Re: [Freeipa-devel] Ticket #293

2011-05-16 Thread Jakub Hrozek
On 05/14/2011 03:27 AM, Adam Young wrote: I'm tripping over the solution to this ticket: https://fedorahosted.org/freeipa/ticket/293 I don't understand the statement: The key for a direct map is /- so only one can be in auto.master auto.master is the map. Do you mean that there cannot be

[Freeipa-devel] [PATCH] 067 A new flag to disable creation of UPG

2011-05-16 Thread Martin Kosek
This patch is based on old Pavel's patch. I am considering applying the patch for master branch only as it changes an API (adds a new flag) and is a sort of new-functionality-ish. -- Automatic creation may of User Private Groups (UPG) may not be wanted at all times. This patch adds a new flag

Re: [Freeipa-devel] Ticket #293

2011-05-16 Thread Adam Young
On 05/16/2011 04:01 AM, Jakub Hrozek wrote: On 05/14/2011 03:27 AM, Adam Young wrote: I'm tripping over the solution to this ticket: https://fedorahosted.org/freeipa/ticket/293 I don't understand the statement: The key for a direct map is /- so only one can be in auto.master auto.master is the

Re: [Freeipa-devel] Ticket #293

2011-05-16 Thread Rob Crittenden
Adam Young wrote: I'm tripping over the solution to this ticket: https://fedorahosted.org/freeipa/ticket/293 I don't understand the statement: The key for a direct map is /- so only one can be in auto.master auto.master is the map. Do you mean that there cannot be more than one direct map in a

Re: [Freeipa-devel] [PATCH] 156 Customizable facet groups.

2011-05-16 Thread Endi Sukma Dewata
On 5/16/2011 11:23 AM, Endi Sukma Dewata wrote: The IPA.entity has been modified to support customizable facet groups. The default list of facet groups is defined in IPA.entity_header and can be overridden in the entity definition. The patch has been fixed to handle missing relationships in

Re: [Freeipa-devel] [PATCH] 19 Do stricter checking of IP addressed passed to server install

2011-05-16 Thread Jan Cholasta
On 16.5.2011 17:26, Martin Kosek wrote: On Tue, 2011-05-10 at 20:11 +0200, Jan Cholasta wrote: Split from patch 3, requires patch 18. https://fedorahosted.org/freeipa/ticket/1213 Honza I tested all patches (3.6, 18, 19), but I think some work still needs to be done: 1) What about adding

Re: [Freeipa-devel] [PATCH] 156 Customizable facet groups.

2011-05-16 Thread Adam Young
On 05/16/2011 12:56 PM, Endi Sukma Dewata wrote: On 5/16/2011 11:23 AM, Endi Sukma Dewata wrote: The IPA.entity has been modified to support customizable facet groups. The default list of facet groups is defined in IPA.entity_header and can be overridden in the entity definition. The patch

[Freeipa-devel] [PATCH] 157 Read-only association facet.

2011-05-16 Thread Endi Sukma Dewata
The IPA.association_facet has been modified to take a read_only parameters. If the parameter is set to true, the Enroll and Delete buttons will not be shown. All facets under the memberindirect and memberofindirect facet groups are marked as read-only. Ticket #1030 -- Endi S. Dewata From

[Freeipa-devel] [PATCH] 784 limit what attributes may be modified

2011-05-16 Thread Rob Crittenden
Add option to limit the attributes allowed in an entry. Kerberos ticket policy can update policy in a user entry. This allowed set/addattr to be used to modify attributes outside of the ticket policy perview, also bypassing all validation/normalization. Likewise the ticket policy was

Re: [Freeipa-devel] [PATCH] 067 A new flag to disable creation of UPG

2011-05-16 Thread Rob Crittenden
Martin Kosek wrote: This patch is based on old Pavel's patch. I am considering applying the patch for master branch only as it changes an API (adds a new flag) and is a sort of new-functionality-ish. -- Automatic creation may of User Private Groups (UPG) may not be wanted at all times. This

Re: [Freeipa-devel] [PATCH] 157 Read-only association facet.

2011-05-16 Thread Adam Young
On 05/16/2011 04:47 PM, Endi Sukma Dewata wrote: The IPA.association_facet has been modified to take a read_only parameters. If the parameter is set to true, the Enroll and Delete buttons will not be shown. All facets under the memberindirect and memberofindirect facet groups are marked as

Re: [Freeipa-devel] [PATCH] 050 KDC autodiscovery may fail when domain is not realm

2011-05-16 Thread Rob Crittenden
Martin Kosek wrote: How to test: 1) Install IPA server with DNS support with --realm=TESTRELM (different from DOMAIN) 2) Configure client machine to use this DNS server 3) Run ipa-client-install on the client machine - Unpatched installer fails because it cannot find KDC for DNS domain testrelm