Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Adam Young
Ah, ok. I think something like: MULTICALL: list of CALL CALL: dict(METHODNAME, ARGS, OPTIONS) METHODNAME: string ARGS: list OPTIONS: dict ex: This looks right, but I lack the Python knowledge to translate this directly to code. Is this something that would be declared in the plugin,

[Freeipa-devel] Proposed deltion of Git branches origin/webui-details and origin/webui-cleanup

2010-10-22 Thread Adam Young
Unless anyone objects, I will delete these two branches. They have no commits on them that are not reflected in the master, and provide no useful purpose. ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo

Re: [Freeipa-devel] [PATCH] 584 fix 2 tests

2010-10-22 Thread Rob Crittenden
Simo Sorce wrote: On Wed, 20 Oct 2010 13:19:29 -0400 Rob Crittenden wrote: The first test is a mismatch in the sample output of an exception. The second test adds certificate information output to the service plugin. ACK Simo. pushed to master rob _

Re: [Freeipa-devel] [PATCH] 581 remove enrolledBy when unenrolled

2010-10-22 Thread Rob Crittenden
Simo Sorce wrote: On Wed, 20 Oct 2010 17:14:56 -0400 Rob Crittenden wrote: Rob Crittenden wrote: Dmitri Pal wrote: Simo Sorce wrote: On Fri, 15 Oct 2010 17:27:07 -0400 Rob Crittenden wrote: Remove the enrolledBy when a host is unenrolled (which is the same as disabling the host). ticke

Re: [Freeipa-devel] [PATCH] 577 Grant /usr/sbin/ipa_kpasswd "name_bind" access.

2010-10-22 Thread Rob Crittenden
Simo Sorce wrote: On Thu, 14 Oct 2010 14:45:20 -0400 Rob Crittenden wrote: Fix an SELinux problem by granting /usr/sbin/ipa_kpasswd "name_bind" access. This requires selinux-policy-3.6.32-123 on F12 and I took an educated guess and set the minimum on F13 to selinux-policy-3.7.19-40. ticket 7

Re: [Freeipa-devel] [PATCH] 566 disallow writes on some attributes

2010-10-22 Thread Rob Crittenden
Simo Sorce wrote: On Fri, 08 Oct 2010 15:07:53 -0400 Rob Crittenden wrote: Rob Crittenden wrote: Disallow writes on serverHostName, enrolledBy and memberOf Regular users already can't write these, it just affects admins. serverHostName because this is tied to the FQDN so should only be chan

Re: [Freeipa-devel] [PATCH] 562 set default encoding, print as unicode

2010-10-22 Thread Rob Crittenden
Simo Sorce wrote: On Wed, 06 Oct 2010 14:12:40 -0400 Rob Crittenden wrote: Set default encoding to utf-8, use unicode when printing output. The Gettext() object only does the lookup when you print it as a unicode. ticket 308 This patch indirectly relies on patch 561 which provides the encod

Re: [Freeipa-devel] [PATCH] 561 set default python encoding to utf-8

2010-10-22 Thread Rob Crittenden
Simo Sorce wrote: On Wed, 06 Oct 2010 13:51:22 -0400 Rob Crittenden wrote: Add a module that we will load that will set the default encoding to utf-8 instead of ascii. $ python >>> import sys >>> sys.getdefaultencoding() 'ascii' >>> import default_encoding_utf8 >>> sys.getdefaulte

[Freeipa-devel] Should we remove the reset button?

2010-10-22 Thread Adam Young
http://www.useit.com/alertbox/2416.html Since we have line level undo (which he advocates) perhaps the reset button is not worth while. Since the user can reload the page at will, there is a built in reset button already, and there slight risk of hitting the wrong button may in fact outwe

Re: [Freeipa-devel] [PATCH] Add fail-safe defaults to time and size limits in ldap2 searches.

2010-10-22 Thread Adam Young
On 10/22/2010 05:08 PM, Rob Crittenden wrote: Pavel Zuna wrote: On 10/20/2010 11:42 PM, Rob Crittenden wrote: Pavel Zuna wrote: On 10/14/2010 03:30 PM, Rob Crittenden wrote: Pavel Zuna wrote: There was no default value set even though we were using config.get and it was throwing exceptions i

Re: [Freeipa-devel] [PATCH] admiyo-freeipa-0064-Multivalue-fixes.patch

2010-10-22 Thread Adam Young
On 10/22/2010 05:14 PM, Rob Crittenden wrote: Adam Young wrote: https://fedorahosted.org/freeipa/ticket/384 Strikethrough is now a toggle undo resets value to blank for new entries. ack Pushed to master ___ Freeipa-devel mailing list Freeipa-devel

Re: [Freeipa-devel] [PATCH] #333 plugin to change kerberos principal name when user is renamed

