Re: [Freeipa-devel] [PATCH] 0267-dnsrecord-mod-ui

2011-07-13 Thread Endi Sukma Dewata
On 7/13/2011 4:03 PM, Adam Young wrote: 3. I cannot try this due to issue #2, but in CLI when the last data is removed using -mod the record itself will be deleted. The record has to be re-added before it can be modified again. A user might encounter this issue if he removes all existing data, cl

Re: [Freeipa-devel] [PATCH]0269-remove-HBAC-warning-from-static-UI

2011-07-13 Thread Endi Sukma Dewata
On 7/13/2011 2:02 PM, Adam Young wrote: This patch only affects development. ACK and pushed to master. -- Endi S. Dewata ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel

[Freeipa-devel] [PATCH]0269-remove-HBAC-warning-from-static-UI

2011-07-13 Thread Adam Young
This patch only affects development. From 36a6f33e34e034e002cf54fb344ede424fc742d0 Mon Sep 17 00:00:00 2001 From: Adam Young Date: Wed, 13 Jul 2011 15:01:17 -0400 Subject: [PATCH] remove HBAC warning from static UI --- install/ui/test/data/ipa_init.json | 91 ++--

Re: [Freeipa-devel] [PATCH] 0267-dnsrecord-mod-ui

2011-07-13 Thread Endi Sukma Dewata
On 7/12/2011 4:47 PM, Adam Young wrote: Some issues: 1. In DNS record adder dialog, the data field is required but it's not checked before submit. There is no param_info for this field, so the required flag may need to be specified explicitly in the field declaration. 2. Adding/deleting r

Re: [Freeipa-devel] [PATCH] 090 Remove sensitive information from logs

2011-07-13 Thread Martin Kosek
On Wed, 2011-07-13 at 15:13 +0200, Jan Cholasta wrote: > On 12.7.2011 10:16, Martin Kosek wrote: > > When -w/--password option is passed to ipa-replica-install it is > > printed to ipareplica-install.log. Make sure that the value of this > > option is hidden. > > > > https://fedorahosted.org/freeip

Re: [Freeipa-devel] [PATCH] 090 Remove sensitive information from logs

2011-07-13 Thread Jan Cholasta
On 12.7.2011 10:16, Martin Kosek wrote: When -w/--password option is passed to ipa-replica-install it is printed to ipareplica-install.log. Make sure that the value of this option is hidden. https://fedorahosted.org/freeipa/ticket/1378 ACK Honza -- Jan Cholasta

Re: [Freeipa-devel] [PATCH] 092 Filter reverse zones in dnszone-find

2011-07-13 Thread Martin Kosek
On Wed, 2011-07-13 at 14:41 +0200, Jan Cholasta wrote: > On 13.7.2011 14:08, Martin Kosek wrote: > > Implements a new option to filter out reverse zones. > > > > This patch also do some clean up in dns plugin - debug prints were > > accidentally left here in the last dns patch. > > > > https://fedo

Re: [Freeipa-devel] [PATCH] 092 Filter reverse zones in dnszone-find

2011-07-13 Thread Jan Cholasta
On 13.7.2011 14:08, Martin Kosek wrote: Implements a new option to filter out reverse zones. This patch also do some clean up in dns plugin - debug prints were accidentally left here in the last dns patch. https://fedorahosted.org/freeipa/ticket/1471 ACK Honza -- Jan Cholasta

[Freeipa-devel] [PATCH] 092 Filter reverse zones in dnszone-find

2011-07-13 Thread Martin Kosek
Implements a new option to filter out reverse zones. This patch also do some clean up in dns plugin - debug prints were accidentally left here in the last dns patch. https://fedorahosted.org/freeipa/ticket/1471 >From 905790a18ac39023307d3e46f89f3808d94f02a2 Mon Sep 17 00:00:00 2001 From: Martin

[Freeipa-devel] [PATCH] 29 Configure SSSD to store password if offline

2011-07-13 Thread Jan Cholasta
Enable the krb5_store_password_if_offline option in sssd.conf by default. To turn it off, use --no-krb5-offline-passwords option in ipa-client-install. https://fedorahosted.org/freeipa/ticket/1359 Honza -- Jan Cholasta >From 7cd7a371fa85410f2dd22250ed9473a6a28ab71e Mon Sep 17 00:00:00 2001 Fr

Re: [Freeipa-devel] [PATCH] 0001 (2) Convert nsaccountlock to always work as bool towards Python and JavaScript

2011-07-13 Thread Martin Kosek
On Fri, 2011-07-08 at 00:40 +0300, Alexander Bokovoy wrote: > On 08.07.2011 00:29, Adam Young wrote: > > On 07/07/2011 04:47 PM, Alexander Bokovoy wrote: > >> Hi, > >> > >> this is refactoring of the patch for ticket 1259 (handling of boolean > >> for nsaccountlock in LDAP). > >> > >> Now it is pos

Re: [Freeipa-devel] [PATCH] 821 reset failed count when password is reset by admin

2011-07-13 Thread Martin Kosek
On Wed, 2011-07-06 at 16:28 -0400, Rob Crittenden wrote: > Reset the login failed count to 0 when an admin (e.g. not the user) > resets the password. Otherwise a newly reset password could fail too. > > ticket https://fedorahosted.org/freeipa/ticket/1441 > > rob ACK. Works like a charm. Pushed

Re: [Freeipa-devel] [PATCH] 823 validate certificate subject base

2011-07-13 Thread Martin Kosek
On Thu, 2011-07-07 at 12:02 -0400, Rob Crittenden wrote: > Use John's new DN class to verify that the subject base passed into > ipa-server-install is valid. > > https://fedorahosted.org/freeipa/ticket/1176 > > rob Works fine for basic errors. But what if the DN is syntactically valid, but it m

Re: [Freeipa-devel] [PATCH] 813 fix enrolledBy regression

2011-07-13 Thread Martin Kosek
On Tue, 2011-07-12 at 15:11 -0400, Rob Crittenden wrote: > Martin Kosek wrote: > > On Fri, 2011-07-01 at 11:41 -0400, Rob Crittenden wrote: > >> enrolledBy represents the DN of the entry that enrolled a host. We don't > >> want an admin to manipulate this but an aci allowed it. This was a > >> regr