Re: [Freeipa-devel] [PATCH] Fix crash in modrdn plugin

2010-11-23 Thread Jakub Hrozek
On Mon, Nov 22, 2010 at 03:55:52PM -0500, Simo Sorce wrote: I was stupidly assigning a const string to a variable that would be freed later. Fixes bug #529 Simo. -- Simo Sorce * Red Hat, Inc * New York This patch is obviously correct and gets rid of the segfault (also fixes one other

[Freeipa-devel] [PATCH] Add new version of DNS plugin: complete rework with baseldap + unit tests.

2010-11-23 Thread Pavel Zuna
Finally managed to rewrite the DNS plugin again. Sorry, it took so long, we had training in the office and I also had a nasty bug in baseldap.py I couldn't find. Anyway, this version has it all: - changes we agreed on meeting, the resource abstraction is gone and we now only have zones and

Re: [Freeipa-devel] [PATCH] 0100-top-nav-index

2010-11-23 Thread Adam Young
On 11/23/2010 02:15 PM, Endi Sukma Dewata wrote: On 11/22/2010 10:41 AM, Adam Young wrote: Without reordering things now, I propose we allow for a three level structure in the tab_set. Top level will not be an entity. Second level will be an entity. third level will be a nested entity.

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-23 Thread Rob Crittenden
Stephen Gallagher wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/22/2010 10:54 PM, Dmitri Pal wrote: Hi, During the conversation with Ben and Kyle today over the calendar screen two things came up: 1) Time zone 2) Duration Time zone snip Time zone should always be entered

Re: [Freeipa-devel] Where we are with SUDO?

2010-11-23 Thread Nalin Dahyabhai
On Mon, Nov 22, 2010 at 07:18:42PM +, JR Aquino wrote: On 11/18/10 3:11 PM, Dmitri Pal d...@redhat.com wrote: JR Aquino wrote: The IPA SudoRule Structure has largely been based off of what we are doing today with HBAC. HBAC does not distinguish between memberGroup or

Re: [Freeipa-devel] Other issues with HBAC calendar

2010-11-23 Thread Simo Sorce
On Tue, 23 Nov 2010 16:07:47 -0500 Rob Crittenden rcrit...@redhat.com wrote: I don't want to throw a wrench in, but what if you have multiple replicas in various distant locations, WHICH server is the time relative to? By server I think Steve meant the machine currently evaluation the access

[Freeipa-devel] [PATCH] 0022 Enable EntryUSN plugin by default

2010-11-23 Thread Simo Sorce
This patch enables the entryUSN plugin by default at install time. EntryUSN numbers are ususful fro clients that want to track newest objects w/o having to care about timestamps dated in the past and replicated by other masters. EntrUSN numbers are valid only in the context of a single server,

Re: [Freeipa-devel] [PATCH] 583 update DNS when adding/removing host

2010-11-23 Thread Rob Crittenden
Rob Crittenden wrote: Simo Sorce wrote: On Wed, 20 Oct 2010 10:26:08 -0400 Rob Crittendenrcrit...@redhat.com wrote: Add ability to add/remove DNS records when adding/removing a host entry. A host in DNS must have an IP address so a valid IP address is required when adding a host. The --force

Re: [Freeipa-devel] [PATCH] 583 update DNS when adding/removing host

2010-11-23 Thread Simo Sorce
On Tue, 23 Nov 2010 17:48:29 -0500 Rob Crittenden rcrit...@redhat.com wrote: Rob Crittenden wrote: Simo Sorce wrote: On Wed, 20 Oct 2010 10:26:08 -0400 Rob Crittendenrcrit...@redhat.com wrote: Add ability to add/remove DNS records when adding/removing a host entry. A host in DNS

Re: [Freeipa-devel] [PATCH] Add new version of DNS plugin: complete rework with baseldap + unit tests.

2010-11-23 Thread Adam Young
On 11/23/2010 09:37 AM, Pavel Zuna wrote: Finally managed to rewrite the DNS plugin again. Sorry, it took so long, we had training in the office and I also had a nasty bug in baseldap.py I couldn't find. Anyway, this version has it all: - changes we agreed on meeting, the resource abstraction

Re: [Freeipa-devel] [PATCH] Generate better DuplicateEntry error message in LDAPCreate.

2010-11-23 Thread Adam Young
On 11/23/2010 09:39 AM, Pavel Zuna wrote: DuplicateEntry error messages generated by LDAPCreate are now detailed like this: ipa: ERROR: user with name testuser already exists Solves ticket #530. It works for everything, not just the objects described in this ticket. Pavel

Re: [Freeipa-devel] [PATCH] Change signature of LDAPSearch.pre_callback.

2010-11-23 Thread Rob Crittenden
Pavel Zuna wrote: Add the opportunity to change base DN and scope in the callback. This makes the callback a lot more powerful, because it enables the plugin author to broaden or completely change the search location. Pavel Ack. ___ Freeipa-devel

Re: [Freeipa-devel] [PATCH] Generate better DuplicateEntry error message in LDAPCreate.

2010-11-23 Thread Rob Crittenden
Pavel Zuna wrote: DuplicateEntry error messages generated by LDAPCreate are now detailed like this: ipa: ERROR: user with name testuser already exists Solves ticket #530. It works for everything, not just the objects described in this ticket. Pavel ack