[Freeipa-devel] [PATCH] Certificate management with self-signed CA

2010-12-01 Thread Endi Sukma Dewata
Hi, Please review the attached patch. Thanks! The certificate_status_widget has been modified to check for the environment variable ra_plugin to determine the CA used by IPA server. If self-signed CA is used, some operations will not be available (e.g. checking certificate status, revoking/resto

[Freeipa-devel] [PATCH] UI for host managedby

2010-12-01 Thread Endi Sukma Dewata
Hi, Please review the attached patch. Thanks! A custom facet has been added to manage the host's managedby attribute. The facet defines the add and remove methods, the columns for the association table and enrollment dialog, and the link for the primary key column. -- Endi S. Dewata From 0cd043

Re: [Freeipa-devel] [PATCH] Add new version of DNS plugin: complete rework with baseldap + unit tests.

2010-12-01 Thread Adam Young
On 11/24/2010 02:28 PM, Pavel Zůna wrote: On 2010-11-24 16:21, Adam Young wrote: On 11/24/2010 03:46 AM, Pavel Zuna wrote: On 11/24/2010 03:26 AM, Adam Young wrote: On 11/23/2010 09:37 AM, Pavel Zuna wrote: Finally managed to rewrite the DNS plugin again. Sorry, it took so long, we had traini

[Freeipa-devel] [PATCH] Multicolumn enrollment dialog

2010-12-01 Thread Endi Sukma Dewata
Hi, Please review the attached patch. Thanks! https://fedorahosted.org/reviewboard/r/112/ The enrollment dialog has been modified to use scrollable tables that supports multiple columns to display the search results and selected entries. The columns are specified by calling create_adder_column(

Re: [Freeipa-devel] [PATCH] 612 re-implimit permissions

2010-12-01 Thread Simo Sorce
On Wed, 01 Dec 2010 16:01:46 -0500 Rob Crittenden wrote: > Simo Sorce wrote: > > On Thu, 18 Nov 2010 23:11:51 -0500 > > Rob Crittenden wrote: > > > >> Re-implement access control using an updated model. > >> > >> The new model is based on permissions, privileges and roles. Most > >> importantly

Re: [Freeipa-devel] [PATCH] 612 re-implimit permissions

2010-12-01 Thread Adam Young
On 12/01/2010 05:51 PM, Rob Crittenden wrote: Adam Young wrote: On 12/01/2010 05:07 PM, Adam Young wrote: The attached patch is required on top of the changes, as the admin user no longer has any rolegroup, and thus would see the self service api. It should be pushed with this patch. posted the

Re: [Freeipa-devel] [PATCH] 619 more aci target docs

2010-12-01 Thread David O'Brien
Rob Crittenden wrote: I added some more documentation and examples to the aci plugin on targets. ticket 310 rob NACK Running behind with reviews, sorry. Just a few minor fixes: s/targetted/targeted/ s/"This is primarily meant to be able to allow users to add/remove members of a specific gr

[Freeipa-devel] [PATCH] 624 clear up config-show --all

2010-12-01 Thread Rob Crittenden
There were some missing labels in config-show --all, I've added them. I also moved the aci one level higher so it doesn't show (it was confusing). I've made the cert subject base read-only. This isn't something trivially changed. I'm leaving cn without a label, there isn't anything clever to

Re: [Freeipa-devel] [PATCH] 612 re-implimit permissions

2010-12-01 Thread Rob Crittenden
Adam Young wrote: On 12/01/2010 05:07 PM, Adam Young wrote: The attached patch is required on top of the changes, as the admin user no longer has any rolegroup, and thus would see the self service api. It should be pushed with this patch. posted the wrong version. THis one checks for presence o

Re: [Freeipa-devel] [PATCH] 612 re-implimit permissions

2010-12-01 Thread Adam Young
On 12/01/2010 05:07 PM, Adam Young wrote: The attached patch is required on top of the changes, as the admin user no longer has any rolegroup, and thus would see the self service api. It should be pushed with this patch. posted the wrong version. THis one checks for presence of the group admi

Re: [Freeipa-devel] [PATCH] 612 re-implimit permissions

2010-12-01 Thread Adam Young
The attached patch is required on top of the changes, as the admin user no longer has any rolegroup, and thus would see the self service api. It should be pushed with this patch. On 12/01/2010 04:01 PM, Rob Crittenden wrote: Simo Sorce wrote: On Thu, 18 Nov 2010 23:11:51 -0500 Rob Crittend

Re: [Freeipa-devel] [PATCH] admiyo-0105-action-panel-sibling

2010-12-01 Thread Endi Sukma Dewata
On 11/30/2010 4:39 PM, Adam Young wrote: A note on this patch: I changed the labels on a couple of the entities for consitancy sake, including: Added 'HBAC' to the label for HBAC services Capitalized SUDO Removed the word Rule from the SUDO label Not sure if these will have any effect on the CL

Re: [Freeipa-devel] [PATCH] 621 drop install/tools/README

2010-12-01 Thread Jakub Hrozek
On Tue, Nov 30, 2010 at 02:02:00PM -0500, Rob Crittenden wrote: > The README in install/tools is really for v1 and contains almost > nothing useful for v2 so I'm proposing to drop it altogether. > > I'm also adding a link to the QuickStart guide on the trac wiki. The > guide itself needs a lot of

Re: [Freeipa-devel] [PATCH] Make the migration plugin more configurable

2010-12-01 Thread Jakub Hrozek
On Wed, Nov 24, 2010 at 04:54:19PM -0500, Rob Crittenden wrote: > Jakub Hrozek wrote: > >-BEGIN PGP SIGNED MESSAGE- > >Hash: SHA1 > > > >On 11/22/2010 04:21 PM, Jakub Hrozek wrote: > >>On 11/22/2010 04:16 PM, Jakub Hrozek wrote: > >>>The code handles it (I just ran a quick test with --schem