S/MIME Cryptographic Signature ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com

[Freeipa-devel] Re: [PATCH] Fix bug in HBAC and netgroup plugin get_primary_key_from_dn methods.

2009-10-08 Thread Pavel Zuna
Rob Crittenden wrote: Pavel Zuna wrote: The method was returning tuples instead of strings in both plugins causing a mess in other plugins, when displaying netgroup/HBAC information. Pavel Assuming that the primary key doesn't exist, what meaning does returning '' have? For these 2 plugins

[Freeipa-devel] [PATCH] Fix bug in group plugin. Was using wrong variable for attributes.

2009-10-08 Thread Pavel Zuna
Fixes bug #527537: https://bugzilla.redhat.com/show_bug.cgi?id=527537 Pavel 0001-Fix-bug-in-group-plugin.-Was-using-wrong-variable-fo.patch Description: application/mbox ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/ma