Re: [Freeipa-devel] Implementing --all as a global option

2010-02-04 Thread Pavel Zuna
Pavel Zuna wrote: I've run into a little problem when implementing --all as a global option. The problem is that I can't see a way, to propagate it to the server side. Plugins could always retrieve all attributes and the client would choose what to display, but that would be very ineffective

[Freeipa-devel] [PATCH] Fix condition bug in ipa-pwd-extop plugin. Variable used uninitialized. [Was: Re: Adding new IPA users on the CLI]

2010-02-04 Thread Pavel Zuna
Rob Crittenden wrote: David O'Brien wrote: I tried this: # /usr/bin/ipa user-add --first=My --last=Name --password User login [mname]: password: Enter password again to verify: ipa: ERROR: Constraint violation:pre-hashed passwords are not valid I entered password as the password. If I enter

Re: [Freeipa-devel] Implementing --all as a global option

2010-02-04 Thread Jason Gerard DeRose
On Thu, 2010-02-04 at 15:55 +0100, Pavel Zuna wrote: Pavel Zuna wrote: I've run into a little problem when implementing --all as a global option. The problem is that I can't see a way, to propagate it to the server side. Plugins could always retrieve all attributes and the client would

[Freeipa-devel] [PATCH] add krbCanonicalName to the schema

2010-02-04 Thread Nalin Dahyabhai
We'll need to incorporate this from krb5 1.7 as a prerequisite for maybe issuing server referrals at some point. Nalin From d0faa0e87ea1f4c211d29f78dc95e7953eaabee6 Mon Sep 17 00:00:00 2001 From: Nalin Dahyabhai nalin.dahyab...@pobox.com Date: Thu, 4 Feb 2010 10:46:43 -0500 Subject: [PATCH 1/1] -

Re: [Freeipa-devel] [PATCH] Fix condition bug in ipa-pwd-extop plugin. Variable used uninitialized. [Was: Re: Adding new IPA users on the CLI]

2010-02-04 Thread Rob Crittenden
Pavel Zuna wrote: Rob Crittenden wrote: David O'Brien wrote: I tried this: # /usr/bin/ipa user-add --first=My --last=Name --password User login [mname]: password: Enter password again to verify: ipa: ERROR: Constraint violation:pre-hashed passwords are not valid I entered password as the

Re: [Freeipa-devel] [PATCH] 370 set default log level

2010-02-04 Thread Rob Crittenden
John Dennis wrote: On 02/03/2010 04:27 PM, Rob Crittenden wrote: The ipa-*-manage programs had the default log level set to NOTSET which was causing copious logging to occur. Setting it to ERROR fixes this. ACK pushed to master ___ Freeipa-devel

[Freeipa-devel] [PATCH] jderose 039 Add support for the 'no_create', 'no_update', and 'no_search' Param flags

2010-02-04 Thread Jason Gerard DeRose
This feature will help restore some missing CLI functionality. It's also a step toward making sure all our attribute metadata is plugable with a per-attribute granularity. See the new module docstring in ipalib/crud.py for details. From b8a67200ba1b2b7ce843dda7e3765bc921f03dcb Mon Sep 17

[Freeipa-devel] [PATCH] more basic stuff for krbCanonicalName

2010-02-04 Thread Nalin Dahyabhai
Just like the krbPrincipalName attribute, we want to let the KDC read the krbCanonicalName, if it's set, and we want it to be unique as well. Nalin From ff32dfe1f68a3ec20d247adbe042307eeb919e6b Mon Sep 17 00:00:00 2001 From: Nalin Dahyabhai nalin.dahyab...@pobox.com Date: Thu, 4 Feb 2010 11:02:49