2010-10-22 Thread Simo Sorce
On Fri, 22 Oct 2010 17:46:55 -0400 Rob Crittenden wrote: > Simo Sorce wrote: > > > > This plugin intercepts a modrdn change so that when a user is > > renamed the krbprincipalname is changhed accordingly. > > > > The second patch activates the plugin. > > > > Simo. > > Should ipaModRDNscope be s

Re: [Freeipa-devel] [Fwd: [freeipa] #402: SUDO command attribute should be case sensitive]

2010-10-22 Thread Dmitri Pal
Simo Sorce wrote: > On Wed, 20 Oct 2010 15:42:17 -0400 > Dmitri Pal wrote: > > >> Any suggestions what it should be? >> Should we create a new attribute or there is something handy to reuse? >> > > Probably makes sense to add a custom attribute, properly named. > > Ok I will propose one

Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Dmitri Pal
Simo Sorce wrote: > On Fri, 22 Oct 2010 17:50:50 -0400 > Dmitri Pal wrote: > > >> There should be some metadata about what to do if some call fails. >> Like fail the whole thing and stop or continue for the rest. >> So there should be a dictionary of the multicall properties. >> >> > > thi

Re: [Freeipa-devel] [Fwd: [freeipa] #402: SUDO command attribute should be case sensitive]

2010-10-22 Thread Simo Sorce
On Wed, 20 Oct 2010 15:42:17 -0400 Dmitri Pal wrote: > Any suggestions what it should be? > Should we create a new attribute or there is something handy to reuse? Probably makes sense to add a custom attribute, properly named. Simo. > Original Message > Subject: [freeipa

Re: [Freeipa-devel] [PATCH] 584 fix 2 tests

2010-10-22 Thread Simo Sorce
On Wed, 20 Oct 2010 13:19:29 -0400 Rob Crittenden wrote: > The first test is a mismatch in the sample output of an exception. > > The second test adds certificate information output to the service > plugin. ACK Simo. -- Simo Sorce * Red Hat, Inc * New York __

Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Simo Sorce
On Fri, 22 Oct 2010 17:50:50 -0400 Dmitri Pal wrote: > There should be some metadata about what to do if some call fails. > Like fail the whole thing and stop or continue for the rest. > So there should be a dictionary of the multicall properties. > this would mean introducing "chained" calls,

Re: [Freeipa-devel] [PATCH] 581 remove enrolledBy when unenrolled

2010-10-22 Thread Simo Sorce
On Wed, 20 Oct 2010 17:14:56 -0400 Rob Crittenden wrote: > Rob Crittenden wrote: > > Dmitri Pal wrote: > >> Simo Sorce wrote: > >>> On Fri, 15 Oct 2010 17:27:07 -0400 > >>> Rob Crittenden wrote: > >>> > >>> > Remove the enrolledBy when a host is unenrolled (which is the > same as disabl

Re: [Freeipa-devel] [PATCH] 577 Grant /usr/sbin/ipa_kpasswd "name_bind" access.

2010-10-22 Thread Simo Sorce
On Thu, 14 Oct 2010 14:45:20 -0400 Rob Crittenden wrote: > Fix an SELinux problem by granting /usr/sbin/ipa_kpasswd "name_bind" > access. > > This requires selinux-policy-3.6.32-123 on F12 and I took an educated > guess and set the minimum on F13 to selinux-policy-3.7.19-40. > > ticket 73 ACK

Re: [Freeipa-devel] [PATCH] 566 disallow writes on some attributes

2010-10-22 Thread Simo Sorce
On Fri, 08 Oct 2010 15:07:53 -0400 Rob Crittenden wrote: > Rob Crittenden wrote: > > Disallow writes on serverHostName, enrolledBy and memberOf > > > > Regular users already can't write these, it just affects admins. > > > > serverHostName because this is tied to the FQDN so should only be > > ch

Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Rob Crittenden
Dmitri Pal wrote: Rob Crittenden wrote: Adam Young wrote: On 10/22/2010 04:08 PM, Rob Crittenden wrote: Adam Young wrote: I did a quick spike into what it would take to implement my idea and got this far (done in internal.py) class bulk(Command): takes_args = ( List('methods?', doc=_('Nest

Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Dmitri Pal
Rob Crittenden wrote: > Adam Young wrote: >> On 10/22/2010 04:08 PM, Rob Crittenden wrote: >>> Adam Young wrote: I did a quick spike into what it would take to implement my idea and got this far (done in internal.py) class bulk(Command): takes_args = ( L

