Re: [Freeipa-devel] [PATCH] Add new pwpolicy plugin based on baseldap classes

2010-05-05 Thread Rob Crittenden
Pavel Zuna wrote: On 04/27/2010 09:49 PM, Rob Crittenden wrote: Pavel Zůna wrote: Don't mind the numbering. This is a completely independent patch. It adds a new pwpolicy plugin based on baseldap.py classes. It has the same functionality as the current pwpolicy plugin, but a more clean and con

Re: [Freeipa-devel] [PATCH] 433 improve hbac output

2010-05-05 Thread Rob Crittenden
Pavel Zůna wrote: On 2010-05-04 21:31, Rob Crittenden wrote: This patch adds more attributes to the default output and fixes up some labels. rob ack. Pavel pushed to master ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redha

Re: [Freeipa-devel] [PATCH] 432 add default open HBAC on install

2010-05-05 Thread Rob Crittenden
Pavel Zůna wrote: On 2010-05-04 21:30, Rob Crittenden wrote: Create an HBAC that allows all users to access all hosts from any host. This should make initial installation and testing easier. It is expected that this rule (allow_all) will be removed before deployment. In case you know you don't

[Freeipa-devel] [PATCH] 435 more client install/uninstall fixes

2010-05-05 Thread Rob Crittenden
Lots of small fixes in the client installer/uninstaller to make it work nicer (or at all): - Move the ipa-getcert request to after we set up /etc/krb5.conf - Don't try removing certificates that don't exist - Don't tell certmonger to stop tracking a cert that doesn't exist - Allow --password/-w

Re: [Freeipa-devel] [PATCH] 433 improve hbac output

2010-05-05 Thread Pavel Zůna
On 2010-05-04 21:31, Rob Crittenden wrote: This patch adds more attributes to the default output and fixes up some labels. rob ack. Pavel ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 432 add default open HBAC on install

2010-05-05 Thread Pavel Zůna
On 2010-05-04 21:30, Rob Crittenden wrote: Create an HBAC that allows all users to access all hosts from any host. This should make initial installation and testing easier. It is expected that this rule (allow_all) will be removed before deployment. In case you know you don't want this you can p

[Freeipa-devel] [PATCH] 434 fix ipa-join segfault

2010-05-05 Thread Rob Crittenden
I set MALLOC_PERTURB_ and ipa-join generated a segfault. This was caused by some uninitialized XML-RPC structures. This patch should fix it up. I also re-arrange some code around determining the server. I got a bit overzealous in my previous attempt to not spew bogus error messages when we don