Re: [Freeipa-devel] [PATCH] 562 set default encoding, print as unicode

2010-10-22 Thread Simo Sorce
On Wed, 06 Oct 2010 14:12:40 -0400 Rob Crittenden wrote: > Set default encoding to utf-8, use unicode when printing output. > > The Gettext() object only does the lookup when you print it as a > unicode. > > ticket 308 > > This patch indirectly relies on patch 561 which provides the encoding

Re: [Freeipa-devel] [PATCH] 561 set default python encoding to utf-8

2010-10-22 Thread Simo Sorce
On Wed, 06 Oct 2010 13:51:22 -0400 Rob Crittenden wrote: > Add a module that we will load that will set the default encoding to > utf-8 instead of ascii. > > $ python > >>> import sys > >>> sys.getdefaultencoding() > 'ascii' > >>> import default_encoding_utf8 > >>> sys.getdefaultencoding()

Re: [Freeipa-devel] [PATCH] #333 plugin to change kerberos principal name when user is renamed

2010-10-22 Thread Rob Crittenden
Simo Sorce wrote: This plugin intercepts a modrdn change so that when a user is renamed the krbprincipalname is changhed accordingly. The second patch activates the plugin. Simo. Should ipaModRDNscope be set to the user container instead of $SUFFIX? rob

Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Rob Crittenden
Adam Young wrote: On 10/22/2010 04:08 PM, Rob Crittenden wrote: Adam Young wrote: I did a quick spike into what it would take to implement my idea and got this far (done in internal.py) class bulk(Command): takes_args = ( List('methods?', doc=_('Nested Methods to execute'), ), ) has_output

[Freeipa-devel] [PATCH] #333 plugin to change kerberos principal name when user is renamed

2010-10-22 Thread Simo Sorce
This plugin intercepts a modrdn change so that when a user is renamed the krbprincipalname is changhed accordingly. The second patch activates the plugin. Simo. -- Simo Sorce * Red Hat, Inc * New York >From 8dbbc7a916202905375358670c5b7a6378f7e67d Mon Sep 17 00:00:00 2001 From: Simo Sorce Dat

Re: [Freeipa-devel] [PATCH] #360 ipa-uuid plugin

2010-10-22 Thread Simo Sorce
On Fri, 22 Oct 2010 17:05:46 -0400 Rob Crittenden wrote: > Simo Sorce wrote: > > On Tue, 19 Oct 2010 17:13:03 -0400 > > Simo Sorce wrote: > > > >> On Mon, 18 Oct 2010 17:15:29 -0400 > >> Simo Sorce wrote: > >> > >>> > >>> These 2 patches configure and load a new plugin that uses internal > >>>

Re: [Freeipa-devel] [PATCH] #403 Handle multiline options in sysconfig.ntpd

2010-10-22 Thread Simo Sorce
On Fri, 22 Oct 2010 16:43:47 -0400 Rob Crittenden wrote: > Simo Sorce wrote: > > On Thu, 21 Oct 2010 17:07:01 -0400 > > Simo Sorce wrote: > > > >> On Wed, 20 Oct 2010 22:25:26 -0400 > >> Rob Crittenden wrote: > >> > >>> Simo Sorce wrote: > > In some Fedora versions /etc/sysconfig/ntpd

Re: [Freeipa-devel] [PATCH] admiyo-freeipa-0064-Multivalue-fixes.patch

2010-10-22 Thread Rob Crittenden
Adam Young wrote: https://fedorahosted.org/freeipa/ticket/384 Strikethrough is now a toggle undo resets value to blank for new entries. ack ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] Add fail-safe defaults to time and size limits in ldap2 searches.

2010-10-22 Thread Rob Crittenden
Pavel Zuna wrote: On 10/20/2010 11:42 PM, Rob Crittenden wrote: Pavel Zuna wrote: On 10/14/2010 03:30 PM, Rob Crittenden wrote: Pavel Zuna wrote: There was no default value set even though we were using config.get and it was throwing exceptions if someone deleted one of the related config val

Re: [Freeipa-devel] [PATCH] #360 ipa-uuid plugin

2010-10-22 Thread Rob Crittenden
Simo Sorce wrote: On Tue, 19 Oct 2010 17:13:03 -0400 Simo Sorce wrote: On Mon, 18 Oct 2010 17:15:29 -0400 Simo Sorce wrote: These 2 patches configure and load a new plugin that uses internal DS functions to generate UUIDs. The plugin is similar to DNA but instead of generating sequential n

Re: [Freeipa-devel] [PATCH] #403 Handle multiline options in sysconfig.ntpd

2010-10-22 Thread Rob Crittenden
Simo Sorce wrote: On Thu, 21 Oct 2010 17:07:01 -0400 Simo Sorce wrote: On Wed, 20 Oct 2010 22:25:26 -0400 Rob Crittenden wrote: Simo Sorce wrote: In some Fedora versions /etc/sysconfig/ntpd has OPTIONS scattered on multiple line through shell expansion. Handle simple cases like that. Sim

Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Adam Young
On 10/22/2010 04:08 PM, Rob Crittenden wrote: Adam Young wrote: I did a quick spike into what it would take to implement my idea and got this far (done in internal.py) class bulk(Command): takes_args = ( List('methods?', doc=_('Nested Methods to execute'), ), ) has_output = output.standard_e

[Freeipa-devel] [PATCH] admiyo-freeipa-0064-Multivalue-fixes.patch

2010-10-22 Thread Adam Young
https://fedorahosted.org/freeipa/ticket/384 Strikethrough is now a toggle undo resets value to blank for new entries. From 0637d619c91e41d3d0508274d470cbfd7d016c98 Mon Sep 17 00:00:00 2001 From: Adam Young Date: Fri, 22 Oct 2010 16:23:02 -0400 Subject: [PATCH] Multivalue fixes Strikethrough is

Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Rob Crittenden
Adam Young wrote: I did a quick spike into what it would take to implement my idea and got this far (done in internal.py) class bulk(Command): takes_args = ( List('methods?', doc=_('Nested Methods to execute'), ), ) has_output = output.standard_entry def execute(self, *args, **options): resul

Re: [Freeipa-devel] Bulk IPA commands

2010-10-22 Thread Adam Young
I did a quick spike into what it would take to implement my idea and got this far (done in internal.py) class bulk(Command): takes_args = ( List('methods?', doc=_('Nested Methods to execute'), ), ) has_output = output.standard_entry def ex

[Freeipa-devel] [PATCH] admiyo-freeipa-0063-dns-work.patch

2010-10-22 Thread Adam Young
Implementation of the UI for DNS records. Search uses filters. Much of the code has been cut and pasted from search.js and add.js, but then significantly modified. Moving forward, we'll have to determine if it is worth the effort to integrate. From faace2d9147c428522f608629c4bf5d9b398bc58 M

Re: [Freeipa-devel] Custom Facets and Views

2010-10-22 Thread Adam Young
On 10/22/2010 12:37 PM, Dmitri Pal wrote: Adam Young wrote: I have a proof of concept working for DNS records. It has lead me to think about how we are going to deal with the UI components that we are currently calling facets, what the proper nomenclature should be, and how we are going to

Re: [Freeipa-devel] Custom Facets and Views

2010-10-22 Thread Dmitri Pal
Adam Young wrote: > I have a proof of concept working for DNS records. It has lead me to > think about how we are going to deal with the UI components that we > are currently calling facets, what the proper nomenclature should be, > and how we are going to manage them moving forward. > > Thus far,

Re: [Freeipa-devel] [PATCH] #403 Handle multiline options in sysconfig.ntpd

2010-10-22 Thread Simo Sorce
On Thu, 21 Oct 2010 17:07:01 -0400 Simo Sorce wrote: > On Wed, 20 Oct 2010 22:25:26 -0400 > Rob Crittenden wrote: > > > Simo Sorce wrote: > > > > > > In some Fedora versions /etc/sysconfig/ntpd has OPTIONS scattered > > > on multiple line through shell expansion. > > > Handle simple cases like

Re: [Freeipa-devel] [PATCH] #360 ipa-uuid plugin

2010-10-22 Thread Simo Sorce
On Tue, 19 Oct 2010 17:13:03 -0400 Simo Sorce wrote: > On Mon, 18 Oct 2010 17:15:29 -0400 > Simo Sorce wrote: > > > > > These 2 patches configure and load a new plugin that uses internal > > DS functions to generate UUIDs. > > The plugin is similar to DNA but instead of generating sequential >

[Freeipa-devel] Custom Facets and Views

2010-10-22 Thread Adam Young
I have a proof of concept working for DNS records. It has lead me to think about how we are going to deal with the UI components that we are currently calling facets, what the proper nomenclature should be, and how we are going to manage them moving forward. Thus far, we have a few basic UI e

Re: [Freeipa-devel] IPA install with DNS

2010-10-22 Thread Rob Crittenden
Jenny Galipeau wrote: Dmitri Pal wrote: Hi, Rob I think it is time for us to put down some writeup about the DNS, /etc/hosts, static and dynamic IPs etc. It seems there is a lot of confusion and uncertainty. Please create a page. It should describe how with the current IPA software someone can

Re: [Freeipa-devel] IPA install with DNS

2010-10-22 Thread Jenny Galipeau
Dmitri Pal wrote: Hi, Rob I think it is time for us to put down some writeup about the DNS, /etc/hosts, static and dynamic IPs etc. It seems there is a lot of confusion and uncertainty. Please create a page. It should describe how with the current IPA software someone can achieve the following: